Third Party Risk Management and Customer Trust Lead
Replit
Third Party Risk Management and Customer Trust Lead at Replit is a full time role based in Remote · Foster City, California, USA (remote). The listing states pay of $210k–$270k. It was published on 10 July 2026 and was open at last check.
| Role | Third Party Risk Management and Customer Trust Lead |
|---|---|
| Company | Replit |
| Location | Remote · Foster City, California, USA (remote) |
| Employment type | Full Time |
| Pay (as listed) | $210k–$270k |
| Published | 10 July 2026 |
| Status | Open at last check |
Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation.
About the role:
Replit’s ecosystem is powered by an expanding array of external services and essential AI model partners. As our lead for Security Vendor Risk & Contract Reviews, you will architect and execute a risk management program focused on substantive evaluation rather than just processing checklists. You’ll analyze SOC 2 documentation, security assessments, and system architectures to determine actual risk profiles, collaborating with our Legal team to secure necessary contractual protections. This role reports to the Head of Security GRC and involves high-impact partnerships across Legal, Engineering, and Product teams.
What You'll Do
- Run substantive third-party risk management (TPRM), independently evaluating real risk, not just processing questionnaire responses
- Review SOC 2 reports, pen test findings, and architecture documentation to form an independent view of vendor risk, extending the same rigor to AI/model providers
- Partner with Legal on vendor and AI contract terms, including DPAs, subprocessor agreements, and AI-specific provisions
- Review contracts for non-standard security language when flagged by Legal or deal desk, and recommend redlines
- Maintain the vendor and AI/model risk register, feeding findings into the company's master risk register
- Enable sales through maturing the customer trust program
- Build the capability for continuous monitoring of vendor ecosystem
Required Skills & Experience
- 8+ years in third-party/vendor risk management, security risk, or a related GRC role
- Demonstrated ability to independently assess vendor risk rather than relying on questionnaire responses alone, fluent in reading SOC 2 reports, ISO certificates, pen test summaries, and architecture documentation
- Experience reviewing or redlining security and data-handling contract language, ideally in partnership with a legal team
- Working knowledge of data privacy fundamentals (GDPR, CCPA) as they relate to vendor and subprocessor relationships
- Strong cross-functional collaboration skills — this role touches Legal, Engineering, Product, and Sales regularly
- Experience building repeatable, scalable vendor review processes rather than inheriting an existing one
Bonus Qualifications
- Direct experience assessing foundation model providers or AI/ML vendors specifically
- Experience automating or streamlining third-party review workflows (e.g., continuous vendor monitoring, automated evidence pulls) is a plus
- Familiarity with NIST AI RMF, ISO 42001, or the EU AI Act
- Background at an AI-native product company or an LLM/model provider
- Paralegal experience or formal contract review training
- Relevant certifications (CTPRP, CISSP, CIPP/E)
This is a full-time role that can be held from our Foster City, CA office. The role has an in-office requirement of Monday, Wednesday, and Friday.
Full-Time Employee Benefits Include:
💰 Competitive Salary & Equity
💹 401(k) Program with a 4% match (US Only)
⚕️ Health, Dental, Vision and Life Insurance
🩼 Short Term and Long Term Disability
🚼 Paid Parental, Medical, Caregiver Leave
🏝 Flexible Time Off (FTO) + Holidays
🚗 Commuter Benefits (In-Office Only)
📱 Monthly Wellness Stipend
🧑💻 Autonomous Work Environment
🖥 In Office Set-Up Reimbursement (In-Office Only)
🚀 Quarterly Team Gatherings
☕ In Office Amenities (In-Office Only)
Want to learn more about what we are up to?
Interviewing + Culture at Replit
To achieve our mission of making programming more accessible around the world, we need our team to be representative of the world. We welcome your unique perspective and experiences in shaping this product. We encourage people from all kinds of backgrounds to apply, including and especially candidates from underrepresented and non-traditional backgrounds.
Create your free OnJob profile to apply — we'll take you to Replit's application after sign-up. · Posted 10 Jul 2026.
Third Party Risk Management and Customer Trust Lead at Replit — questions answered
What does the Third Party Risk Management and Customer Trust Lead role at Replit pay?
The Third Party Risk Management and Customer Trust Lead at Replit listing states pay of $210k–$270k for the Remote · Foster City, California, USA (remote) position. That figure is taken directly from the employer's own posting as published, not estimated or averaged from other roles.
Is the Third Party Risk Management and Customer Trust Lead role at Replit remote?
Yes — Replit advertises this Third Party Risk Management and Customer Trust Lead role as remote, tied to Remote · Foster City, California, USA, and it is listed as full time work. Remote terms come from the employer's own posting, so confirm the expected working hours, timezone and any on-site days with Replit before you apply.
Is the Third Party Risk Management and Customer Trust Lead role at Replit still open?
The Third Party Risk Management and Customer Trust Lead posting at Replit was open at OnJob's last check of the employer's careers page, having been published on 10 July 2026. OnJob re-checks source listings on each build and marks a role closed once it disappears, but listings can close without notice, so the employer's own page is the final word.
How do you apply for the Third Party Risk Management and Customer Trust Lead role at Replit?
Apply to the Third Party Risk Management and Customer Trust Lead at Replit role through OnJob with a free profile: OnJob scores your fit against the listing, shows the skills lowering that score, and submits an ATS-ready profile to Replit's own application page. Creating a profile is free and needs no card.
Related jobs you can win
Hand-picked roles that match this listing on skills, category and location — each scored to your profile inside OnJob.
Explore more on OnJob
Hiring for a role like this?
Post a job on OnJob and reach AI-matched candidates.