Vendor Supply Chain Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Validate AI-generated vendor research against established sources.

• Rank vendors according to customer usage patterns.

• Rectify unsupported claims and differentiate confirmed findings from missing or inconclusive information.

• Create and sustain a collaborative vendor library.

• Investigate new SaaS vendors and address incomplete records.

• Examine significant changes, including security breaches and alterations to security protocols.

• Locate accessible sources or manually upload documents when there are gaps in source access.

• Confirm claims such as SSO availability, published DPAs, lists of subprocessors, and SOC 2 reports.

• Evaluate research accuracy and contrast computed scores with ratings assigned by customers.

• Analyze scoring discrepancies and propose evidence-based modifications.

• Document recurring mistakes, overlooked evidence, and unclear results for the engineering team.

• Suggest updates to evaluation standards.

• Maintain traceable and defensible evidence with clear reasoning and research dates.

• Develop repeatable verification runbooks and escalation procedures.

• Assist in processing an initial backlog of around 500–600 vendors.

• Support a human-verification workflow aiming for a turnaround of 1–2 days, with reviews initiated by 90-day re-research.

⛳️ Requirements

• Practical experience in conducting vendor security due diligence or third-party security assessments.

• Strong research abilities and judgment to differentiate evidence from marketing statements.

• Knowledge of SaaS security practices and public security, privacy, and compliance documentation.

• Analytical mindset and comfort in investigating discrepancies, documenting uncertainties, and verifying if scores align with supporting evidence.

• Excellent written communication and meticulous documentation skills.

• Self-motivated with the ability to adapt swiftly, excel in ambiguous situations, and develop processes from the ground up.

• Experience assessing AI-generated research or designing human review workflows (bonus).

• Background in measuring research accuracy, calibrating scoring systems, or establishing quality assurance processes (bonus).

• Experience in third-party risk, compliance, or security research (bonus).

• Involvement in helping an early-stage startup transition from Seed to Series A or beyond (bonus).

• Scripting or automation skills for analyzing outcomes or enhancing verification efficiency (bonus).

• Ability to work from a location where Oneleet can legally engage talent directly or through an EOR partner.

• U.S.-based candidates must meet employment eligibility requirements; Oneleet participates in E-Verify.

🏝️ Benefits

• Comprehensive health and wellness benefits.

• 20 days of paid time off (PTO) per year.

• 8 floating holidays.

• Remote work culture.

• Team off-sites in beautiful locations (Amsterdam, Italy, etc.).

• Equity opportunities.

• Competitive salary.

• Global hiring with compliant arrangements through employer-of-record partners where necessary.