Vendor Security Questionnaire Specialist

About the role

We are looking for a Vendor Security Questionnaire Specialist to manage the end‑to‑end questionnaire process for multiple U.S.‑based startup clients. The role is fully remote and requires close collaboration with technical stakeholders to deliver accurate and timely security responses.

Key responsibilities

• Monitor client Slack channels and respond promptly to incoming questionnaire requests.
• Create and track tickets in Jira, Linear, or similar systems.
• Complete vendor security questionnaires (SIG, CAIQ, custom) using spreadsheets and platforms such as OneTrust, Whistic, and SecurityScorecard.
• Develop a deep understanding of each client’s security posture, policies, and controls.
• Maintain and improve answer libraries and knowledge bases.
• Coordinate with security consultants, engineers, and subject‑matter experts for technical clarifications.
• Escalate recurring gaps or missing controls that affect responses.
• Ensure all questionnaires are accurate and meet client deadlines.

Required profile

• 2–4 years of experience completing vendor security questionnaires, GRC/compliance, or a security‑focused client‑facing role.
• Hands‑on experience with SIG, CAIQ, or custom questionnaires.
• Working knowledge of SOC 2 and ISO 27001.
• Strong organizational skills and ability to communicate with both technical and non‑technical stakeholders.

Required skills

• SIG questionnaire
• CAIQ questionnaire
• OneTrust platform
• Whistic platform
• SecurityScorecard platform
• Jira ticketing
• Linear ticketing
• Single Sign‑On (SSO)
• Multi‑Factor Authentication (MFA)
• Endpoint Management
• Encryption (at rest & in transit)
• Cloud infrastructure fundamentals
• Backup & Disaster Recovery
• Vendor Risk Management