Security Contract Manager

Role: Security Contract Manager

Location: US Remote

Synonymous Business Title (s): Security and Compliance Program Manager

Overview:

Blue Yonder is a global leader in AIdriven digital supply chain solutions, empowering businesses to optimize and transform their operations with innovative, intelligent technology. As we shape the future of global cybersecurity, our GRC team is seeking a talented Security Contract Manager.

Every service Blue Yonder offers depends on trusted third-party service - cloud hosts, AI providers, payment processors, and niche micro-SaaS tools. Above all, Blue Yonder values our customers and the security of their data. Your job is to make sure Blue Yonder's relationships with vendors and customers never become our weakest link. You'll weave iron-clad information-security clauses into every vendor and customer contract and verify that partners live up to what they signed.

What You'll Be Doing:

• Contract Security Governance - Draft, negotiate, and maintain standard information-security, privacy, and data-protection language in MSAs, SOWs, DPAs, and customer agreements. Track remediation of contractually identified gaps related to GDPR, SOC 2, ISO 27001, and the EU AI Act.
• Track Deviations - Track non-standard contract terms for customers and vendors so that the contractually unique requirements can be quickly acted upon.
• Vendor Security Assessments - Lead risk reviews for new and renewal vendors (questionnaires, SIG/Core, evidence collection). Rate residual risk, document mitigations, and approve or reject onboarding.
• Audit & Compliance - Schedule and conduct targeted onsite / virtual audits to confirm vendors meet contractual controls (e.g., encryption at rest, vulnerability management SLAs, incident-reporting). Track findings to closure.
• Stakeholder Enablement - Partner with Legal, Procurement, Sales, and Product to embed security requirements in deal templates, playbooks, and CLM workflows. Provide red-line guidance during high-velocity sales cycles.
• Program Metrics & Uplift - Publish dashboards for contractual adherence and drive quarterly retrospectives to harden the program. Identify opportunities for automation (e.g., questionnaire ingestion, continuous monitoring).

What We're Looking For:

Required Qualifications

• 7+ years in Information-Security, Security Privacy, or Security Vendor-Risk roles.
• 3+ years drafting/negotiating security clauses for technology contracts.
• Hands-on experience with SaaS and/or PaaS architectures (multi-tenant, micro-services, AI/ML pipelines).
• Solid knowledge of major frameworks/regulations: GDPR, CCPA, PCI-DSS v4.0, ISO 27001:2022, SOC 2, CSA CCM.
• Familiarity with common assessment tools (SIG Lite/Core, CAIQ, VSA) and audit standards.
• Strong cross-functional communication skills-comfortable in Vendor Q&A sessions, red-line negotiations, and board-level briefings.
• Bachelor's in Cybersecurity, Information Systems, or equivalent practical experience.

Preferred Qualifications

• JD or Paralegal background with focus on technology contracts.
• 3+ years of Third-party risk management experience.
• Experience auditing hyperscale cloud providers and Gen-AI model vendors.
• Certifications: CISA, CIPP/E, CDPSE, or CISSP.

#LI-MH1

#LI-Remote

-------------------------------------------

The annual base salary for this position annually is $ 130,023 - $ 155,000 USD.

The salary range information provided, reflects the anticipated base salary range for this position based on current national data. Minimums and maximums may vary based on location. Individual salary will be commensurate with skills, experience, certifications or licenses and other relevant factors. In addition, this role will be eligible to participate in either the annual performance bonus or commission program, determined by the nature of the position.

At Blue Yonder, we care about the wellbeing of our employees and those most important to them. This is reflected in our robust benefits package and options that includes:

• Comprehensive Medical, Dental and Vision

• 401K with Matching

• Flexible Time Off

• Corporate Fitness Program

• A variety of voluntary benefits such as; Legal Plans, Accident and Hospital Indemnity, Pet Insurance and much more

At Blue Yonder, we are committed to a workplace that genuinely fosters inclusion and belonging in which everyone can share their unique voices and talents in a safe space. We continue to be guided by our core values and are proud of our diverse culture as an equal opportunity employer. We understand that your career search may look different than others, and embrace the professional, personal, educational, and volunteer opportunities through which people gain experience.

Our Values

If you want to know the heart of a company, take a look at their values. Ours unite us. They are what drive our success - and the success of our customers. Does your heart beat like ours? Find out here: Core Values

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.