Book a car rental on Turo, skip the rental counter. From EVs and trucks to luxury vehicles, find the right car for your trip. Free cancellation on most trips. Backed by Kleiner Perkins and GV.
About the role
For this role, the target base salary range in San Francisco is $131,000-$164,000 annually. This role is also eligible for equity and benefits. In general, our ranges reflect the market-based target for new hire salaries based on the level and location of the role. Within the range, individual pay is determined by objective factors assessed during the application and interview process, such as job-related skills, experience, and relevant education or training. Found on 1752vc Careers, the job board for startup and VC roles.
What they're looking for
- Own the vendor security review lifecycle: intake, risk tiering, due diligence, findings documentation, remediation tracking, and renewals
- Evaluate vendor evidence: SOC 2 reports, ISO certificates, pen-test results, and security questionnaires - deliver clear risk recommendations
- Review vendor contracts, DPAs, and MSAs from a security standpoint, provide approval recommendations before contracts are signed
- Build scalable tiering frameworks, intake workflows, and continuous monitoring capabilities that grow with vendor volume
- Partner with Procurement, Legal, and Privacy to integrate security review into onboarding and renewal cycles without becoming a bottleneck
- Complete and maintain external partnership-facing security questionnaires and trust-center content in support of integrations
More about this role
Turo is searching for a highly motivated and versatile Senior Vendor Security Risk Analyst under the Enterprise Security team to own Turo's third-party security risk management (TPRM) program and partners with Security teammates to lead security awareness training and user access review campaigns. You will assess and manage vendor risk end-to-end, build scalable review processes, and help strengthen Turo's security culture. You will operate with significant autonomy across Procurement, Legal, Privacy, IT, and the business.
- Own the vendor security review lifecycle: intake, risk tiering, due diligence, findings documentation, remediation tracking, and renewals.
- Evaluate vendor evidence: SOC 2 reports, ISO certificates, pen-test results, and security questionnaires - deliver clear risk recommendations.
- Review vendor contracts, DPAs, and MSAs from a security standpoint; provide approval recommendations before contracts are signed.
- Build scalable tiering frameworks, intake workflows, and continuous monitoring capabilities that grow with vendor volume.
- Partner with Procurement, Legal, and Privacy to integrate security review into onboarding and renewal cycles without becoming...
Browse similar: Startup jobs · San Francisco Bay Area