Smartsheet is seeking a dedicated, experienced Third Party Risk Management (TPRM) Senior Analyst to join our Risk team. This is a high-visibility, cross-functional role that requires sustained focus and ownership; you will be a primary point of contact for vendor risk across the organization, interfacing regularly with cross-functional teams (Legal, Procurement, Privacy, and Information Security) as well as system owners.

This role is a meaningful commitment. You will own a portfolio of vendor assessments and help drive program maturity. We are looking for someone who brings deep focus and genuine investment to this work, the kind of professional who sees TPRM not as a checkbox function but as a critical enabler of trust for a global SaaS platform.

You will report to the Third Party Risk Integration Manager located in the US. This role is eligible for remote work within Costa Rica. You  must reside in Costa Rica.

^{You Will}

• Lead end-to-end Third Party Risk Assessments for new and existing vendors, including vendor tiering, scoping, questionnaire management, and findings documentation.
• Own the ongoing monitoring and tracking of vendor risk across Smartsheet's third-party portfolio, ensuring timely follow-up on remediation activities and risk acceptance decisions.
• Evaluate vendor security documentation including SOC 2 reports, penetration testing results, ISO certifications, and other control attestations — and translate findings into clear, actionable risk summaries for stakeholders.
• Drive process improvement initiatives within the TPRM program, identifying opportunities to scale and mature the program through better tooling, automation, and workflow design.
• Collaborate cross-functionally with Legal, Procurement, Information Security, Privacy, and business stakeholders to ensure vendor risk considerations are embedded in sourcing and renewal decisions.
• Leverage AI tools (including Claude and Microsoft Copilot) to increase efficiency in vendor reviews and documentation — while applying sound judgment to review, validate, and take accountability for AI-generated outputs.
• Contribute to broader risk program activities including risk reporting, policy review, and program documentation as part of a lean, high-performing Risk team.
• Support the development of TPRM metrics and reporting to provide leadership with meaningful visibility into the organization's third-party risk exposure.
• Other job duties as assigned

You have

• 5+ years of experience in third party risk management, vendor risk, GRC, information security, audit, or compliance — with direct experience conducting vendor or third-party risk assessments.
• Practical knowledge of one or more risk or regulatory frameworks such as NIST, ISO 27001, COSO, COBIT, AICPA SOC/TSP, PCI DSS, or similar.
• Familiarity with vendor security questionnaire frameworks, including SIG (Shared Assessments) and/or CSA CAIQ.
• Demonstrated ability to review and interpret SOC 2 reports, penetration testing summaries, and other vendor security attestations.
• Experience working in cross-functional environments involving Legal, Procurement, and/or Engineering stakeholders.
• Strong written and verbal communication skills in English, with the ability to translate technical risk findings into clear business language.
• Effective critical thinking and judgment — able to assess risk materiality, prioritize competing demands, and escalate appropriately.
• Comfort working with and evaluating AI-generated content, with a clear understanding of the need to verify outputs before relying on them in risk decisions.
• Adaptability to evolving regulatory requirements and a genuine interest in staying current on the third-party risk landscape.

Nice to have

• Experience with vendor risk management platforms such as AuditBoard, Archer, OneTrust, ServiceNow GRC, Vanta, or Coupa.
• Background in SaaS, cloud, or technology company environments.
• Familiarity with AI-assisted workflows in a GRC or compliance context.
• Experience supporting or contributing to audit processes (e.g., SOC 2, ISO 27001, BARR).
• Relevant certifications such as CISA, CRISC, CTPRP, or equivalent.
• Experience with operational risk across multiple business units, legal entities, or jurisdictions.

Teleworking options from any registered location in Costa Rica (role specific)

About Backblaze

Backblaze is the object storage leader in the open cloud movement, fueling customer success with cloud storage built purposefully to unlock budgets, unburden administrators, and unleash innovators. Together with our partners, we’re helping customers break free from the restrictive, overpriced legacy solutions that hold them back, and blaze forward with the full power of the open cloud in their hands.

Founded in 2007, we scaled the business with less than $3 million in outside funding until 2021, when we did a traditional IPO on the Nasdaq stock exchange. Today, Backblaze generates over $136M ARR and is the leading specialized storage cloud, managing over three billion gigabytes of data storage for 500K+ customers in 175+ countries, including businesses, developers, IT professionals, and individuals.

But while there is a lot to celebrate in our past, there is almost as much opportunity ahead of us. We’re seeking a Production Capacity Analyst to join our team!

About the Role

Backblaze is seeking a detail-oriented, systems-minded Production Capacity Analyst to support the planning, deployment, and management of infrastructure capacity across our global cloud storage platform.

This role is responsible for maintaining accurate and reliable capacity data, supporting forecasting and hardware planning, and improving visibility into system utilization, growth, and cost drivers. You will work closely with Capacity Planning, Production Engineering, Data Center Operations, and Finance teams to ensure infrastructure growth is well understood, well coordinated, and aligned with business demand and development roadmaps.

This is a collaborative, execution-focused role within Cloud Operations, contributing to service reliability and performance, cost efficiency, and operational readiness using high-quality data, thoughtful analysis, and consistent execution.

What You’ll Do

• Collect, reconcile, organize, and analyze data across storage, compute, and network systems to support capacity planning and operational decision making
• Contribute to short and mid-term cluster and data center capacity forecasts by maintaining datasets, validating assumptions, identifying trends, and improving model logic
• Coordinate hardware and site deployment readiness across production environments, including tracking deployments, managing open orders, and effecting internal asset movements to maintain balanced capacity availability
• Maintain and improve reporting on resource utilization, growth results and trajectories, and capacity constraints and risk, ensuring data is accurate, concise, and actionable
• Monitor key capacity metrics and dashboards to proactively identify anomalies, constraints, risks, and visibility issues
• Support Compliance, Security, audit, and reporting efforts related to capacity planning and infrastructure operations by scoping requirements, organizing data and tracking execution
• Contribute to automation of data collection, reporting, and analysis workflows to improve efficiency and reduce manual efforts
• Partner with Capacity Engineering, SRE, and Systems Engineering to ensure capacity data reflects real system behavior and operational conditions
• Communicate findings clearly and support coordination across teams to ensure alignment on capacity-related activities and priorities

Right Fit

• Bachelor’s degree in Computer Science, Engineering, Mathematics, Data Science, Information Technology, Statistics, Economics, Finance, or a related technical field, or equivalent experience
• 2 to 4 years of experience in data analysis, infrastructure operations, capacity planning, infrastructure or production engineering, or a similarly technical role
• Experience working with structured data sets at moderate to large scale using modern database and data analysis tools, preferably SQL, Python, Snowflake, Metabase, Excel, Google Sheets, or similar languages and tools
• Familiarity with observability and monitoring systems, preferably Grafana, Metabase, Prometheus, OpenSearch, or equivalent platforms
• Understanding of core system resources such as CPU, memory, disk, and network, and how they impact performance, utilization, and scalability
• Working knowledge of core capacity planning concepts, including utilization tracking and saturation signals, headroom and buffer management, growth trend analysis, and basic forecasting methods
• Exposure to infrastructure cost modeling and financial analysis, including CapEx planning inputs, cost-per-unit metrics, and tradeoffs among stability, performance, and cost
• Strong attention to detail with a focus on data accuracy, consistency, and validation
• Clear and concise communication skills, with the ability to present technical information to both technical and non-technical stakeholders

At this point, we hope you're feeling excited about the job description you're reading. Even if you don't meet every requirement, we still encourage you to apply. Learning, developing, and growing are key parts of our culture. We're eager to meet people who believe in our mission and can contribute to our team in various ways. We want people to feel comfortable expressing their true selves and to come, stay, and do their best work here.

At Backblaze, we value being fair and good to our customers, partners, and employees. That’s why diversity, equity, and inclusion are at the core of our values. We are committed to fostering a workforce where all employees feel a sense of belonging regardless of race, ethnicity, nationality, gender, sexual orientation, age, religion, socio-economic status, ability, veteran status, and education. We believe that our dedication to cultivating a diverse workspace not only allows us to better serve our customers in over 175 countries but further reinforces our commitment to doing the right thing. We are proud to be an Equal Opportunity Employer.

To understand more about the data we collect and process as part of your application, please view our Backblaze Employee Privacy Notice.

#LATAM

The Senior Analyst, Information Security will be a part of the team responsible for assisting clients and prospects with security and privacy inquiries, managing the daily flow of questionnaires, assessments, and trust related requests, and security and compliance strategy to protect Movable Ink’s platform. You'll work closely with leaders from around the organization to support a strong security posture aimed at protecting our customers' data. This includes ensuring that information security controls are operating effectively and incrementally improved.

Responsibilities:

• Triage, prioritize, and manage incoming client and prospect security requests across email, Zendesk, and other intake channels.
• Investigate and troubleshoot complex issues, perform root-cause analysis, provide advice on risk management strategies, and support the implementation of risk mitigation measures 
• Review various manual processes across the program and find innovative solutions to use automation where possible for process efficiency 
• Coordinate across a variety of teams to gather information and resolve client inquiries
• Perform light TPRM intake and triage, including logging new vendor requests and coordinating basic review steps.
• Support the TPRM process by tracking vendor assessments and maintaining status visibility for stakeholders.
• Assist with internal and external audits, ensuring security practices comply with relevant regulations.
• Stay informed of industry trends, security threats, and regulatory changes, recommending adjustments to access control policies as needed.

Qualifications:

• 3-5 years of experience in a security analyst focused role
• Foundational knowledge of information security, compliance, and SaaS environments
• Experience working with ticketing platforms and Trust Center platforms (or similar tools)
• Excellent troubleshooting skills and the ability to logically think through problem resolution
• Strong communication skills across all levels and departments of the organization
• Must possess high attention to detail and the ability to prioritize work while successfully managing multiple projects and deadlines with minimal oversight
• Exposure to privacy or security-related compliance frameworks preferred (e.g., SOC2, ISO 27,000 series, and GDPR)
• Security related certification(s) a plus

The Deal Desk team’s primary objective is to ensure that complex, high-value deals make their way through internal processes with cross-functional alignment with a focus on achieving the company’s objectives. As a key member, you will help shape negotiation strategies for complex deals and become a trusted advisor to the sales team. If you are a highly motivated individual who thrives in a fast-paced environment and is not afraid to take initiative, this is the right role for you.

Responsibilities:

• Manage non-standard deals through the review process to assess risk, ensure quality assurance, business, and operational compliance
• Collaborate with various teams such as sales, legal, and finance to facilitate deal execution and resolve any issues or conflicts that may arise during the process
• Maintain commercial details in Salesforce and help standardize custom terms across regions, products and channels to enable predictable outcomes
• Serve as a trusted advisor by providing guidance and insights to the sales team on optimal deal structure and pricing
• Assist in streamlining key operational workflows to support efficient and sustainable growth
• Drive improvements in reporting and dashboards to measure outcomes and track key metrics
• Provide ongoing support in documenting our processes as well as best practices and lessons learned in deal strategy
• Foster a high-performing team environment by proactively seeking out opportunities for personal and team development

Qualifications:

• 3+ years of experience in a relevant field (e.g. sales operations, revenue operations, order management, or deal strategy, tech/SaaS background a plus)
• Proficiency in Salesforce (CPQ a plus), Excel, and Google Sheets
• Ability to build relationships and trust with internal stakeholders at all levels across all functions
• Project management and risk assessment abilities
• Operates with minimal supervision and high discretion
• Organizational and analytical skills
• Out of the box thinker and ability to think creatively to solve problems