Vendor Security Questionnaire Specialist

About the role

We are seeking a Vendor Security Questionnaire Specialist to manage the end‑to‑end questionnaire process for multiple client accounts. Working remotely with U.S. Pacific Time overlap, you will collaborate with fast‑growing technology startups, ensuring security questionnaires are completed accurately and on schedule.

Key responsibilities

• Monitor client Slack channels and respond promptly to incoming security questionnaire requests.
• Create and manage tickets in Jira, Linear, or other ticketing systems to track progress.
• Complete vendor security questionnaires (SIG, CAIQ, custom) using spreadsheets and platforms such as OneTrust, Whistic, and SecurityScorecard.
• Develop a deep understanding of each client’s security posture, policies, controls, and technical environment.
• Maintain and continuously improve answer libraries and knowledge bases.
• Coordinate with security consultants, engineers, and subject‑matter experts for technical clarification.
• Escalate recurring gaps or missing controls that affect questionnaire responses.
• Ensure all questionnaires are delivered accurately and within client deadlines.

Required profile

• 2–4 years of experience completing vendor security questionnaires, working in GRC/compliance, or a security‑focused client‑facing role.
• Hands‑on experience with SIG, CAIQ, or custom questionnaires.
• Working knowledge of SOC 2 and ISO 27001 frameworks.
• Understanding of common security concepts such as SSO, MFA, endpoint management, encryption, cloud fundamentals, backup & disaster recovery, and vendor risk management.

Required skills

• OneTrust
• Whistic
• SecurityScorecard
• Jira
• Linear
• Spreadsheets (Excel/Google Sheets)
• SIG questionnaire methodology
• CAIQ questionnaire methodology