Vendor Supply Chain Analyst

About this role

Verify AI-generated research on vendors’ security posture and maintain a reliable, evidence-backed vendor library. You’ll help measure research accuracy, calibrate scoring, and provide feedback to improve the research pipeline.

About the company

Oneleet helps startups get and stay security-compliant with automated controls and evidence collection. It supports teams pursuing SOC 2 and similar frameworks.

The team

Security/Compliance

What you'll do

• Verify vendor research against saved sources and correct unsupported claims.
• Research new vendors, resolve incomplete records, and review significant changes.
• Find accessible sources or upload documents when the research pipeline cannot access them.
• Evaluate accuracy, investigate score discrepancies, and recommend evidence-based adjustments.
• Document recurring research errors and provide actionable feedback to engineering.
• Maintain traceable evidence and develop consistent verification runbooks.

What we're looking for

• Hands-on experience with vendor security due diligence or third-party security assessments.
• Strong research skills and sound judgment distinguishing evidence from marketing claims.
• Familiarity with SaaS security practices and public security, privacy, and compliance documentation.
• Analytical approach to investigating discrepancies and documenting uncertainty.
• Clear written communication and careful documentation habits.
• Self-starter comfortable adapting quickly and building processes in an ambiguous environment.

Nice to have

• Experience evaluating AI-generated research or designing human review processes.
• Experience measuring research accuracy, calibrating scores, or building quality assurance processes.
• Background in third-party risk, compliance, or security research.
• Early-stage startup experience.
• Scripting or automation skills.

Benefits

• Equity
• 20 days of PTO per year plus 8 floating holidays
• Health and wellness benefits
• Remote work
• Team off-sites