1

Director Third Party Risk Management Jobs (NOW HIRING)

Leading Third Party Risk Management engagements, including third-party assessments, ongoing monitoring activities, and risk evaluation efforts * Managing and overseeing assessment teams, project ...

The Role We are looking for an Associate Director, Third-Party Risk Management (TPRM) to own the TPRM pillar at Flex. This is not a program management role. It is a pillar ownership role: you set the ...

Third-Party Risk Analyst

Mclean, VA · On-site

$45 - $47/hr

Key Responsibilities Risk & Program Management * Partner with the Governance Advisor to execute EOCTP and VIM programs. * Ensure divisions comply with internal guidance for managing third-party risk.

Third Party Risk Director

Johnston, RI · Hybrid

$178K - $186K/yr

Description Director, Third-Party Payments Oversight Summary The Director, Third-Party Payments ... Manage and develop a team of payments professionals; set priorities, coach performance, and build ...

Third Party Risk Director

Boston, MA · Hybrid

$178K - $186K/yr

Description Director, Third-Party Payments Oversight Summary The Director, Third-Party Payments ... Manage and develop a team of payments professionals; set priorities, coach performance, and build ...

next page

Showing results 1-20

Director Third Party Risk Management information

See salary details

$54K

$143.2K

$260K

How much do director third party risk management jobs pay per year?

As of Jun 4, 2026, the average yearly pay for director third party risk management in the United States is $143,185.00, according to ZipRecruiter salary data. Most workers in this role earn between $105,500.00 and $167,500.00 per year, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive as a Director of Third Party Risk Management, and why are they important?

To thrive as a Director of Third Party Risk Management, you typically need expertise in risk assessment, compliance, vendor management, and a relevant degree in business, finance, or a related field. Familiarity with risk management frameworks, regulatory requirements, and tools like GRC (Governance, Risk, and Compliance) platforms or vendor risk assessment software is essential. Exceptional leadership, strategic thinking, and negotiation skills help manage cross-functional teams and build strong relationships with vendors. These competencies are crucial to effectively mitigate third-party risks, ensure regulatory compliance, and protect the organization’s reputation and operations.

What are some of the key challenges a Director of Third Party Risk Management faces when implementing risk assessment frameworks across a large organization?

One of the main challenges is ensuring consistency and thoroughness in risk assessments across diverse business units and geographies, each with varying levels of vendor complexity and regulatory requirements. Directors often need to balance rigorous risk controls with the need for operational efficiency, which requires strong communication and influence skills to gain stakeholder buy-in. Additionally, keeping up with evolving third-party risks, such as cybersecurity threats and supply chain disruptions, demands continuous process improvement and cross-functional collaboration with IT, legal, and procurement teams.

What does a Director of Third Party Risk Management do?

A Director of Third Party Risk Management is responsible for overseeing an organization's approach to identifying, assessing, and mitigating risks associated with its external partners, vendors, and suppliers. This role involves developing risk assessment frameworks, ensuring compliance with relevant regulations, and collaborating with internal teams to address any third-party issues that may affect the business. The director also leads the creation and execution of policies and procedures to manage third-party risks effectively, balancing operational needs with regulatory requirements.

What is the difference between Director Third Party Risk Management vs Vendor Risk Manager?

AspectDirector Third Party Risk ManagementVendor Risk Manager
CredentialsTypically requires advanced degrees and certifications like CTPRP or CRISCOften requires certifications such as CTPRP, CRISC, or vendor-specific training
Work EnvironmentStrategic leadership, overseeing multiple teams and enterprise-wide risk policiesOperational focus, managing vendor assessments and risk mitigation activities
Industry UsageUsed in large organizations across finance, healthcare, and technology sectorsCommon in organizations with extensive vendor networks, especially in finance and IT

The main difference is that the Director Third Party Risk Management holds a strategic, leadership role overseeing enterprise-wide third-party risks, while the Vendor Risk Manager focuses on operational vendor assessments and risk mitigation. Both roles require similar certifications but differ in scope and level of responsibility.

More about Director Third Party Risk Management jobs
What cities are hiring for Director Third Party Risk Management jobs? Cities with the most Director Third Party Risk Management job openings:
What are the most commonly searched types of Third Party Risk Management jobs? The most popular types of Third Party Risk Management jobs are:
What states have the most Director Third Party Risk Management jobs? States with the most job openings for Director Third Party Risk Management jobs include:
What job categories do people searching Director Third Party Risk Management jobs look for? The top searched job categories for Director Third Party Risk Management jobs are:
Infographic showing various Director Third Party Risk Management job openings in the United States as of May 2026, with employment types broken down into 98% Full Time, and 2% Part Time. Highlights an 92% Physical, 2% Hybrid, and 6% Remote job distribution, with an average salary of $143,185 per year, or $68.8 per hour.

Operational Risk Management Department-Third Party Risk Management AVP/Associate

Bank of China Limited, New York Branch

Manhattan, NY • On-site

$42K/yr

Full-time

This job post has expired today. Applications are no longer accepted.


Job description

Introduction

Established in 1912, Bank of China is one of the largest banks in the world, with over $3 trillion in assets and a footprint that spans more than 60 countries and regions. Our long-term outlook, institutional weight and global breadth provide our clients with a stable and reliable financial partner, whether in Corporate or Personal Banking or our Trade Services, Commodities, Financial Institutions and Global Markets lines of business.

Overview

The incumbent is responsible for all aspects of and will provide oversight, guidance and challenge to the Bank's Third Party Risk Management (TPRM). S/he will establish and enhance the Third Party Risk Framework, draft and maintain TPRM policies and standards, develop and execute TPRM annual work plans, and conduct periodic risk assessments. S/he will also assess, monitor and track TPRM lifecycle activities, ensure documentation completeness, and prepare aggregated TPRM reports on risk data and analysis.

Responsibilities

Include but are not limited to

Third Party Risk Management Framework

  • Establish and enhance the Third Party Risk Framework, ensure it consists of appropriate components to effectively manage third party risks
  • Update third party risk management policies and procedures
  • Develop and execute a third party risk annual work plan to review and challenge risk identification, assessment, control evaluation and testing activities
  • Utilize a consistent risk rating methodology for controls that aligns with the Operational Risk Framework
  • Conduct periodic risk assessment of third party risks

Third Party Risk Management Lifecycle & Implementation of TPRM Second Line Review

  • Assess, monitor and track third party risk management lifecycle activities as second line of defense
  • Provide third party risk management guidance to First Line Units ("FLUs")
  • Ensure the completeness of the central documentations of the bank wide third party population
  • Prepare aggregated third party risk report
  • Keep abreast of current industry tools, trends, and regulatory requirements
  • Work with other SMEs under the third party risk management framework to ensure the third party risk management activities are efficient
  • Ensure third party risk management system is implemented and all updates are installed timely
  • Provide timely training of system upgrades or updates to all system users

Risk Assessment

  • Assist with new product management risk assessment process
  • Assist with RACA quarterly review in the expertise of third party risk management

BSA/AML, Compliance, and Talent Management

  • Complete required BSA/AML, and other compliance trainings as provided
  • Beware of BSA/AML issues, provide risk warnings to First Line Units and internal risk management departments when noticed

#LI-WW1

Qualifications
  • Bachelor's degree is required, and an advanced degree is preferred
  • Minimum 5 years of work experience in financial service industry is required for AVP level
  • Minimum 5 years of work experience in risk management and minimum 2 years of third party risk management experience are required for AVP level; Minimum 1 year of work experience in third party risk management is required for Associate level 
  • Knowledge of operational risk management and assessment, regulatory and compliance, general IT risk/IT operation as well as business lines and workflow in financial/banking industry is required
  • Certified Third Party Risk Professional or Certified Regulatory Vendor Program Manager is preferred but not required
Pay Range

Actual salary is commensurate with candidate's relevant years of experience, skillset, education and other qualifications.

USD $42,000.00 - USD $150,000.00 /Yr.Employment Type: FULL_TIME