Replit
Third Party Risk Management and Customer Trust Lead
Foster City, CA · Full-time
Sponsorship not specifiedDetected 11 days ago
Machine LearningLLMsComplianceContract ManagementCollaborationCISSP
About the role
- You'll analyze SOC 2 documentation, security assessments, and system architectures to determine actual risk profiles, collaborating with our Legal team to secure necessary contractual protections.
- This role reports to the Head of Security GRC and involves high-impact partnerships across Legal, Engineering, and Product teams.
- Run substantive third-party risk management (TPRM), independently evaluating real risk, not just processing questionnaire responses
Responsibilities
- Partner with Legal on vendor and AI contract terms, including DPAs, subprocessor agreements, and AI-specific provisions
- Maintain the vendor and AI/model risk register, feeding findings into the company's master risk register
- Build the capability for continuous monitoring of vendor ecosystem
- Experience building repeatable, scalable vendor review processes rather than inheriting an existing one
Requirements
- Demonstrated ability to independently assess vendor risk rather than relying on questionnaire responses alone, fluent in reading SOC 2 reports, ISO certificates, pen test summaries, and architecture documentation
Nice to have
- Direct experience assessing foundation model providers or AI/ML vendors specifically
- Experience automating or streamlining third-party review workflows (e.g., continuous vendor monitoring, automated evidence pulls) is a plus
- Familiarity with NIST AI RMF, ISO 42001, or the EU AI Act
- Background at an AI-native product company or an LLM/model provider
- Paralegal experience or formal contract review training
- Relevant certifications (CTPRP, CISSP, CIPP/E)
- Meet the Replit Agent https://www.youtube.com/watch?v=IYiVPrxY8-Y
- This is a full-time role that can be held from our Foster City, CA office.
Skills
- 8+ years in third-party/vendor risk management, security risk, or a related GRC role
- Experience reviewing or redlining security and data-handling contract language, ideally in partnership with a legal team
- Working knowledge of data privacy fundamentals (GDPR, CCPA) as they relate to vendor and subprocessor relationships
- Strong cross-functional collaboration skills - this role touches Legal, Engineering, Product, and Sales regularly
Compensation
- 💰 Competitive Salary & Equity
Benefits
- 💰 Competitive Salary & Equity
- ⚕️ Health, Dental, Vision and Life Insurance
Company info
- Replit Blog https://blog.replit.com/
- Amjad TED Talk https://youtu.be/kCudFI4tcpg?si=l4ViCejV_f2RZkDi
- Operating Principles https://blog.replit.com/operating-principles
- Reasons not to work at Replit https://blog.replit.com/reasons-not-to-join-replit
- Replit is the agentic software creation platform that enables anyone to build applications using natural language.
This listing is sourced directly from Replit's careers page and normalized into a canonical job model.