RefolkCandidates
JobsBuild my resume

Third Party Risk Management and Customer Trust Lead

Replit · Foster City, CA

$210k - $270k/yrRemoteMid levelEngineeringITSecurityPosted 3 weeks ago
Apply with a tailored resumeView the original posting

About this role

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. ABOUT THE ROLE: Replit’s ecosystem is powered by an expanding array of external services and essential AI model partners. As our lead for Security Vendor Risk & Contract Reviews, you will architect and execute a risk management program focused on substantive evaluation rather than just processing checklists. You’ll analyze SOC 2 documentation, security assessments, and system architectures to determine actual risk profiles, collaborating with our Legal team to secure necessary contractual protections. This role reports to the Head of Security GRC and involves high-impact partnerships across Legal, Engineering, and Product teams. WHAT YOU'LL DO - Run substantive third-party risk management (TPRM), independently evaluating real risk, not just processing questionnaire responses - Review SOC 2 reports, pen test findings, and architecture documentation to form an independent view of vendor risk, extending the same rigor to AI/model providers - Partner with Legal on vendor and AI contract terms, including DPAs, subprocessor agreements, and AI-specific provisions - Review contracts for non-standard security language when flagged by Legal or deal desk, and recommend redlines - Maintain the vendor and AI/model risk register, feeding findings into the company's master risk register - Enable sales through maturing the customer trust program - Build the capability for continuous monitoring of vendor ecosystem REQUIRED SKILLS & EXPERIENCE - 8+ years in third-party/vendor risk management, security risk, or a related GRC role - Demonstrated ability to independently assess vendor risk rather than relying on questionnaire responses alone, fluent in reading SOC 2 reports, ISO certificates, pen test summaries, and architecture documentat

Excerpt from the posting Replit published. Read the full description on their site before applying.

Skills this posting mentions

CCPAData PrivacyParalegal

About Replit

We’re on a mission to make programming collaborative, accessible, and fun for everyone. Creating the future of computing is a team effort, though

All 88 openings at Replit

Apply to this role, tailored

Queue Third Party Risk Management and Customer Trust Lead at Replit and I will read the posting, rewrite your resume against it, draft the cover letter, and score the fit before you send anything.

Applications finish as drafts. Nothing is sent until you read it and press send. New accounts start with 500 free credits.

Tailor my applicationHow it works

More roles at Replit

See all

Similar roles elsewhere

See more

Listed from the job board Replit publishes. Refolk is not the employer and does not handle their hiring. Applications go to Replit directly.