Vendor Due Diligence Specialist Jobs

A Career with Point72's Technology Team As Point72 reimagines the future of investing, our Technology team is constantly evolving our firm’s IT infrastructure and engineering capabilities, positioning us at the forefront of a rapidly evolving technology landscape. We’re a team of experts who experiment and work to discover new ways to harness open-source solutions, modern cloud architectures, and sophisticated Artificial Intelligence (AI) solutions, while embracing enterprise agile methodologies. Our commitment to building and innovating in the AI space provides the framework intended to drive smarter decision making and enhance how we build and operate our platforms and applications. As a member of Point72’s Technology team, we encourage and support your professional development from day one—helping you advance your technical skills, contribute innovative ideas, and satisfy your own intellectual curiosity while delivering real business impact for our multi-billion-dollar global business. WHAT YOU'LL DO Serve as a technical subject matter expert within our firm’s third-party information security risk management program Perform in-depth security assessments of new and existing third parties that access, process, store, or transmit firm information Evaluate the design and effectiveness of third-party security controls across technical environments and service delivery models Analyze business use cases, data flows, system integrations, and technical architectures to establish appropriate risk context Review security evidence, including assurance reports, certifications, penetration tests, vulnerability assessments, policies, and architecture documentation Assess controls across identity, cloud and infrastructure security, network security, vulnerability management, data protection, monitoring, incident response, and application security Engage third parties and internal technical stakeholders to validate responses, investigate control gaps, and evaluate remediat

Banking hasn't changed much in decades. We're changing that. One product at a time. Lunar is a Nordic challenger bank building the future of financial life with AI at the core. Our engineers, designers, and product people work on problems that actually matter. Making money simpler, smarter, and more rewarding for over a million registered users across the Nordics. Fully licensed and founded in 2015, with offices in Copenhagen, Aarhus and Stockholm. We move fast, we build with purpose, and we're just getting started. As our new Third Party Risk Management Specialist you'll join Legal & First Line Risk in Aarhus, reporting to our Director of Legal & First Line Risk. You'll own third party risk across the vendor lifecycle, working closely with procurement, with ICT third party risk under DORA at the centre of the job. Most of what Lunar buys is technology, so DORA's rules are the rulebook for most of this role, with the EBA guidelines covering the rest. Procurement owns sourcing, price and negotiation. You own the risk and sit alongside procurement rather than inside it, so the risk view stays independent of the deal: assessing what the risk is and what the contract needs to say before we sign, then tracking whether the vendor delivers, whether the risk has changed, and whether we could exit if we had to. What will you do? Assess before we sign. Run risk-based classification, due diligence and risk assessments as part of procurement, with a sharp eye for ICT services that support critical or important functions, including cloud, subcontracting chains and where our data sits. Set the contract requirements. Turn the risk picture into contract requirements together with Legal, including DORA Article 30 terms, SLAs, audit rights and exit rights, and support the business in negotiations. Follow up after we sign. Track performance against SLAs, run vendor reviews with business owners, follow ICT incidents, assurance reports such as ISAE 3402 and SOC 2, and security test resu

About Yondr Yondr is a disruptor. We challenge convention and simplify complexity. A global developer, owner operator and service provider of data centers, we deliver complex data center capacity needs for the world’s largest tech companies. Our exponential growth sees us looking for extraordinary people to help accelerate us towards our vision: a tomorrow without constraints. But we can’t do this without you. About the Role We are looking for a qualified Preconstruction Manager responsible for leading and managing all preconstruction activities for data center projects from concept through to construction handover. This includes due diligence, budgeting, scheduling, design coordination, estimating, risk management, and value engineering. The role ensures alignment between project scope, budget, and schedule while collaborating with internal stakeholders, design teams, contractors, and vendors to support successful data center development. Main Responsibilities / Lead preconstruction efforts for all projects from market evaluation, test fit development, and due diligence to design, permitting and construction hand off. / Lead the selection, negotiation, and contracting of design vendors including architects, engineers, and specialized consultants. / Oversee vendor performance to ensure design deliverables are aligned with project timelines, scopes, and quality standards. / Collaborate closely with architects, engineers, and internal stakeholders (e.g., operations, IT, real estate) to ensure design decisions align with technical requirements, operational needs, and budget constraints. / Prepare and maintain detailed preconstruction schedules, tracking milestones and key deliverables. / Prepare budgets and comprehensive capital expenditure (CapEx) requests aligned with project milestones, including detailed breakdowns of costs for due diligence, design, pe

About the Role: We are seeking an experienced Risk Management professional to lead and strengthen the organisation's Operational Risk and Outsourcing Risk Management framework. The role will be responsible for identifying, assessing, monitoring, and mitigating operational and third-party risks across payment products, merchant acquiring, cross-border payments, and outsourced business operations. The incumbent will work closely with business, operations, compliance, technology, audit, and leadership teams to ensure adherence to regulatory requirements, network guidelines, and internal risk policies. Key Responsibilities Operational Risk Management: Develop, implement, and enhance the Operational Risk Management (ORM) framework, including Risk and Control Self-Assessments (RCSAs), across the organisation. Identify, assess, monitor, and mitigate operational risks arising from payment operations, merchant onboarding, transaction processing, and customer servicing. Drive corrective action plans arising from RCSA findings and control gaps. Monitor Key Risk Indicators (KRIs), operational losses, incidents, and control effectiveness. Lead root cause analysis and remediation for operational risk events. Own SOP and policy lifecycle management — including drafting, versioning, and periodic review — for all operational risk policies and procedures. Outsourcing Risk Management: Manage end-to-end outsourcing risk governance for third-party vendors involved in KYC verification, PAN validation, customer onboarding, payment processing, and other critical functions. Maintain and operate a vendor categorisation framework (IT/Non-IT, critical/non-critical outsourcing) and ensure risk assessments are calibrated to vendor tier and exposure. Ensure compliance with RBI Outsourcing Guidelines, PA Master Directions 2025, and all applicable regulatory requirements. Conduct vendor due diligence, risk assessments, performance reviews, and periodic audits. Monitor SLA adherence, control ef

Omada Health is on a mission to bend the curve of chronic disease. Job overview: Omada Health is seeking a Director, Privacy Counsel to manage and mature our enterprise-wide privacy program across a complex and rapidly evolving regulatory landscape. This individual contributor role will operate at the intersection of healthcare regulatory law, consumer technology, and clinical operations, providing practical, business-oriented guidance that enables innovation while protecting our members’ data and trust. Reporting to the VP, Privacy and Healthcare Regulatory, you will serve as Omada’s primary operational privacy leader, partnering across Product, Engineering, Clinical, Commercial, and other key functions to design, implement, and continuously improve policies, processes, and controls that keep us compliant and ahead of emerging risks. Your impact: Manage Omada’s HIPAA privacy program, including policy and procedure development, incident investigations, and breach determination and response, ensuring compliance with HIPAA Privacy, Security, and Breach Notification Rules. Drive privacy-by-design across digital products and services by embedding privacy requirements into product development, engineering workflows, clinical operations, and other business processes. Execute Omada’s privacy risk assessment program, including data governance, vendor due diligence, and privacy review for commercial deals with employers, health plans, and PBMs, ensuring our contractual and regulatory obligations are met. Provide expert guidance on consumer privacy compliance, including state consumer health data and general consumer privacy laws, digital advertising, and tracking technologies. Serve as a key advisor on AI and emerging technologies, including AI privacy guidance and governance considerations across Omada’s AI and machine-learning initiatives. Support interoperability and health information exchange participation (e.g., Carequality, CommonWell, TEFCA) by counseling on privacy

Position Summary: We are seeking an experienced and dynamic Associate/Senior Associate – Vendor Onboarding to join our Procurement Operations team. The ideal candidate will have strong experience in Vendor Management, SAP MM, SaaS-based Procurement Platforms, MS Office, reporting, and stakeholder coordination. The role will be responsible for managing end-to-end vendor onboarding activities, coordinating with suppliers and internal stakeholders, ensuring compliance, and driving process efficiency through data analysis and reporting. Key Responsibilities: Vendor Onboarding & Management  Manage end-to-end vendor onboarding processes, including document collection, verification, due diligence, and system registration.  Coordinate with vendors through calls, emails, and meetings to ensure timely completion of onboarding requirements.  Ensure vendor master data accuracy and compliance with organizational policies.  Support vendor lifecycle management activities, including updates and maintenance of vendor records. SAP & Procurement Operations:  Work extensively on SAP MM and SaaS-based procurement platforms for vendor onboarding and master data management.  Coordinate between procurement, finance, compliance, and business teams to facilitate smooth onboarding.  Resolve onboarding-related issues and provide operational support to stakeholders. Dashboard & Reporting  Develop and maintain management dashboards, MIS reports, and performance trackers using MS Excel and other reporting tools.  Analyze onboarding metrics and generate actionable insights for management.  Monitor onboarding turnaround times and identify opportunities for process improvement. Stakeholder Management  Collaborate with internal business stakeholders to understand onboarding requirements and provide timely support.  Maintain strong relationships with vendors and internal teams.  Ensure effective communication and follow-up with all stakeholders to achieve onboarding targets. Require

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . We're hiring a Group Product Manager to lead the Compliance Agent Experience product team within our EAA organization. This team builds the internal tooling and AI-powered investigation experiences used by Compliance Operations to execute Coinbase's financial crime programs, including AML Transaction Monitoring, KYC, Enhanced Due Diligence, and Sanctions/Screening. You'll own the automation-first roadmap that enables investigators to triage alerts, assess risk, and document decisions faster and more accurately, so humans focus on high-judgment work while the platform handles repeatable tasks at scale. What you'll do: Own the Compliance Agent Experience product area end-to-end, from vision and strategy through execution, covering AML/TMS, KYC, EDD, and Sanctions/Screening investigation surfaces. Drive a multi-year roadmap for AI-assisted, human-in-the-loop investigation workflows that measurably reduce cycle time, improve decision quality, and increase automation adoption. Lead build-vs-buy and vendor strategy for investigation enablement (OSINT, case enrichment, LLM tooling), including evaluations and RFPs in partnership with Compliance, Legal, Security, and Procurement. Partner with Engineering, Data Science/ML, Compliance Program owners, and CX Operations to deliver integrated tooling that reduces context-switching and improves end-to-end investigation throughput.

At Asana, security is foundational to our mission of helping teams work together effortlessly. Our security team protects Asana’s employees, users, and customers by proactively addressing threats, ensuring compliance with legal and regulatory requirements, and fostering a culture of security throughout our product and operations. We are a team of security engineers and risk and compliance practitioners who build innovative safeguards and collaborate across the organization to build and maintain trust at scale. As the Third Party Risk Management Lead, you will be responsible for building and running Asana’s Third Party Risk Management (TPRM) program. You will own the end-to-end lifecycle of vendor security risk — from initial due diligence and risk tiering through ongoing monitoring and remediation. You will work closely with Procurement, Legal, Privacy, and Engineering teams to ensure that our third-party relationships are effectively assessed, tracked, and managed. This role is based in our Warsaw office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do, and your recruiter can share more about the in-office requirements. Our employees in Poland are employed under a contract of employment. What you’ll achieve Own and scale Asana’s TPRM program: Design, implement, and continuously improve a risk-based framework for assessing and managing third-party vendors and service providers. Establish risk tiering criteria, assessment workflows, and governance processes that scale with business growth. Lead vendor security assessments: Conduct and oversee security due diligence for new and existing vendors, including reviewing SOC 2 reports, ISO 27001 certifications, security questionnaires (SIG, CAIQ), and other relevant documentation. Identify gaps and work with vendors to remediate findings. Drive rem

At Asana, security is foundational to our mission of helping teams work together effortlessly. Our security team protects Asana’s employees, users, and customers by proactively addressing threats, ensuring compliance with legal and regulatory requirements, and fostering a culture of security throughout our product and operations. We are a team of security engineers and risk and compliance practitioners who build innovative safeguards and collaborate across the organization to build and maintain trust at scale. As the Third Party Risk Management Lead, you will be responsible for building and running Asana’s Third Party Risk Management (TPRM) program. You will own the end-to-end lifecycle of vendor security risk — from initial due diligence and risk tiering through ongoing monitoring and remediation. You will work closely with Procurement, Legal, Privacy, and Engineering teams to ensure that our third-party relationships are effectively assessed, tracked, and managed. This role is based in our Vancouver office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do and the teams with which you partner. If you're interviewing for this role, your recruiter will share more about the in-office requirements. What you’ll achieve Own and scale Asana’s TPRM program: Design, implement, and continuously improve a risk-based framework for assessing and managing third-party vendors and service providers. Establish risk tiering criteria, assessment workflows, and governance processes that scale with business growth. Lead vendor security assessments: Conduct and oversee security due diligence for new and existing vendors, including reviewing SOC 2 reports, ISO 27001 certifications, security questionnaires (SIG, CAIQ), and other relevant documentation. Identify gaps and work with vendors to remediate findings. Dri

About the role As a Senior Business Analyst, TPRM, you will support the assessment and ongoing oversight of third party relationships, including vendors and partners, throughout the third party risk management lifecycle. You will assess third party risk, conduct business due diligence, and coordinate additional risk assessments with cross-functional partners. You will help ensure risks are appropriately identified, documented, and addressed while working closely with business owners, risk partners, and Chime’s bank partners. This role requires strong analytical judgment, attention to detail, and the ability to manage multiple assessments and stakeholders. You will serve as a trusted partner to the business while contributing to the continued development and maturity of Chime’s TPRM program. In this role, you can expect to Review and challenge Inherent Risk Questionnaires (IRQs), working with business owners to understand vendor relationships, validate information, and determine appropriate inherent risk and criticality ratings. Coordinate due diligence activities with cross-functional risk partners and subject matter experts across areas such as Information Security, Privacy, Compliance, Enterprise Risk Management, and Legal. Conduct business due diligence, including reviews of corporate registration, reputational information, insurance coverage, and other relevant documentation, and coordinate additional activities such as background checks. Manage assigned third party assessments through completion, coordinating with business owners and cross-functional risk partners to address questions, follow up on outstanding requirements, and escalate concerns as appropriate. Facilitate vendor approval processes with Chime’s bank partners, including coordinating assessment information, responding to follow-up requests, and tracking approvals through completion. Identify and document issues arising from TPRM assessments and partner with relevant stakeholders to track third par

As Senior Project Manager you will be responsible for overseeing the full project life-cycle of design and construction for Zoox’s various real estate assets. Our capital projects include a wide variety of typologies- from office and amenities to engineering/R&D, manufacturing, testing/proving grounds, fleet operations, fleet charging and fleet service sites. Project sizes, complexity and budgets will vary from $50K to $30M+. You will own project delivery beginning with pre-lease site due diligence and project planning all the way through project occupancy and close out. The c candidate will need to know all aspects of project delivery- including fiscal and schedule, design, construction and delivery. In this role, you will: Responsible for leading multiple capital construction projects of various complexity from initiation through close-out, owning the entire project lifecycle from pre-design through commissioning. Provide critical financial and schedule management, including creating and monitoring control systems for cost estimates, budgets, value engineering, schedules, and change orders, and reviewing/approving all architect, engineer, contractor, and vendor invoices. Partner with internal cross-functional teams to develop project programs, masterplan campus/city level projects, and collaborate with real estate teams on due diligence and lease negotiations. Manage procurement by sourcing appropriate team members (External PMs, Architects, MEP Engineers, and other trades) through the RFP process and contract execution, and by developing/recommending the project delivery method (Design-Build, Design-Bid-Build or other). Accountable for deliverables while tracking progress, driving all required entitlements, permits, and contracts, completing bid review and analysis for formal funding recommendations, and managing weekly and quarterly executive reports. Qualifications Bachelor’s or graduat

As Senior Project Manager you will be responsible for overseeing the full project life-cycle of design and construction for Zoox’s various real estate assets. Our capital projects include a wide variety of typologies- from office and amenities to engineering/R&D, manufacturing, testing/proving grounds, fleet operations, fleet charging and fleet service sites. Project sizes, complexity and budgets will vary from $50K to $30M+. You will own project delivery beginning with pre-lease site due diligence and project planning all the way through project occupancy and close out. The c candidate will need to know all aspects of project delivery- including fiscal and schedule, design, construction and delivery. In this role, you will: Responsible for leading multiple capital construction projects of various complexity from initiation through close-out, owning the entire project lifecycle from pre-design through commissioning. Provide critical financial and schedule management, including creating and monitoring control systems for cost estimates, budgets, value engineering, schedules, and change orders, and reviewing/approving all architect, engineer, contractor, and vendor invoices. Partner with internal cross-functional teams to develop project programs, masterplan campus/city level projects, and collaborate with real estate teams on due diligence and lease negotiations. Manage procurement by sourcing appropriate team members (External PMs, Architects, MEP Engineers, and other trades) through the RFP process and contract execution, and by developing/recommending the project delivery method (Design-Build, Design-Bid-Build or other). Accountable for deliverables while tracking progress, driving all required entitlements, permits, and contracts, completing bid review and analysis for formal funding recommendations, and managing weekly and quarterly executive reports. Qualifications Bachelor’s or graduat

About the Team DoorDash’s Global Governance, Risk and Compliance (GRC) team helps the business scale securely through practical risk-based decisions, reliable controls and clear accountability. Our third-party risk program protects the systems and data behind our marketplace across DoorDash, Wolt, and Deliveroo. About the Role We’re looking for a Third-Party Risk Management (TPRM) Manager to lead a technically rigorous global program and shape its AI-native future. You will own the vendor security risk lifecycle, lead complex assessments of integrations with our most critical systems and data, and develop a team that makes clear, evidence-based risk decisions. You will also set the vision and build practical agentic workflows that improve how we gather evidence, assess risk, and follow through on remediation. Reporting to the Global Head of GRC, you will serve as their US-based deputy and provide GRC leadership and escalation coverage during US business hours. You will directly manage TPRM analysts together with other US-based GRC team members assigned to your organization. This role combines hands-on technical judgment, program ownership and people leadership. You will be based in the United States, preferably within the Eastern or Central timezones, with core working hours aligned to US business needs and clear handoffs with global colleagues. What you will do Run the day-to-day TPRM program operations from vendor discovery and risk tiering through due diligence, onboarding, continuous monitoring, remediation and exit. Maintain a reliable vendor inventory, policies, assessment standards, and service levels across DoorDash, Wolt, and Deliveroo, covering cloud, SaaS, business process outsourcing (BPO), and other critical suppliers. Lead assessments of vendors connected to crown jewel systems, including identity platforms, production cloud, source code and CI/CD, and sensitive-data platforms. Examine architecture, data flows, permissions, and control evidence. Use st

At Snowflake, we are powering the era of the agentic enterprise. To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work. You don’t just use tools; you possess an innate curiosity, treating AI as a high-trust collaborator that is core to how you solve problems and accelerate your impact. We look for low-ego individuals who thrive in dynamic and fast-moving environments and move with an experimental mindset — who rapidly test emerging capabilities to discover simpler, more powerful ways to deliver results. At Snowflake, your role isn't just to execute a function, but to help redefine the future of how work gets done. We are hiring a Senior Compliance Analyst, Customer Trust for our SnowTrust GRC team. You will own the full lifecycle of multiple customer-facing and third-party assessments, from defining scope and owning the project plan to driving deliverables across projects with moderate to high business or technical complexity. You will work daily with IT, Business, Procurement, Security, and Compliance teams, and regularly with leadership, to deliver the vendor and customer projects in your portfolio. AS A SENIOR COMPLIANCE ANALYST, CUSTOMER TRUST AT SNOWFLAKE, YOU WILL: Customer Trust Respond to customer due diligence questionnaires and audits about Snowflake's security and compliance obligations. Become an expert on Snowflake's control environment, security features, and best practices for customer deployments. Serve as a trusted advisor on customer and regulator inquiries about Snowflake's security and compliance obligations and documentation. Join sales conversations to explain Snowflake's security and compliance capabilities. Third-Party Oversight, Governance, and Risk Management Conduct security risk assessments of new and existing vendors, evaluating their security posture against contractual, regulatory, and industry requirements. Partner with Legal and Procurement to make su

A BOUT TIDE At Tide, we help SMEs save time and money in the running of their businesses by not only offering business accounts and related banking services, but also a comprehensive set of highly usable and connected administrative solutions, from invoicing to accounting. Tide is transforming the small business banking market and now supports over 2 million members globally across the UK, India, Germany and France. Using advanced technology, all solutions are designed with SMEs in mind. With quick onboarding, low fees and innovative features, we thrive on making data driven decisions to serve our mission: to help SMEs save time and money so they can get back to doing what they love. Tide facts: Tide is available for UK, Indian, German and French SMEs Over 2 million members globally and rapidly growing Over $300 million raised in funding 3,000 Tideans globally Recognised with Great Place to Work certification three years in a row, and among India’s Top 50 Best Workplaces in Banking, Financial Services, and Insurance in 2026 We have offices in Central London, with a member support and technology centre in Sofia, Bulgaria, technology centres in Serbia, Romania, Lithuania and Hyderabad and offices in Gurugram, New Delhi, Berlin, Paris and Luxembourg ABOUT THE ROLE: Tide is hiring a Director of Engineering to lead the engineering organisation behind KYX (KYC and KYB). Our vision for KYX is a world where every genuine business, business owner, their team, and everyone connected to them, onboards to Tide in minutes, unlocks the products they need as they grow, and never has to think twice about their data, while we identify bad actors, stop them at the door, continuously review their activity and off-board them the moment they're found. You will be accountable for engineering strategy, organisation and execution across three domains. Onboarding KYX covers identity and access for registration and login, due diligence policy execution and vendor orchestration across the onb