Description
WebMD is hiring a Vendor Risk & Compliance Engineer to lead and improve vendor security risk assessments using AI, evaluate controls against NIST, HIPAA, and SOC 2 frameworks, coordinate risk treatment plans, and maintain risk reporting in OneTrust. The role also involves improving assessment methodologies, supporting audits, and embedding security-by-design. Candidates should have 4–6 years of vendor and third-party risk assessment experience, strong GRC knowledge, hands-on tooling experience, and strong communication and organizational skills. The position offers a salary of $82,000–$97,000, a discretionary bonus, and medical, dental, and vision benefits.
