OutSystems
Lead Analyst, Security Strategy & Assurance
US - Remote · Senior
Stay score
odds of building a lasting career here
Thin sponsorship signal and lottery-bound. A low-probability bet with your clock running. Prioritize cap-exempt roles and proven entry-level sponsors first.
Lottery odds assume a STEM candidate.
Personalize to your clock →Employer immigration record
from this employer's Department of Labor filings
Green-card filing pattern in this occupation
Files H-1B transfers
Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.
Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- If you are someone who brings deep expertise in vendor risk and compliance, excels at breaking down ambiguous goals into actionable programs, and wants to leave a measurable imprint on an organization's security posture, we want to meet you.
Responsibilities
- Own and Mature the Third Party Risk Management Program
- Define and drive OutSystems' TPRM strategy, including risk tiering methodology, assessment frameworks, and ongoing monitoring cadences for critical and high-risk vendors.
- Lead end-to-end vendor risk assessments and architect scalable processes that can grow with the business.
- Proactively identify gaps between current TPRM practices and industry standards, and build solutions to close them.
- Partner with Digital, Procurement, Legal, and Engineering to embed risk requirements into vendor selection and contracting, influencing how partner teams operate.
- Maintain the vendor risk inventory, track remediation of identified issues, and report status to leadership with clarity and consistency.
- Lead Enterprise Risk Activities
- Own and evolve the enterprise risk register for the Security division, ensuring risks are consistently identified, assessed, and treated across business units.
- Design and facilitate risk workshops with functional and business leaders to surface emerging risks and validate control effectiveness.
- Develop key risk indicators (KRIs) and produce executive-level risk reporting, including dashboards and trend analyses, that connect security posture to business outcomes.
Requirements
- Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent experience.
- 7-10 years of experience in information security, risk management, or compliance, with at least 3-4 years focused on third-party or vendor risk.
Nice to have
- Familiarity with GRC platforms.
- Knowledge of emerging third-party risk regulations such as DORA, NIS2, or CMMC.
- Experience with PCI DSS, HIPAA, or regional compliance frameworks.
- Background in a SaaS or cloud technology company environment.
- Experience mentoring or coaching junior team members.
- A company at the vanguard of the agentic revolution, where we don't just react to AI innovation-we architect it.
- Joining OutSystems means stepping onto a high-growth rocket ship that combines the fearless agility of a startup with the sophisticated, global foundation of an enterprise powerhouse.
- Real growth opportunities.
Company info
- There are NO limits to your career: come shape the future and be part of a truly unique global culture at OutSystems!
- As the future becomes agentic, our customers need us now more than ever.
- While we are leading the charge into the agentic era, our mission is broader: we are the platform enterprise leaders trust to evolve their entire business, accelerating innovation through secure, governed human-AI collaboration.
This listing is sourced directly from OutSystems's careers page and normalized into a canonical job model.