Airtable is looking for someone who wants to work in a fast paced and dynamic environment, is highly motivated, independent, passionate, collaborative, and humble. The goal of this role is to enable Airtable to use secure, compliant third-party suppliers that support our product and internal operations. This role requires a comprehensive understanding of security, compliance, and privacy controls and an ability to collaborate with internal and external stakeholders. This role will report into Airtable’s GRCP (Governance, Risk, Compliance, and Privacy) team.

Learn more about our Engineering team and values here.

What you'll do

• Conduct third party security and privacy reviews on softwares, contractors, and other services to Airtable to reduce third party risks
• Identify third party business risks and recommend risk treatment options to internal business stakeholders
• Determine security contract requirements and communicate those to the Procurement & Legal team
• Communicate with vendors and internal stakeholders to gather information needed for initial and periodic security and compliance reviews, validations, and audits, and to understand business objectives
• Perform annual reviews on critical vendors to meet compliance and customer requirements
• Collaborate with Procurement, IT, Legal, Finance to improve third party due diligence process
• Provide general support to the GRCP team as needed

Who you are

• General understanding of security, compliance, and privacy frameworks such as SOC2, ISO27001, ISO27701, GDPR, CCPA
• Experienced with SaaS/Cloud suppliers
• Familiarity with cloud data compliance and working with public cloud solutions (AWS)
• Have knowledge of and interest in third party information security challenges and trends, including emerging threats.
• Independent self-starter, ability to manage multiple projects simultaneously
• Detail-oriented and organized
• Ability to take action quickly and drive to improve processes for efficiency
• Flexible and able to change gears and focus depending on team and company priorities
• Certifications such as CISA or CISSP is a plus

Airtable is an equal opportunity employer. We embrace diversity and strive to create a workplace where everyone has an equal opportunity to thrive. We welcome people of different backgrounds, experiences, abilities, and perspectives. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status or any characteristic protected by applicable federal and state laws, regulations and ordinances. Learn more about your EEO rights as an applicant.

VEVRAA-Federal Contractor

If you have a medical condition, disability, or religious belief/practice which inhibits your ability to participate in any part of the application or interview process, please complete our Accommodations Request Form and let us know how we may assist you. Airtable is committed to participating in the interactive process and providing reasonable accommodations to qualified applicants.