Lead third-party risk management efforts by conducting security assessments and driving automation in a hybrid work environment.
Posted by employer 18 hours ago
First seen on Joblaze 2 hours ago
Last verified on the company career page 2 hours ago
What you'll build
- Lead complex third-party security assessments
- Drive technical automation across the TPRM lifecycle
- Analyze technical and integration risks
- Drive risk remediation with third parties
- Develop data analytics workflows
Must have
- 7+ years of working experience conducting security assessments
- Hands-on experience building automated workflows
- Strong ability to analyze and interpret third-party security artifacts
- Hands-on experience of GRC and TPRM platforms
- Deep understanding of foundational security principles
AI in the day-to-day
Drive technical automation across the TPRM lifecycle by engineering custom AI agents.
Requirements
- Experience
- 7+ years
- Education
- Bachelor's degree
Not disclosed in this posting: visa sponsorship.
Benefits
Joblaze summary
In the role of Staff, Third Party Risk Management at Okta, the individual will lead complex security assessments of third-party vendors while communicating risk trade-offs to leadership. Key skills include expertise in security frameworks like ISO 27001 and hands-on experience with automation tools, particularly in Python and AI solutions. This position is suited for seasoned professionals with over seven years of relevant experience who can navigate technical risks and foster relationships with stakeholders. The role emphasizes driving program maturity and aligning risk governance with the company's security strategy.
Joblaze insights
- Listed today — first seen on Joblaze October 21, 2026. Last confirmed on Okta's careers page October 21, 2026.
- Salary band is below the typical range for Security roles (median ~$170,000).
- Starts above 2% of 50 comparable staff security roles in United States that list Python we track (median $210,000 across 28 companies). See Python salary trends
- Python appears in 46.5% of 127 comparable staff security roles in United States; NIST appears in 0.8% of 127 comparable staff security roles in United States.
Quick facts
- Is the Staff, Third Party Risk Management role remote?
- It's hybrid — Okta expects some on-site time in Bellevue, Washington, United States.
- What's the salary range?
- Okta lists $148,000–$204,000 for this role.
- How much experience is required?
- At least 7 years of relevant experience for this Staff, Third Party Risk Management role.
- Where is the role based?
- Okta is hiring for this position in Bellevue, Washington, United States.
- What's the tech stack?
- Joblaze extracted these technologies from the posting: AI, ISO 27001, NIST, PCI, Python.
- What seniority level is this role?
- Okta targets staff-level candidates for this position.
- Is this full-time or contract?
- Full-time for this Staff, Third Party Risk Management role at Okta.
From the original posting
Secure Every Identity, from AI to Human
Staff, Third Party Risk Management
Responsibilities:
- Lead complex third-party security assessments and communicate risk trade-offs to leadership.
- Drive technical automation across the TPRM lifecycle by engineering custom AI agents, capabilities, and workflows to integrate tool outputs, optimize risk data processing and scale operations.
- Analyze technical and integration risks to establish deeper supply-chain risk visibility and evaluate potential blast radius.
- Drive risk remediation with third parties and internal stakeholders, providing actionable guidance in alignment with Okta security standards.
- Develop and maintain strong relationships with global cross functional stakeholders and third party suppliers.
- Partner with cross-functional teams to streamline and optimize third-party onboarding and offboarding workflows.
- Design and execute third-party review activities, continuous vendor monitoring, and event-driven re-assessments.
- Develop data analytics workflows and establish KRIs and KPIs to elevate team metrics and executive reporting.
- Develop, maintain, and continuously refine standardized risk assessment methodologies, playbooks, and procedures.
- Drive TPRM program maturity and execution, aligning third-party risk governance with the company’s goals and security strategy.
- Support ad hoc projects including program enhancements, security initiatives, and other GRC functions.
Requirements:
- Relevant BA/BS degree.
- 7+ years of working experience conducting security assessments on Third Parties across regulations and common industry frameworks including but not limited to ISO 27001, PCI, NIST or other global relevant security frameworks.
- Hands-on experience building automated workflows, scripts (Python/APIs), and AI agentic solutions.
- Strong ability to analyze and interpret third-party security artifacts, certifications, and technical reports (e.g., SOC 2 Type II, ISO 27001, FedRAMP, SIG).
- Ability to effectively communicate with both internal and external stakeholders, and ensure security requirements are understood and business needs are prioritized appropriately.
- Hands-on experience of GRC and TPRM platforms and solutions.
- Deep understanding of foundational security principles, standard methodologies (i.e. logging, data handling, authorization, authentication).
- Excellent verbal, written, and interpersonal skills.
- Ability to manage multiple priority initiatives and deliver results under tight timelines.
- Comfortable with ambiguity and adaptable to fast changing environments.
#LI-HYBRID
P5638_3588709
Below is the annual base salary range for candidates located in California (excluding San Francisco Bay Area), Colorado, Illinois, New York and Washington. Your actual base salary will depend on factors such as your skills, qualifications, experience, and work location. In addition, Okta offers equity (where applicable), bonus, and benefits, including health, dental and vision insurance, 401(k), flexible spending account, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies. To learn more about our Total Rewards program please visit: https://rewards.okta.com/us.
The Okta Experience
Standard company text repeated across Okta's postings is omitted here.