Senior Contract & Compliance Associate
Location: Remote
Compensation: $89,501 – 127,186 per year, depending on experience and qualifications.
Employment Type: Full-Time
Employment Type: Full-Time
What you can expect as the Senior Contract & Compliance Specialist at Fortress…
The Senior Contract & Compliance Specialist independently manages procurement contracting activities and provides operational support for key components of Fortress's Third-Party Risk Management (TPRM) and subcontracting compliance programs. This role reviews and negotiates commercial agreements — including NDAs, MSAs, SOWs, SaaS and cloud agreements, DPAs, and amendments — using established playbooks and a delegation of authority matrix, while engaging Security and other subject matter experts when appropriate. Working collaboratively with stakeholders across the organization, this position plays a critical role in protecting Fortress's contractual and compliance interests, identifying cost savings, and ensuring operational continuity. For an experienced contracts professional, this is a compelling opportunity to take real ownership, expand expertise in third-party risk and compliance, and directly contribute to Fortress's success in a remote, cross-functional role.
The Senior Contract & Compliance Specialist independently manages procurement contracting activities and provides operational support for key components of Fortress's Third-Party Risk Management (TPRM) and subcontracting compliance programs. This role reviews and negotiates commercial agreements — including NDAs, MSAs, SOWs, SaaS and cloud agreements, DPAs, and amendments — using established playbooks and a delegation of authority matrix, while engaging Security and other subject matter experts when appropriate. Working collaboratively with stakeholders across the organization, this position plays a critical role in protecting Fortress's contractual and compliance interests, identifying cost savings, and ensuring operational continuity. For an experienced contracts professional, this is a compelling opportunity to take real ownership, expand expertise in third-party risk and compliance, and directly contribute to Fortress's success in a remote, cross-functional role.
Responsibilities Include:
- Manage assigned vendor contracting end to end, including negotiating pricing and commercial terms and reviewing and negotiating NDAs, MSAs, SOWs, SaaS and cloud agreements, order forms, DPAs, amendments, renewals, and other vendor agreements using established playbooks and the delegation of authority matrix
- Review and negotiate information security, data protection, confidentiality, insurance, liability, and other risk provisions within established parameters, engaging Security or other subject matter experts when appropriate.
- Negotiate commercial terms to protect Fortress's interests, identify opportunities for cost savings or avoidance, and appropriately escalate exceptions outside established authority.
- Proactively manage contract renewals, obligations, and key dates to prevent avoidable expirations, unfavorable renewals, and operational disruptions.
- Manage day-to-day TPRM operational activities, including vendor intake, initial risk determination, due diligence coordination, documentation, ongoing monitoring, and reassessments, ensuring requirements and timelines are met.
- Manage day-to-day subcontracting plan compliance, including documentation, tracking, deadlines, and reporting, in partnership with the Government Compliance Manager and other subject matter experts.
- Maintain accurate and timely contract, TPRM, and compliance records to support reporting, compliance, and audit readiness.
- Collaborate with business stakeholders throughout contract negotiations to understand business needs, evaluate proposed terms and tradeoffs, incorporate stakeholder feedback, and move agreements toward resolution; mentor junior team members and support additional contracting and compliance activities as business needs evolve.
Minimum Qualifications:
- 5+ years of relevant experience in contracts, procurement, compliance, third-party risk management, or a related function, including substantial hands-on experience independently reviewing and negotiating vendor contracts and NDAs and the ability to apply contracting experience across different agreement types.
- Experience reviewing and negotiating vendor contract provisions related to information security, data protection, confidentiality, and risk, with the judgment to recognize when Security or other subject matter expertise is required.
- Foundational knowledge of third-party risk management, vendor due diligence, and common information security concepts and terminology sufficient to support TPRM operations and effectively coordinate with Security and other subject matter experts; technical security assessment expertise is not required.
- Demonstrated ability to independently manage multiple contracts, renewals, compliance activities, and deadlines while exercising sound judgment and escalating appropriately.
- Excellent oral and written communication skills, including the ability to negotiate effectively with vendors and clearly communicate contract, risk, and compliance requirements to internal stakeholders.
- Proficiency with Microsoft Office Suite and experience with contract management, task/workflow management, CRM, or similar business systems.
- Proficiency using AI tools for professional work, including the ability to critically evaluate and validate AI-generated output before use.
Preferred Skills:
- Experience supporting the day-to-day operation of a TPRM program, including vendor intake, due diligence, monitoring, or reassessments.
- Knowledge of GSA subcontracting plan requirements or experience supporting subcontracting plan compliance.
- Current recognized TPRM certification; candidates without a certification will be expected to obtain one within six months of hire with Fortress sponsorship.
Education:
- Bachelors Degree or equivalent professional work experience required.
Employee Benefits:
- Remote and Hybrid working environment
- Competitive pay structure
- Medical, dental, vision plans with employees covered up to 90% with highly progressive options for dependents and families
- Company paid life, short- and long-term disability insurance
- Employee Assistance Program
- 401(k) match
- Flexible Paid Time Off
- Parental Leave
Employment Perks:
- We provide each employee with professional growth opportunities through succession planning, up-skilling, and certifications
- Tuition and certification reimbursement
- Employee Referral Programs
- Company Sponsored Events
Fortress is proud to be an Equal Opportunity Employer. All employees and applicants will receive consideration for employment without regard to age, color, disability, gender, national origin, race, religion, sexual orientation, gender identity, protected veteran status, or any other classification protected by federal, state, or local law. Fortress Information Security takes part in the E-Verify process for all new hires.
For positions located in the US, the following conditions apply. If you are made a conditional offer of employment, you will have to undergo a drug test. ADA Disclaimer: In developing this job description care was taken to include all competencies needed to successfully perform in this position. However, for Americans with Disabilities Act (ADA) purposes, the essential functions of the job may or may not have been described for purposes of ADA reasonable accommodation. All reasonable accommodation requests will be reviewed and evaluated on a case-by-case basis.
For positions located in the US, the following conditions apply. If you are made a conditional offer of employment, you will have to undergo a drug test. ADA Disclaimer: In developing this job description care was taken to include all competencies needed to successfully perform in this position. However, for Americans with Disabilities Act (ADA) purposes, the essential functions of the job may or may not have been described for purposes of ADA reasonable accommodation. All reasonable accommodation requests will be reviewed and evaluated on a case-by-case basis.