ZipRecruiter

Log In

1

Director Third Party Risk Management Jobs in Boston, MA

YMCA

Sr. Director Risk Management

Brockton, MA · On-site

$70K - $95K/yr

... Director of Risk Management serves as the lead for the organization on all matters related to ... third-party organizations, and high-level volunteers to ensure risk management best practices. • ...

Aqueduct Technologies Inc.

GRC Analyst

Canton, MA · Hybrid

Reporting directly to the Director of GRC, this role plays a pivotal part in designing, executing ... Maintain risk registers and support risk reporting processes Third Party Risk Management: * Conduct ...

Aqueduct Technologies

GRC Analyst

Canton, MA · Hybrid

Reporting directly to the Director of GRC, this role plays a pivotal part in designing, executing ... Maintain risk registers and support risk reporting processes Third Party Risk Management: * Conduct ...

Aqueduct Technologies Inc.

GRC Analyst

Canton, MA · On-site

Reporting directly to the Director of GRC, this role plays a pivotal part in designing, executing ... Maintain risk registers and support risk reporting processes Third Party Risk Management: * Conduct ...

Aqueduct Technologies Inc.

GRC Analyst

Canton, MA · Hybrid

Reporting directly to the Director of GRC, this role plays a pivotal part in designing, executing ... Maintain risk registers and support risk reporting processes Third Party Risk Management: * Conduct ...

OneStudyTeam

Director of Security

Boston, MA · Remote

Oversee third party risk management, due diligence, contractual security requirements, and ... Direct security engineering operations. Manage EDR and threat detection with CrowdStrike, SIEM ...

Deloitte

Senior Consultant - ServiceNow

Boston, MA · Remote

... Third-Party Risk Management, and ServiceNow AI Control Tower use cases * Supporting functional design and configuration of ServiceNow solutions, including forms, workflows, notifications, service ...

next page

Showing results 1-20

People also search for

All JobsDirector Third Party Risk Management JobsDirector Third Party Risk Management Jobs in Boston, MA

Director Third Party Risk Management information

See Boston, MA salary details

$58.7K

$155.6K

$282.5K

How much do director third party risk management jobs pay per year?

As of May 28, 2026, the average yearly pay for director third party risk management in Boston, MA is $155,556.00, according to ZipRecruiter salary data. Most workers in this role earn between $114,600.00 and $182,000.00 per year, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive as a Director of Third Party Risk Management, and why are they important?

To thrive as a Director of Third Party Risk Management, you typically need expertise in risk assessment, compliance, vendor management, and a relevant degree in business, finance, or a related field. Familiarity with risk management frameworks, regulatory requirements, and tools like GRC (Governance, Risk, and Compliance) platforms or vendor risk assessment software is essential. Exceptional leadership, strategic thinking, and negotiation skills help manage cross-functional teams and build strong relationships with vendors. These competencies are crucial to effectively mitigate third-party risks, ensure regulatory compliance, and protect the organization’s reputation and operations.

What are some of the key challenges a Director of Third Party Risk Management faces when implementing risk assessment frameworks across a large organization?

One of the main challenges is ensuring consistency and thoroughness in risk assessments across diverse business units and geographies, each with varying levels of vendor complexity and regulatory requirements. Directors often need to balance rigorous risk controls with the need for operational efficiency, which requires strong communication and influence skills to gain stakeholder buy-in. Additionally, keeping up with evolving third-party risks, such as cybersecurity threats and supply chain disruptions, demands continuous process improvement and cross-functional collaboration with IT, legal, and procurement teams.

What does a Director of Third Party Risk Management do?

A Director of Third Party Risk Management is responsible for overseeing an organization's approach to identifying, assessing, and mitigating risks associated with its external partners, vendors, and suppliers. This role involves developing risk assessment frameworks, ensuring compliance with relevant regulations, and collaborating with internal teams to address any third-party issues that may affect the business. The director also leads the creation and execution of policies and procedures to manage third-party risks effectively, balancing operational needs with regulatory requirements.

What is the difference between Director Third Party Risk Management vs Vendor Risk Manager?

AspectDirector Third Party Risk ManagementVendor Risk Manager
CredentialsTypically requires advanced degrees and certifications like CTPRP or CRISCOften requires certifications such as CTPRP, CRISC, or vendor-specific training
Work EnvironmentStrategic leadership, overseeing multiple teams and enterprise-wide risk policiesOperational focus, managing vendor assessments and risk mitigation activities
Industry UsageUsed in large organizations across finance, healthcare, and technology sectorsCommon in organizations with extensive vendor networks, especially in finance and IT

The main difference is that the Director Third Party Risk Management holds a strategic, leadership role overseeing enterprise-wide third-party risks, while the Vendor Risk Manager focuses on operational vendor assessments and risk mitigation. Both roles require similar certifications but differ in scope and level of responsibility.

What are the most commonly searched types of Third Party Risk Management jobs in Boston, MA? The most popular types of Third Party Risk Management jobs in Boston, MA are:
What are popular job titles related to Director Third Party Risk Management jobs in Boston, MA? For Director Third Party Risk Management jobs in Boston, MA, the most frequently searched job titles are:
What job categories do people searching Director Third Party Risk Management jobs in Boston, MA look for? The top searched job categories for Director Third Party Risk Management jobs in Boston, MA are:
What cities near Boston, MA are hiring for Director Third Party Risk Management jobs? Cities near Boston, MA with the most Director Third Party Risk Management job openings:
Director Third Party Risk Management jobs near you
Infographic showing various Director Third Party Risk Management job openings in Boston, MA as of May 2026, with employment types broken down into 78% Full Time, 8% Part Time, and 14% Contract. Highlights an 65% Physical, 2% Hybrid, and 33% Remote job distribution, with an average salary of $155,556 per year, or $74.8 per hour.
Technology Risk Director- Enterprise Engineering

Technology Risk Director- Enterprise Engineering

Citizens

Westwood, MA • Remote

Other

Medical, Dental, Vision, Retirement, PTO

Posted 21 days ago

Job description

Description

The Enterprise Technology & Security (ETS) Risk Director directs a team of risk professionals, developing comprehensive risk management strategies, and ensuring the organization's technology risk practices are robust, effective, and aligned with industry standards and regulatory requirements. This executive-level position provides strategic leadership over a dedicated ETS risk function, setting the direction for risk identification, assessment, and mitigation across the bank's technology and security domains. The Director serves as a key advisor to senior leadership on technology risk matters, drives the maturation of the enterprise risk framework, and maintains strong relationships with regulators, audit, and governance bodies.

Responsibilities

  • Lead and oversee the Technology Risk Management function, providing strategic direction to a team of risk professionals and fostering a culture of accountability, excellence, and continuous improvement.

  • Develop, implement, and continuously evolve a comprehensive technology risk management strategy and framework aligned with enterprise risk appetite, regulatory expectations, and industry best practices.

  • Oversee the identification, assessment, monitoring, and reporting of technology and security risks across systems, applications, infrastructure, and processes.

  • Serve as the primary executive liaison for regulatory examinations, internal audits, and supervisory engagements related to technology and security risk, ensuring effective coordination and highquality outcomes.

  • Define and maintain technology risk policies, standards, control libraries, and assessment methodologies to support consistent and scalable risk management practices.

  • Partner with senior technology leaders, business executives, compliance, audit, and governance teams to embed risk management into strategic planning and decisionmaking.

  • Provide clear, actionable, executivelevel risk reporting and insights to the Risk Committees and senior management, translating complex risk landscapes into strategic guidance.

  • Oversee the portfolio of risk findings, regulatory commitments, and corrective action plans, driving timely, effective, and sustainable remediation.

  • Lead oversight of Third-Party Risk Management for the organization's technology and security critical service provider relationships.

  • Monitor industry trends, emerging threats, and regulatory developments to proactively adjust the organization's risk posture.

  • Champion a strong riskaware and riskinformed culture across the technology organization through education, engagement, and communication.

Team-Specific Requirements

Cloud & Modern Engineering Platforms

  • Working knowledge of cloud services and architectures (AWS and Azure preferred), including shared responsibility models, identity and access management, and cloudnative security controls.

  • Experience assessing risk in DevSecOps, CI/CD pipelines, containerized workloads (Docker/Kubernetes), and infrastructureascode environments.

Infrastructure, Platform & Engineering Risk

  • Strong understanding of enterprise infrastructure platforms, including Windows, Linux (RHEL), virtualization (VMware), databases, middleware, and core network services.

  • Experience evaluating endoflife (EOL) / endofsupport (EOS) risk, technical debt, and remediation prioritization across large engineering estates.

Cybersecurity & Resilience

  • Handson familiarity with vulnerability management, platform hardening, secure configuration standards, and threat remediation prioritization.

  • Experience with technology resilience, including BCP/DR, cyber recovery, data protection, backup strategies, and resiliency testing.

  • Ability to translate engineering and cyber risks into business impact, service disruption, regulatory exposure, and customer risk.

Risk Frameworks & Governance

  • Deep experience with enterprise technology risk management routines, including RCSAs, issue management, risk assessments, targeted reviews, and control testing.

  • Working knowledge of regulatory and risk frameworks relevant to financial institutions (FFIEC, NIST, ISO, COBIT, COSO, CRI).

  • Proven ability to synthesize large volumes of technical risk data into clear, prioritized executivelevel insights.

Risk, Issue, and Compliance Management

  • Experience using GRC Archer (or equivalent platforms such as OpenPages) to manage RCSAs, issues, action plans, metrics, and regulatory responses.

  • Familiarity with risk reporting, risk dashboards, and executivelevel risk metrics.

Engineering, Security & ITSM Tooling

  • Working knowledge of common enterprise tooling used by engineering and cyber teams, such as ServiceNow, Jira, and Confluence, to support risk intake, issue tracking, and remediation monitoring.

  • Familiarity with vulnerability and security tools such as Qualys, Wiz, CrowdStrike, CyberArk, Splunk, or similar platforms to support effective oversight and challenge.

Monitoring & Reporting

  • Exposure to engineering and operational monitoring platforms (e.g., DataDog, Grafana, Tableau, Power BI), with the ability to interpret signals, trends, and risk indicators rather than operate the tools directly.

Experience & Skills

Required:

  • 12+ years of progressive experience in IT risk management, information security, or internal audit, including 5+ years in a senior leadership role.

  • Demonstrated executive leadership experience, including building and developing high-performing risk teams in complex, regulated environments.

  • Comprehensive expertise in risk frameworks including CRI Profile, NIST 800-53, NIST CSF, COBIT, and ITIL, with a track record of applying them at an enterprise scale.

  • Deep familiarity with regulatory expectations and supervisory frameworks applicable to regional banks (OCC, Federal Reserve, FDIC).

  • Exceptional communication and influencing skills; proven ability to present risk strategy and findings to Board-level and executive audiences.

  • Experience leading large-scale regulatory examinations, audit engagements, and enterprise-wide corrective action programs.

  • Proven ability to set strategic direction, manage organizational priorities, and deliver results in a fast-paced, evolving environment.

Preferred:

  • Prior experience as a risk director or equivalent executive in a federally regulated financial institution.

  • Track record of building or transforming enterprise-level technology risk programs.

  • Strong network within the financial services risk and technology community.

Education

  • Bachelor's degree in Information Technology, Cybersecurity, Business, or a related field required; Master's degree (MBA, MS in Cybersecurity, or equivalent) strongly preferred.
  • One or more of the following certifications are preferred:
  • CISSP (Certified Information Systems Security Professional)
  • CISM (Certified Information Security Manager)
  • CRISC (Certified in Risk and Information Systems Control)
  • CISA (Certified Information Systems Auditor)

Hours & Work Schedule

  • Hours per Week: 40 
  • Work Schedule: Monday-Friday
  • Hybrid: 4 days per week onsite, 1 day remote

Pay Transparency

The salary range for this position is $190,000 - $240,000 per year, plus an opportunity to earn an annual discretionary bonus. Actual pay is based on various factors including but not limited to the work location, and relevant skills and experience.

We offer competitive pay, comprehensive medical, dental and vision coverage, retirement benefits, maternity/paternity leave, flexible work arrangements, education reimbursement, wellness programs and more. Note, Citizens' paid time off policy exceeds the mandatory, paid sick or paid time-away policy of every local and state jurisdiction in the United States. For an overview of our benefits, visit https://jobs.citizensbank.com/benefits .

#LI-Citizens1

Some job boards have started using jobseeker-reported data to estimate salary ranges for roles. If you apply and qualify for this role, a recruiter will discuss accurate pay guidance.

Equal Employment Opportunity

Citizens, its parent, subsidiaries, and related companies (Citizens) provide equal employment and advancement opportunities to all colleagues and applicants for employment without regard to age, ancestry, color, citizenship, physical or mental disability, perceived disability or history or record of a disability, ethnicity, gender, gender identity or expression, genetic information, genetic characteristic, marital or domestic partner status, victim of domestic violence, family status/parenthood, medical condition, military or veteran status, national origin, pregnancy/childbirth/lactation, colleague's or a dependent's reproductive health decision making, race, religion, sex, sexual orientation, or any other category protected by federal, state and/or local laws. At Citizens, we are committed to fostering an inclusive culture that enables all colleagues to bring their best selves to work every day and everyone is expected to be treated with respect and professionalism. Employment decisions are based solely on merit, qualifications, performance and capability.

Education:Why Work for UsEmployment Type: 1ST

Apply