Staff, Third Party Risk Management

Okta•Chicago, WA

1d•Hybrid

About The Position

Okta is seeking a Staff, Third Party Risk Management professional to advance its third-party risk management (TPRM) program and support the company’s security strategy. The role leads complex third-party security assessments, evaluates technical and integration risks, and guides remediation with suppliers and internal stakeholders. It also drives automation across the TPRM lifecycle, including custom AI agents, workflows, and analytics that improve risk-data processing, operational scale, and executive reporting. The position works with global cross-functional stakeholders and third-party suppliers to improve onboarding and offboarding, conduct vendor reviews and continuous monitoring, and refine assessment methods and procedures. It supports program maturity as well as ad hoc security, program-enhancement, and GRC initiatives.

Requirements

Relevant BA/BS degree.
At least 7 years of experience conducting third-party security assessments across regulations and industry frameworks, including ISO 27001, PCI, and NIST or other relevant global security frameworks.
Hands-on experience building automated workflows, scripts using Python and APIs, and AI agentic solutions.
Ability to analyze and interpret third-party security artifacts, certifications, and technical reports such as SOC 2 Type II, ISO 27001, FedRAMP, and SIG.
Ability to communicate effectively with internal and external stakeholders and ensure security requirements are understood while business needs are appropriately prioritized.
Hands-on experience with GRC and TPRM platforms and solutions.
Deep understanding of foundational security principles and standard methodologies, including logging, data handling, authorization, and authentication.
Excellent verbal, written, and interpersonal skills.
Ability to manage multiple priority initiatives and deliver results under tight timelines.
Comfort with ambiguity and adaptability in fast-changing environments.

Responsibilities

Lead complex third-party security assessments and communicate risk trade-offs to leadership.
Engineer custom AI agents, capabilities, and workflows to automate the TPRM lifecycle, integrate tool outputs, optimize risk-data processing, and scale operations.
Analyze technical and integration risks to improve supply-chain risk visibility and evaluate potential blast radius.
Drive risk remediation with third parties and internal stakeholders, providing actionable guidance aligned with Okta security standards.
Develop and maintain relationships with global cross-functional stakeholders and third-party suppliers.
Partner with cross-functional teams to streamline third-party onboarding and offboarding workflows.
Design and execute third-party reviews, continuous vendor monitoring, and event-driven reassessments.
Develop data analytics workflows and establish KRIs and KPIs for team metrics and executive reporting.
Develop, maintain, and refine standardized risk-assessment methodologies, playbooks, and procedures.
Drive TPRM program maturity and execution, aligning governance with company goals and security strategy.
Support ad hoc projects, including program enhancements, security initiatives, and other GRC functions.