Information Security Senior Associate, Vendor Risk & Security

Location: Hyderabad, India
Department: Security

We are looking for an Information Security Senior Associate, Vendor Risk & Security to join our team. As an Information Security Senior Associate, Vendor Risk & Security, your job responsibilities will include:

• Triage and track Third-Party Security Assessment (TPSA/TPSD) cases in ProcessUnity from intake to closure, including supplier follow-up questions.
• Do first-pass review of supplier questionnaire responses against a documented rubric, and escalate exceptions to the senior reviewer.
• Support subprocessor security reviews with documentation review and status tracking.
• Collect and organize evidence for audit readiness.
• Maintain intake hygiene in ProcessUnity: bulk imports of new supplier TPSAs, templates and intake fields for new supplier categories, and consistency across cases.
• Chase outstanding evidence and documentation from vendors and internal stakeholders.
• Help with adjacent vendor compliance work, such as BPO questionnaire follow-ups and security-training content.

You will be working in an engineering-first culture, using version control, code review, CI/CD, and backlogs. You will be automating manual processes, and measuring risk reduced, effort saved, and audit friction removed.

The ideal candidate will have:

• Interest in third-party risk, vendor security, or security compliance.
• Strong written communication.
• Attention to detail when reading questionnaire answers line by line.
• Ability to manage many open cases and deadlines without dropping follow-ups.
• Willingness to escalate when an answer looks wrong or incomplete.
• Experience with a GRC or case-management tool (ProcessUnity or similar).
• Familiarity with security questionnaires or frameworks (SIG, CAIQ, SOC 2, ISO 27001).
• Prior audit-support or compliance-coordination experience.

Salesforce brings companies and customers together in the number one Customer Relationship Management platform.