Supply Chain Security Analyst

A World-Changing Company
Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more.
The Role
In this role, you’ll be working at the forefront of the industry to ensure mission success and your work will directly address external risks which threaten our ability to help solve the world’s hardest, most impactful problems. You will conduct deeply technical risk analysis and assessments of third-party vendors, suppliers, and partners and coordinate across the business to respond to third-party security incidents, suspected breaches, and remediation operations. You will proactively propose and implement mitigative controls to address and minimize potential threats. You will continually re-evaluate risks to our supply chain through monitoring of industry breaches and security incidents, changes to third-party security posture, and emerging adversary tactics.

Core Responsibilities

• Assess, manage, and report on overall information security risk to Palantir from our supply chain through risk assessments and reviews of third-party suppliers, vendors, and partners.
• Identify, propose, and implement mitigative controls to address supply chain risks or security deficiencies.
• Perform in-depth security assessments of third parties, incorporating numerous data points (e.g. Penetration Tests, Questionnaires, Architecture Diagrams, interviews) to create a comprehensive risk-based conclusion of the security maturity of the third party.
• Provide guidance to Palantir employees and prospective suppliers on Palantir security requirements and remediation advice.
• Build cross-functional partnerships with departments such as Legal, Procurement, Threat Intelligence and Physical Security to identify opportunities for increased supply chain security across the business.
• Leverage business process automation skills to optimize and streamline supply chain security workflows, reducing manual efforts and increasing efficiency across the organization.
• Conduct regular assessments of automated systems to ensure ongoing reliability, security, and performance, and provide support and maintenance as needed.
• Maintain awareness of emerging information security risks and trends, and their impact to our overall supply chain.

What We Value

• Experience performing third-party or supply chain risk assessments or evaluations.
• Strong technical decomposition and analytical skills, with the ability to identify supply chain risks based on industry security breaches and incidents.
• Experience with leveraging systems for scaling processes including but not limited to Jira, Coupa, and PowerBI.
• Exceptional written and verbal communication and organization skills.
• Strong desire to own impactful security outcomes in a fast-paced, dynamic working environment.

What We Require

• A deep understanding of information security controls including; data protection, access controls, policies and standards, proactive security, reactive security, application security, and related measures.
• Experience with information security and risk management frameworks, standards, and certifications (e.g. ISO-27001, NIST 800-53, NIST 800-171, CMMC, SOC2).

Salary
The estimated salary range for this position is estimated to be $82,000 - $135,000/year. Total compensation for this position may also include Restricted Stock units, sign-on bonus and other potential future incentives. Further note that total compensation for this position will be determined by each individual’s relevant qualifications, work experience, skills, and other factors. This estimate excludes the value of any potential sign-on bonus; the value of any benefits offered; and the potential future value of any long-term incentives.
Our benefits aim to promote health and wellbeing across all areas of Palantirians’ lives. We work to continuously improve our offerings and listen to our community as we design and update them. The list below details our available benefits and some of the perks that can be enjoyed as an employee of Palantir Technologies.
Benefits
•  Employees (and their eligible dependents) can enroll in medical, dental, and vision insurance as well as voluntary life insurance•  Employees are automatically covered by Palantir’s basic life, AD&D and disability insurance•  Commuter benefits•  Take what you need paid time off, not accrual based•  2 weeks paid time off built into the end of each year (subject to team and business needs)•  10 paid holidays throughout the calendar year•  Supportive leave of absence program including time off for mil