Jobs in the United States

25+ jobs

Group jobs by employerEmail me new jobs Save this search

Added just now
Sr Operations Dir, Continuum of Care
Kaiser Permanente
Reno, NV
Directs continuum of care operations to optimize patient care and support organizational goals. Oversees the development of strategy with stakeholders to identify factors contributing to…
Added just now
Associate, KP Ventures
Kaiser Permanente
Oakland, CA
…effectively across the organization; implementing an approach to program, project, and performance management that integrates strategy with day-to-day operations; utilizing local strategies…
Added just now
Commercial Credit Manager - HDFS
Harley-Davidson
Plano, TX
…review and approval of floorplan credit facilities, dealer support loans, reporting, training, mentoring, establishment and tracking of team goals and credit decisions up to established…
Added just now
Senior Software Engineer I - Data Engineering
Rocket Lab Corporation
Long Beach, CA
…that make this possible, providing long-term storage, data management, discovery, and access for data across all verticals. Our platforms enable data processing and automation at scale,…
Added just now
SN
Sales Representative
Sleep Number
Fairview, TX
- $47,000 to $58,000 USD / year
At Sleep Number, wellbeing isn’t a program - it’s part of who we are. We support team members and their families across emotional, financial, career, community, and physical health, all…
Added 1 min ago
SH
Patient Care Coordinator II (Medical Assistant), TV GI Clinic – Full Time, Days (08HR)
Stanford Health Care
PLEASANTON, CA
- $33.72 to $37.95 USD / hour
- Full-time
Communication and Coordination: Handle patient phone calls, prescription refills, and clinic support operations, manage CRM/In-Basket, and serve as a liaison between the provider, the…
Added 1 min ago
SH
PATIENT CARE COORD III (Medical Assistant)- Pulmonary Clinic- FT Day (8 hour)
Stanford Health Care
EMERYVILLE, CA
- $35.1 to $39.49 USD / hour
Health Monitoring and Reporting: Monitor and report patient's lab results, blood pressure logs, weight logs, and other health tracking for medication management.
Added 1 min ago
HG
H&M Department Manager - Arrowhead Towne Center
H&M Group
Glendale, AZ
- $23.56 to $27.09 USD / hour
Responsible for recruitment, onboarding, performance management, upskilling & developing your team in-store
Added 1 min ago
Copy of Distribution Operations Manager
Expeditors
Reno, NV
…trade puzzle; we make the world go round. Global supply chain management is what we do, and at the heart of Expeditors you will find professionalism, leadership, and a friendly environment,…
Added 1 min ago
Distribution Operations Manager
Expeditors
Milpitas, CA
…trade puzzle; we make the world go round. Global supply chain management is what we do, and at the heart of Expeditors you will find professionalism, leadership, and a friendly environment,…
Added 1 min ago
RT
Secondary French Lit Teacher/Professeur de Lettres
Rochambeau, The French International School of Washington DC
Bethesda, MD
- $51,908 to $110,424 USD / year
Added 1 min ago
ES&S Technician
THE DOW CHEMICAL COMPANY
Orange, TX
This is a 12-hour rotating shift position · Must have a current, valid US Driver’s License
Added 1 min ago
Senior Pilot Plant Technician
THE DOW CHEMICAL COMPANY
Freeport, TX
This role will contribute to new catalyst/process development, process scale-up, and product sales support through batch validation and safe, reliable pilot plant operations. The successful…
Added 1 min ago
Maintenance Technician (New Construction)
Richman Property Services
Austin, TX
Valid Driver's License required
Added 1 min ago
Licensed Practical Nurse LPN - Ovation Sienna Hills / Washington, UT
Ovation
UT · Washington, UT
Must possess a nursing degree from an accredited college · Must possess a current, unencumbered, active license to practice as a Licensed Practical Nurse in this state
Added 2 mins ago
Senior Plant Materials Application Engineer
GE Gas Turbines (Greenville) L.L.C.
United States
Make and defend decisions on moderately complex operational, manufacturing, technology, or engineering problems, using data analysis to support your recommendations.
Added 2 mins ago
Training Leader - 1st Shift
GE Vernova International LLC
United States
…methodology, you will build a standardized, highly effective training program from the ground up. This is a hands-on, foundational role where you will work directly with lean leaders, shop…
Added 2 mins ago
Power Systems AI/ML Software Engineer
GE Energy Management Services, LLC
United States
…products for grid monitoring, analysis and operator decision…
Added 2 mins ago
Government Compliance Audit & Oversight Leader
GE Vernova Hitachi Nuclear Energy Americas LLC
Remote, United States
Track new laws and regulations, including the Federal Acquisition Regulation (FAR), Office of Management and Budget (OMB) Uniform Guidance, and Cost Accounting Standards (CAS). Update…
Added 2 mins ago
Gas Turbine Controls Configuration Management Leader
GE Vernova Operations LLC
United States
Oversee workload, capacity, delivery performance, and quality to support reliable execution across configuration management activities.
Added 2 mins ago
Capex Lifecycle Leader
GE Vernova International LLC
United States
You'll be responsible for standardizing and improving the processes, models, and systems that support capital expenditure decisions across the business. This includes defining investment…
Added 2 mins ago
P
Parker-Anderson Enrichment: After-School Substitute Instructor
PAE
United States
- $18.5 to $30 USD / hour
Support social-emotional growth through positive classroom management.
Added 2 mins ago
Production Leader - 1st Shift
GE Vernova International LLC
United States
Includes direct people management responsibility including staffing and performance development. Utilizes in-depth knowledge of a technical discipline and analytical thinking and technical…
Added 2 mins ago
Lead Generator Project Engineer-1
GE Gas Turbines (Greenville) L.L.C.
United States
The Lead Generator Project Engineer provides technical project management, technical direction, and drives coordination of engineering activities and critical issue resolution for…
Added 2 mins ago
Lead Generator Project Engineer-2
GE Gas Turbines (Greenville) L.L.C.
United States
The Lead Generator Project Engineer provides technical project management, technical direction, and drives coordination of engineering activities and critical issue resolution for…

SpaceXSI

Sr. Security Analyst, Third Party Risk Management

Austin, TX, United States
NY, United States
Palo Alto, CA, United States
Washington, DC, United States

$132,000 - $228,000 USD

Apply on job-boards.greenhouse.io About employer

Applications open in a new tab.

Job details

Pay: $132,000 - $228,000 USD
Experience: 7+ years of third-party risk, vendor security, cybersecurity GRC, or technology audit experience (mid-to-senior scope)
Posting language: English
Posted: Nov 10, 2026

Original job description

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars.

SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next.

SR. SECURITY ANALYST, THIRD PARTY RISK MANAGEMENT

We are seeking a mid-to-senior Governance, Risk, and Compliance (GRC) professional focused on third-party risk management (TPRM) to own and scale our vendor risk program as SpaceXSI grows. This role sits at the intersection of cybersecurity GRC, vendor management, and procurement: you will assess the full range of third parties the company depends on - software and SaaS providers, cloud and infrastructure partners, AI model and data providers, professional services firms, and other suppliers - from intake and due diligence through ongoing monitoring and offboarding. The ideal candidate brings a cybersecurity and GRC perspective - fluent in how cloud services, identity and access management, encryption, data flows, and AI/LLM systems actually work in production - and can translate assessment findings into clear, risk-based decisions on residual risk and compensating controls rather than simply documenting issues. You will collaborate across procurement, legal, security, privacy, engineering, and business owners to keep third-party risk clear, proportionate, and actionable across enterprise, commercial, and public-sector environments.

RESPONSIBILITIES:

Own the end-to-end third-party risk lifecycle - intake, inherent risk tiering, due diligence, risk decisioning, contracting support, ongoing monitoring, and offboarding - for vendors and partners across the company
Design and maintain the risk-tiering methodology and inherent risk questionnaire based on data sensitivity, system and network access, business criticality, and regulatory exposure, so that assessment depth matches actual risk and lower-risk vendors move quickly
Conduct security, privacy, and business due diligence: issue and review security questionnaires (e.g., SIG, CAIQ, custom assessments), evaluate architecture diagrams and data flows, run follow-up sessions with vendor security teams, and coordinate business checks such as corporate registration, reputational review, and insurance coverage with cross-functional partners
Critically review independent assurance reports and security documentation, including SOC 1/SOC 2 Type II reports, ISO 27001 and ISO 42001 certificates and Statements of Applicability, penetration test and vulnerability summaries, and bridge letters. Evaluate scope, carve-outs, exceptions, and complementary user entity controls (CUECs) that SpaceXSI must operate
Translate findings into clear risk decisions: weigh residual risk and compensating controls, recommend approval, conditional approval, or rejection, and document risk exceptions and risk acceptances with clear rationale, owners, and expiration dates
Partner with Legal and Procurement to define and negotiate contract security terms, including security and data protection exhibits, DPAs, breach notification, right-to-audit, sub-processor clauses, and data retention and deletion requirements, and ensure SpaceXSI's compliance obligations flow down to vendors and sub-processors
Assess the risk of AI vendors and AI-enabled services, including model and data handling, training-data use and boundaries, prompt and output controls, data residency, and alignment with AI governance frameworks (e.g., NIST AI RMF, ISO 42001, EU AI Act)
Oversee fourth parties and sub-processors: map critical downstream dependencies, track sub-processor changes, and assess concentration, business continuity, and supply-chain risk for critical vendors
Run continuous monitoring of the vendor population using security ratings, breach and threat intelligence, certification expirations, and tier-based reassessment cadences, and lead third-party response when a vendor has a security incident
Maintain the third-party risk register and track issues, findings, and remediation plans with vendors and internal owners through to closure, with defined SLAs and escalation paths
Operate and extend GRC platforms (e.g., Vanta) as the system of record for vendor inventory, assessments, and evidence; use automation, scripting, low-code, and AI-assisted workflows to streamline intake, tiering, questionnaire review, evidence collection, and reassessment
Develop and maintain TPRM policies, standards, procedures, and runbooks that align with SpaceXSI's control environment and frameworks such as SOC 2, ISO 27001, ISO 42001, and NIST CSF / SP 800-53, and support internal and external audits with third-party evidence
Create and present concise reporting on vendor risk posture, program health, open findings, high-risk vendors, and emerging third-party risk themes to GRC, Security, and business leadership, and guide business owners on TPRM requirements and expectations

BASIC QUALIFICATIONS:

Bachelor's degree in computer science, information security, cybersecurity, or in an engineering/STEM discipline
5+ years of experience in third-party risk management, vendor security, cybersecurity GRC, IT audit, or a role in security, with hands-on responsibility for performing assessments rather than only administering a program

PREFERRED SKILLS AND EXPERIENCE:

7+ years of third-party risk, vendor security, cybersecurity GRC, or technology audit experience (mid-to-senior scope)
Experience building, scaling, or maturing a TPRM program at a technology, cloud, AI, or fintech company, ideally in a high-growth environment
Demonstrated experience running vendor security assessments end to end across a diverse vendor population, including issuing questionnaires, evaluating evidence, assigning risk ratings, and driving remediation
Hands-on experience reviewing SOC 2 reports, ISO 27001 certifications, and penetration test summaries, including identifying scope limitations, carve-outs, exceptions, and CUECs
Solid understanding of common security and compliance frameworks (e.g., SOC 2, ISO 27001, NIST CSF, NIST SP 800-53) and how vendor controls map to them
Working technical fluency on-prem and in cloud environments (AWS, GCP, or Azure), SaaS architectures, identity and access management, encryption, data flows, incident response, and business continuity and disaster recovery - enough to evaluate vendor responses and speak credibly with engineers and vendors
Experience partnering with Legal and Procurement on vendor contract security and privacy terms (e.g., security addendums, DPAs)
Strong written and verbal communication skills, with the ability to explain risk and tradeoffs to procurement, legal, engineering, and business audiences
Familiarity with AI governance topics relevant to vendor diligence (e.g., model data handling, training-data boundaries, ISO 42001 / NIST AI RMF concepts, EU AI Act awareness)
Experience with GRC and TPRM platforms such as Vanta, Drata, OneTrust, ServiceNow VRM, Archer, or similar, and with security ratings tools (e.g., SecurityScorecard, BitSight, UpGuard)
Experience managing supply chain and vendor risk for data center hardware, including hardware compliance
Experience automating TPRM workflows with scripting, low-code, or AI-assisted tooling, such as intake forms, tiering logic, questionnaire analysis, evidence collection, and reassessment triggers
Working knowledge of data privacy frameworks (e.g., GDPR, CCPA, HIPAA) as they apply to vendors and sub-processors
Experience with supply-chain and fourth-party risk analysis, including concentration risk and business continuity for critical vendors
Experience supporting internal audits, external audits, or regulatory examinations with third-party risk evidence
Comfort operating with ambiguity - setting precedent and documenting new standards where none exist, while keeping assessments consistent and defensible
Certifications such as CTPRP, CISSP, CISA, CISM, CRISC, CIPP/US, CIPT, ISO 27001 Lead Auditor, or similar preferred
Experience supporting public sector, financial services, or other highly regulated vendor oversight requirements (e.g., FedRAMP, NIST 800-171, PCI DSS, DORA) is a plus

ADDITIONAL REQUIREMENTS:

This role may require occasional travel
Ability to work effectively in a fast-paced, high-growth environment with evolving priorities
Must be able to handle sensitive vendor and security information with discretion

COMPENSATION AND BENEFITS:

$132,000 - $228,000 USD

Base salary is just one part of our total rewards package at SpaceXSI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks.

ITAR REQUIREMENTS:

To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.

SpaceXSI is an equal opportunity employer. For details on data processing, view our Recruitment Privacy Notice.

Apply on job-boards.greenhouse.io About employer

More about this job

Skills

Risk management
Cybersecurity
Vendor management
Procurement
Documentation
Data protection
Regulatory compliance
Supply chain management
Reporting
BASIC
Computer science
AWS
Google Cloud
Microsoft Azure
Identity and access management
Incident response
Implement ICT recovery system
Communication skills
ServiceNow
Internal auditing
CISSP
CISA
CISM

Report this job

Work requirements

Jobs in the United States