Senior InfoSec Engineer, Vendor Risk (TPRM)

About the role

We are seeking an experienced Information Security leader to own third‑party risk as a strategic function at Deel. The role will design and scale a vendor risk program that leverages AI‑driven automation, moving vendor security from reactive compliance to proactive risk intelligence across our global SaaS, cloud and AI vendor ecosystem.

Key responsibilities

• Design intelligent vendor assessment workflows using AI‑powered tools (Panorays, OneTrust) to automate intake, questionnaire parsing and risk scoring.
• Lead end‑to‑end security reviews of third‑party SaaS, cloud and AI providers, translating findings into clear go/no‑go decisions.
• Develop and maintain vendor risk scoring models, real‑time KRI dashboards and continuous monitoring processes.
• Partner with procurement, legal and compliance to embed security requirements into contracts, SLAs and audit obligations.
• Manage vendor incident response, breach investigations and remediation tracking.

Required profile

• 5+ years of Information Security experience with at least 3 years focused on third‑party risk management or supply‑chain security.
• Hands‑on experience configuring and operating AI‑driven TPRM platforms such as Panorays or OneTrust.
• Deep knowledge of security frameworks and certifications (SOC 2, ISO 27001, GDPR, HIPAA).
• Proven ability to translate complex security data into actionable risk decisions for procurement.

Required skills

• Panorays
• OneTrust
• SOC 2
• ISO 27001
• GDPR
• HIPAA
• AWS, Azure, GCP
• Container orchestration