Why should you be part of our success story?

As the fastest-growing Software as a Service (SaaS) company in history, Deel is transforming how global talent connects with world-class companies – breaking down borders that have traditionally limited both hiring and career opportunities. We're not just building software; we're creating the infrastructure for the future of work, enabling a more diverse and inclusive global economy. In 2024 alone, we paid $11.2 billion to workers in nearly 100 currencies and provided healthcare and benefits to workers in 109 countries—ensuring people get paid and protected, no matter where they are.

Our momentum is reflected in our achievements and customer satisfaction: CNBC Disruptor 50, Forbes Cloud 100, Deloitte Fast 500, and repeated recognition on Y Combinator's top companies list – all while maintaining a 4.83 average rating from 15,000 reviews across G2, Trustpilot, Captera, Apple and Google.

Your experience at Deel will be a career accelerator. At the forefront of the global work revolution, you'll tackle complex challenges that impact millions of people's working lives. With our momentum—backed by a $17.3 billion valuation and $1 B in Annual Recurring Revenue (ARR) in just over five years—you'll drive meaningful impact while building expertise that makes you a sought-after leader in the transformation of global work.

Key Areas of Expertise

• Third-Party Risk Assessment & Vendor Evaluation: Deep experience conducting security questionnaires, reviewing certifications (SOC2, ISO 27001, etc.), and scoring vendor risk profiles.
• Hands on experience and AI automation: This role includes a responsibility of automation the processes that you are working on
• Compliance & Contract Governance: Expertise in translating security and compliance requirements into vendor contracts, SLAs, and audit requirements.
• SaaS Security Posture & AI Risk Management: Understanding of cloud service security, SaaS-specific vulnerabilities, and emerging AI vendor risks.
• Working with TPRM software like Panorays, OneTrust etc.
• Providing security requirements for implementations of new systems.
• 
  

Responsibilities

• Vendor Risk Assessment & Intake: Design and manage vendor security assessment workflows. Integrate security questionnaires (Panorays, etc.) into standardized evaluation processes. Conduct deep-dive security reviews of third-party SaaS providers, cloud vendors, and AI services to determine risk profiles.
• Risk Scoring & Metrics: Develop and maintain vendor risk scoring models aligned with organizational risk appetite. Track key risk indicators (KRIs) for active vendors and escalate material changes in vendor security posture.
• Compliance Questionnaire Management: Own the questionnaire lifecycle—intake, response validation, remediation tracking, and integration into risk decision workflows. Ensure vendor responses are accurate and evidence-backed.
• Contract & SLA Negotiation: Partner with procurement and legal to embed security requirements in vendor contracts. Negotiate security clauses, data protection terms, audit rights, and incident notification obligations.
• Vendor Incident & Breach Management: Monitor and respond to third-party security incidents. Lead investigation into vendor breaches affecting organizational data. Coordinate remediation and assess impact on compliance posture.
• Continuous Vendor Monitoring: Establish ongoing monitoring of active vendors through automated tools, re-assessments, and public breach intelligence. Maintain audit trails for all vendor risk decisions and remediation activities.
• TPRM Policy & Governance: Author and maintain vendor risk management policies, vendor tiering frameworks, and assessment standards. Ensure alignment with regulatory requirements (SOC2, ISO 27001, GDPR, etc.).
• Cross-functional Collaboration: Partner with DevSecOps, procurement, legal, compliance, and business teams to translate vendor risk findings into business decisions. Drive adoption of vendor risk assessments across the organization.
•