ZipRecruiter

Log In

2

Full Time Vendor Risk Analyst Jobs in California

Wsgr

Manager, IT Risk Operations

Palo Alto, CA · On-site

$147K - $198K/yr

Analyze incident, change, and problem management data toidentifytrends and improvement opportunities * Drive workflow optimization and automation within ServiceNow Vendor Risk Management * Review and ...

Waymo

Insurance Risk Management Analyst

Mountain View, CA · On-site

$125K - $152K/yr

Manage Certificate of Insurance (COI) requests and review incoming vendor/contractor COIs to ensure ... Travel Required: * 5% The expected base salary range for this full-time position across US ...

Coinme

Director of Payments & Risk

San Francisco, CA · On-site

You set the defense architecture across fraud vendors, card processors, and banking partners ... Build and develop the team: hire, coach, and grow risk analysts and scientists, and train them to ...

AtWork Personnel Services

Be Seen First

Cybersecurity & Third-Party Risk Manager

Sacramento, CA · Remote

$114K - $124K/yr

Evaluate vendor security posture using SOC 2 reports, ISO 27001 certifications, security questionnaires, and other supporting documentation. * Maintain and manage the enterprise cybersecurity risk ...

New

previous page

Showing results 41-60

All JobsVendor Risk Analyst JobsFull Time Vendor Risk Analyst JobsFull Time Vendor Risk Analyst Jobs in California

Full Time Vendor Risk Analyst information

What is the difference between Full Time Vendor Risk Analyst vs Contract Vendor Risk Analyst?

AspectFull Time Vendor Risk AnalystContract Vendor Risk Analyst
Employment TypePermanent, full-timeTemporary, project-based or hourly
CertificationsTypically required or preferred (e.g., CRISC, CISA)May have similar certifications but less emphasized
Work EnvironmentIn-house or remote within a companyOften remote or on-site at client locations
Industry UsageCommon in finance, healthcare, and tech sectorsUsed across industries for specific projects

The main difference between a Full Time Vendor Risk Analyst and a Contract Vendor Risk Analyst lies in employment status and duration. Full Time Analysts are permanent employees with ongoing responsibilities, while Contract Analysts work on short-term projects. Both roles require similar skills and certifications, but the employment type influences job stability and benefits.

What are the most commonly searched types of Vendor Risk Analyst jobs in California?

The most popular types of Vendor Risk Analyst jobs in California are:

Full Time Vendor Risk Analyst jobs near you
Infographic showing various Full Time Vendor Risk Analyst job openings in California as of September 2026, with employment types broken down into 100% Full Time. Highlights an 100% In-person job distribution.

Manager, IT Risk Operations

Palo Alto, CA • On-site

Wsgr
Law Firms • 1 - 5K employees
Learn more about Wsgrexternal

$147K - $198K/yr

Full-time

Re-posted 4 days ago

Job description

Wilson Sonsini is the premier legal advisor to technology, life sciences, and other growth enterprises worldwide. We represent companies at every stage of development, from entrepreneurial start-ups to multibillion-dollar global corporations, as well as the venture firms, private equity firms, and investment banks that finance and advise them. The firm has approximately 1,100 attorneys in 17 offices: 13 in the U.S., two in China, and two in Europe. Our broad spectrum of practices and entrepreneurial spirit allow exceptional opportunities for professional achievement and career growth.

Essential Duties and Responsibilities:

This high-impact position in the Governance, Risk & Compliance function sits at the center of the firm's technology, security, and operational ecosystem.Managing a small team, you willwork closely with senior leaders across IT, Security Engineering, General Counsel, and firm leadership to shape how risk is understood, measured, and managed.

The role can be 100% remote or hybrid-in person if located near a physical office.

Strengthen IT Governance & Controls

  • Lead the development of executive-level reporting on IT risk, compliance posture, and operational performance
  • Build and evolve KPI/KRI dashboards that provide real-time visibility into risk trends and control effectiveness
  • Translate complex IT and security data into meaningful insights for decision making
  • Ensure adherence to IT policies, standards, and leading frameworks (e.g., NIST, ISO 27001)
  • Own and evolve the firm's IT risk register and Risk & Control Self-Assessment (RCSA) program
  • Identifyemerging and systemic risks across IT, security, privacy, and operational processes

Incident Governance & Investigations

  • Partner with General Counsel, Security, and IT to lead internal investigations

Own ITSM Governance & ServiceNow Analytics

  • Oversee governance and reporting across the IT Service Management (ITSM) ecosystem
  • Analyze incident, change, and problem management data toidentifytrends and improvement opportunities
  • Drive workflow optimization and automation within ServiceNow

Vendor Risk Management

  • Review and advise on vendor agreements
  • Enhance vendor risk processes, including risk tiering, assessments, and monitoring
  • Identifyopportunities to streamline processes, enhance reporting, and improve governance
  • Introduce data-driven approaches to risk management and operational oversight
  • Perform related duties as assigned or directed by supervisor
  • Maintain compliance with all firm policies and procedures

Education and/or Work Experience Requirements:

  • Bachelor's degree preferred
  • Seven years of experience in ITrisk,securitycompliance,technologyaudit, or ITgovernancepreferred
  • Experienceoperatingin complex, regulated environments (e.g., law firms, financial services, consulting)preferred
  • Proven ability to lead reporting, analytics, and governance initiatives
  • Familiarity with ServiceNow and ITSM reporting including understanding of incident, change, and problem management lifecycles
  • Experience with security and collaboration platforms such as Microsoft 365,Purviewand email security tools
  • Working knowledge of frameworks such as the NIST Cybersecurity Framework, ISO/IEC 27001and SOC 2
  • Strong understanding of control design, risk registers, RCSA programs, and audit response
  • Basic understanding of privacy regulations
  • CISA, CISSP, CRISC,CTPRMand/or ITILpreferred
The primary location for this job posting is in Palo Alto, but other locations may be listed. The actual base pay offered will depend upon a variety of factors, including but not limited to the selected candidate's qualifications, years of relevant experience, level of education, professional certifications and licenses, and work location. The anticipated pay range for this position is as follows:Palo Alto, New York, San Francisco: $163,200 - $220,800 per year. Austin, Boston, Boulder, Century City, Los Angeles, Salt Lake City, San Diego, Seattle: $147,050 - $198,950 per year.

The compensation for this position may include a discretionary year-end merit bonus based on performance. We offer a highly competitive salary and benefits package.

Benefits information can be found here. Equal Opportunity Employer (EOE).

Apply