The opportunity
Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation.
What you'll do
Run substantive third-party risk management (TPRM), independently evaluating: real risk, not just processing questionnaire responses
Review SOC 2 reports, pen test findings, and architecture documentation to: form an independent view of vendor risk, extending the same rigor to AI/model providers
Partner with Legal on vendor and AI contract terms, including DPAs,: subprocessor agreements, and AI-specific provisions
Review contracts for non-standard security language when flagged by Legal or deal desk, and recommend redlines
Maintain the vendor and AI/model risk register, feeding findings into the company's master risk register
Enable sales through maturing the customer trust program
What they're looking for
- Build the capability for continuous monitoring of vendor ecosystem
