Support Tipalti’s third-party risk management program
Conduct vendor onboarding risk assessments (security questionnaires, due diligence reviews)
Maintain and update the vendor risk register and assessment pipeline
Review vendor SOC 2 reports, security documentation, and certifications
Track vendor risk findings and follow up on remediation commitments
Support periodic vendor reassessments based on risk tier
Coordinate with internal stakeholders (Procurement, Legal, IT) on vendor reviews
Assist in building and improving TPRM workflows and documentation
Manage assessments within the GRC platform (Drata)

Basic understanding of information security concepts (CIA triad, access control, data classification)
Familiarity with compliance frameworks (ISO 27001, SOC 2)
Strong organizational and communication skills
Ability to read and interpret vendor security documentation
Attention to detail and structured thinking
Experience with GRC tools (Drata, Vendict, or similar) (Advantages)
Basic knowledge of data privacy regulations (GDPR, CCPA) (Advantages)
Any security certification progress (CompTIA Security+, ISO 27001 Foundation) (Advantages)

Junior GRC/Compliance Analyst

Key skills