Vendor Security Questionnaire Specialist

About the role

We are seeking a Vendor Security Questionnaire Specialist to manage the end‑to‑end questionnaire process for multiple client accounts. You will work remotely with U.S.‑based startups, handling security requests, coordinating with technical teams, and delivering accurate questionnaire responses on time.

Key responsibilities

• Monitor client Slack channels and respond promptly to security questionnaire requests.
• Create and track tickets in Jira, Linear, or other ticketing systems.
• Complete vendor security questionnaires (SIG, CAIQ, custom) using spreadsheets and platforms such as OneTrust, Whistic, and SecurityScorecard.
• Develop a deep understanding of each client’s security posture, policies, controls, and technical environment.
• Maintain and improve answer libraries and knowledge bases.
• Coordinate with security consultants, engineers, and subject‑matter experts for technical clarifications.
• Escalate recurring gaps or missing controls that affect questionnaire responses.
• Ensure all questionnaires are completed accurately and within client deadlines.

Required profile

• 2–4 years of experience completing vendor security questionnaires, GRC/compliance, or a security‑focused client‑facing role.
• Hands‑on experience with SIG, CAIQ, or custom questionnaires.
• Working knowledge of SOC 2 and ISO 27001.
• Understanding of common security concepts such as SSO, MFA, endpoint management, encryption, cloud infrastructure, backup & disaster recovery, and vendor risk management.

Required skills

• SIG questionnaire methodology
• CAIQ questionnaire methodology
• OneTrust platform
• Whistic platform
• SecurityScorecard platform
• Jira ticketing
• Linear ticketing
• Spreadsheet analysis
• SOC 2 framework
• ISO 27001 framework
• Single Sign‑On (SSO)
• Multi‑Factor Authentication (MFA)
• Endpoint management
• Encryption (at rest & in transit)
• Cloud infrastructure fundamentals
• Backup & disaster recovery
• Vendor risk management