Vendor Risk & Security Lead

Asana is seeking a Third Party Risk Management Lead to own the end-to-end lifecycle of vendor security risk. You will collaborate with Procurement, Legal, Privacy, and Engineering to assess, track, and manage third-party relationships in a secure manner.

The role focuses on building scalable risk frameworks, conducting security assessments (SOC 2, ISO 27001, SIG, CAIQ), driving remediation, and maintaining a global vendor risk inventory across time zones.