InfoSec Third Party Risk Management (TPRM) Specialist

About the role

Deel is seeking an experienced Information Security Third‑Party Risk Management (TPRM) Specialist to improve and oversee its vendor risk management program. You will design scalable processes to evaluate, monitor, and remediate third‑party risks across a global ecosystem of SaaS, cloud, and AI service providers.

Key responsibilities

• Design and manage vendor security assessment workflows, integrating tools such as Panorays and OneTrust.
• Develop and maintain risk scoring models, track key risk indicators, and escalate material changes.
• Own the questionnaire lifecycle, validate responses, and track remediation.
• Partner with procurement and legal to embed security requirements in contracts, SLAs, and data‑processing agreements.
• Monitor and respond to third‑party security incidents, leading investigations and remediation.
• Establish continuous monitoring of active vendors and maintain audit trails for all risk decisions.

Required profile

• 5+ years in Information Security with at least 3 years focused on third‑party risk management.
• Strong knowledge of compliance frameworks such as SOC2, ISO 27001, GDPR, and HIPAA.
• Experience translating security requirements into vendor contracts and negotiating security clauses.
• Analytical mindset capable of assessing complex vendor security postures and recommending mitigation strategies.

Required skills

• Panorays
• OneTrust
• Archer
• Gemini (AI automation)
• Claude (AI automation)
• SOC2
• ISO 27001
• GDPR
• HIPAA