InternFlow

Greenhouse ·

full-time

Staff, Third Party Risk Management

Okta · Bellevue, Washington; Chicago, Illinois; New York, New York; San Francisco, California; Seattle, Washington; Washington, DC

Okta is a company specializing in identity and access management infrastructure. As a Staff member in Third Party Risk Management, you will lead complex security assessments and manage risk trade-offs to ensure the safety of the organization's supply chain. Your day-to-day responsibilities will involve driving technical automation by engineering custom AI agents and workflows to optimize risk data processing and scaling operations. You will analyze technical integration risks, evaluate potential blast radiuses, and guide internal and external stakeholders through remediation processes in alignment with established security standards. Additionally, you will develop data analytics workflows, establish key risk and performance indicators for executive reporting, and refine standardized risk assessment methodologies. This role is well-suited for a seasoned security professional with over seven years of experience in third-party risk management and a strong background in frameworks like ISO 27001, NIST, and SOC 2. The ideal candidate possesses hands-on experience in building automated workflows using Python and APIs, alongside a deep understanding of foundational security principles and the ability to navigate complex, cross-functional environments.

third party risk managementtprmsecurity assessmentgrcautomationsupply chain securityidentity managementrisk governance

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. Staff, Third Party Risk Management Responsibilities: Lead complex third-party security assessments and communicate risk trade-offs to leadership. Drive technical automation across the TPRM lifecycle by engineering custom AI agents, capabilities, and workflows to integrate tool outputs, optimize risk data processing and scale operations. Analyze technical and integration risks to establish deeper supply-chain risk visibility and evaluate potential blast radius. Drive risk remediation with third parties and internal stakeholders, providing actionable guidance in alignment with Okta security standards. Develop and maintain strong relationships with global cross functional stakeholders and third party suppliers. Partner with cross-functional teams to streamline and optimize third-party onboarding and offboarding workflows. Design and execute third-party review activities, continuous vendor monitoring, and event-driven re-assessments. Develop data analytics workflows and establish KRIs and KPIs to elevate team metrics and executive reporting. Develop, maintain, and continuously refine standardized risk assessment methodologies, playbooks, and procedures. Drive TPRM program maturity and execution, aligning third-party risk governance with the company’s goals and security strategy. Support ad hoc projects including program enhancements, security initiatives, and other GRC functions. Requirements : Relevant BA/BS degree. 7+ years of working experience conducting security assessments on Third Parties across regulations and common industry frameworks including but not limited to ISO 27001, PCI, NIST or other global relevant security frameworks. Hands-on experience building automated workflows, scripts (Python/APIs), and AI agentic solutions. Strong ability to analyze and interpret third-party security artifacts, certifications, and technical reports (e.g., SOC 2 Type II, ISO 27001, FedRAMP, SIG). Ability to effectively communicate with both internal and external stakeholders, and ensure security requirements are understood and business needs are prioritized appropriately. Hands-on experience of GRC and TPRM platforms and solutions. Deep understanding of foundational security principles, standard methodologies (i.e. logging, data handling, authorization, authentication). Excellent verbal, written, and interpersonal skills. Ability to manage multiple priority initiatives and deliver results under tight timelines. Comfortable with ambiguity and adaptable to fast changing environments. #LI-HYBRID P5638_3588709 The annual base salary range for this position for candidates located in the San Francisco Bay area is between: $166,000 — $228,000 USD Below is the annual base salary range for candidates located in California (excluding San Francisco Bay Area), Colorado, Illinois, New York and Washington. Your actual base salary will depend on factors such as your skills, qualifications, experience, and work location. In addition, Okta offers equity (where applicable), bonus, and benefits, including health, dental and vision insurance, 401(k), flexible spending account, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies. To learn more about our Total Rewards program please visit: https://rewards.okta.com/us . The annual base salary range for this position for candidates located in California (excluding San Francisco Bay Area), Colorado, Illinois, New York, and Washington is between: $148,000 — $204,000 USD The Okta Experience Supporting Your Well-Being Driving Social Impact Developing Talent and Fostering Connection + Community We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one. Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws. If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to requ

RoleStaff, Third Party Risk Management
CompanyOkta
LocationBellevue, Washington; Chicago, Illinois; New York, New York; San Francisco, California; Seattle, Washington; Washington, DC
Typefull-time
CompensationNot disclosed
Posted2026-10-20
DeadlineRolling

Typical process for this type of role

A general guide — the exact steps for this specific listing may vary; check the original posting for details.

  1. 1ApplicationSubmit your resume through the apply link.
  2. 2ScreeningRecruiter reviews your background against the role.
  3. 3AssessmentA technical test, assignment, or coding round, depending on the role.
  4. 4Interview(s)One or more rounds with the hiring team.
  5. 5OfferOffer letter with compensation and start date.

Before you apply

0/4

About Okta

Okta, Inc. is an Identity-as-a-Service (IDaaS) company founded in 2009 and based in San Francisco. The company provides identity and access management solutions for workforces, customers, and AI agents. Its offerings include the Okta Platform for governance and the Auth0 Platform for authentication. Okta’s services are designed to secure human and machine identities, helping organizations manage access across their digital ecosystems. The company serves a diverse client base, including major government agencies and two-thirds of the Fortune 100, supporting thousands of organizations globally in securing their business operations and digital infrastructure.

All jobs and hiring details at Oktaokta.com

More at Okta

Other jobs at Okta

See all 55 openings at Okta

Explore Related Placements


// similar opportunities

You might also like

Senior Analyst, Risk Management

Mastercard

Punefull-time
Top Company
Any GraduateWorkdayRisk Management# COBIT# NIST Cybersecurity# NIST SP 800-53# CIS/SANS Top 20+9 more

Our Purpose Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sust...

Apply now →

Product Management - AI Payments

Paytm

Noida, Uttar Pradeshfull-time
Top Company
Lever

About Us: Paytm is India’s leading mobile payments and financial services distribution company. A pioneer of the mobile QR payments revolution, Paytm builds tec...

Apply now →

Staff Product Manager, Incentives

Faire

New York City, NY; San Francisco, CAfull-time
Any GraduateGreenhouseProduct Management# Product Management# Strategy# Roadmapping# Unit Economics+5 more

About Faire Faire is a technology wholesale platform built on the belief that the future is local. Independent retailers around the globe collectively represent...

Apply now →

Manager, Global Entity Management

Datadog

Datadog logo
New York, New York, USAfull-time
Greenhouse

About the role Datadog employs roughly 8,100 people across 35 countries through global subsidiaries, all under a Nevada parent. Some are operating companies. Ot...

Apply now →

Manager, Product Support Incident Management

Roblox

Roblox logo
Gurugram, Haryanafull-time
Greenhouse

Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect with friends in 3D immersive digital experiences– all created ...

Apply now →

Staff Product Manager, Canada Expansion

Robinhood

Toronto, Canadafull-time
Greenhouse

Join us in building the future of finance. Our mission is to democratize finance for all. An estimated $124 trillion of assets will be inherited by younger gene...

Apply now →