Vendor Security Lead

Pinterest’s Security team (Pinfosec) is seeking an experienced program manager to drive vendor and third-party security initiatives to keep our users, employees, and infrastructure safe from third-party risk. You will have the opportunity to lead and improve our vendor security program and provide meaningful impact in minimizing risk for Pinterest. You’re passionate about security innovation, and able to vet third-party solutions while minimizing employee friction and maximizing productivity. This role will report to the Manager of Security Governance, Risk and Compliance.  The Pinfosec team sits under the Engineering function. This role does not require any coding experience, though we are happy to consider candidates with that background. This is not a people manager role, although experience of managing contractors is helpful. This is not a Third Party Risk Management role, it is a Security specific role and experience assessing the Security posture of vendors is a prerequisite. If you have experience in broader Third Party Risk Management as well as Security then we welcome your application. 

What you'll do:

• Perform vendor security assessments in order to minimize risk from third-party services
• Maintain and improve vendor security program while working closely with Security, Legal, IT and other internal stakeholders
• Ensure vendor security issues are identified, communicated, and remediated to an acceptable level of risk
• Interface with other teams and take a leadership role in driving vendor security initiatives

What we're looking for:

• 4+ years experience performing vendor security risk analysis for new and existing vendors
• 2+ years of experience managing an effective Vendor Security program
• Experience designing, managing, and building security programs and best practices
• Familiarity with compliance frameworks (e.g. PCI, GDPR, SOC2, ISO27001)
• Good understanding of various security domains
• Strong sense of ownership and comfortable with autonomy and ambiguity
• Great communicator who is comfortable leading meetings and audit type interviews with vendors
  
  

#LI-REMOTE

#LI-GB2