GRC Analyst, Third-Party Risk Management

Responsibilities

• Assess third-party risk across new and existing systems to support a scaling vendor risk program
• Drive automation and efficiency in the TPRM program using tools like Zip and Vanta
• Partner with Procurement, Legal, and Privacy teams to identify, document, and mitigate vendor risks throughout the lifecycle
• Provide programmatic updates on third-party and technical risks to Information Security leadership
• Collaborate with engineering teams to collect evidence for audits and implement security controls across SaaS platforms

Requirements

• 3+ years of experience in the governance, risk, and compliance (GRC) space
• Proven experience implementing or maintaining vendor-risk programs
• Experience performing security and maturity assessments, including reviewing certifications and penetration tests
• Experience maintaining risk registers, compliance inventories, and control mappings
• Ability to manage vendor integration risks and permission scoping across SaaS platforms (e.g., Okta, Slack, Salesforce)
• Strong ability to translate complex technical findings into clear business risks for non-technical stakeholders

Preferred Qualifications

• Experience working with NIST Cybersecurity Framework, SOC 2, or ISO 27001
• Experience creating workflows through automation and AI assistance
• Proficiency with GRC and procurement platforms such as Zip and Vanta
• Experience managing high volumes of vendor requests in a fast-paced environment

About the Company

Samsara is the pioneer of the Connected Operations™ Cloud, helping organizations harness IoT data to improve safety, efficiency, and sustainability. We are digitizing large sectors of the global economy, including agriculture, construction, and transportation.