Supply Chain Security Analyst

$135,000 - $135,000/Yr

Palantir Technologies - New York, NY

Full-time

New York, NY

Publishing Industries

About the position

In this role at Palantir, you will be responsible for conducting technical risk analysis and assessments of third-party vendors, suppliers, and partners to ensure mission success. Your work will focus on addressing external risks that threaten the company's ability to solve significant global challenges. You will proactively propose and implement controls to mitigate potential threats and continuously evaluate risks to the supply chain by monitoring industry breaches and security incidents.

Responsibilities

• Assess, manage, and report on overall information security risk to Palantir from our supply chain through risk assessments and reviews of third-party suppliers, vendors, and partners.
• Identify, propose, and implement mitigative controls to address supply chain risks or security deficiencies.
• Perform in-depth security assessments of third parties, incorporating numerous data points to create a comprehensive risk-based conclusion of the security maturity of the third party.
• Provide guidance to Palantir employees and prospective suppliers on Palantir security requirements and remediation advice.
• Build cross-functional partnerships with departments such as Legal, Procurement, Threat Intelligence, and Physical Security to identify opportunities for increased supply chain security across the business.
• Leverage business process automation skills to optimize and streamline supply chain security workflows, reducing manual efforts and increasing efficiency across the organization.
• Conduct regular assessments of automated systems to ensure ongoing reliability, security, and performance, and provide support and maintenance as needed.
• Maintain awareness of emerging information security risks and trends, and their impact to our overall supply chain.

Requirements

• Experience performing third-party or supply chain risk assessments or evaluations.
• Strong technical decomposition and analytical skills, with the ability to identify supply chain risks based on industry security breaches and incidents.
• Experience with leveraging systems for scaling processes including but not limited to Jira, Coupa, and PowerBI.
• Exceptional written and verbal communication and organization skills.
• Strong desire to own impactful security outcomes in a fast-paced, dynamic working environment.
• A deep understanding of information security controls including data protection, access controls, policies and standards, proactive security, reactive security, application security, and related measures.
• Experience with information security and risk management frameworks, standards, and certifications (e.g. ISO-27001, NIST 800-53, NIST 800-171, CMMC, SOC2).

Benefits

• Medical, dental, and vision insurance for employees and eligible dependents.
• Basic life, AD&D, and disability insurance coverage.
• Commuter benefits.
• Take what you need paid time off, not accrual based.
• 2 weeks paid time off built into the end of each year (subject to team and business needs).
• 10 paid holidays throughout the calendar year.
• Supportive leave of absence program including time off for military service and medical events.
• Paid leave for new parents and subsidized back-up care for all parents.
• Fertility and family building benefits including adoption, surrogacy, and preservation.
• Stipend to help with expenses that come with a new child.
• 401k plan enrollment.