Vendor Risk Manager
Westport, CT · On-site
Vendor Risk Manager Dalio Family Office Dalio Family Office Overview: The Dalio Family Office (DFO ... Strong risk assessment and analytical skills * Technical understanding of enterprise security ...
Vendor Risk Manager
Westport, CT · On-site
Vendor Risk Manager Dalio Family Office Dalio Family Office Overview: The Dalio Family Office (DFO ... Strong risk assessment and analytical skills * Technical understanding of enterprise security ...
Vendor Risk Manager
Westport, CT · Hybrid
Vendor Risk Manager Dalio Family Office Dalio Family Office Overview: The Dalio Family Office (DFO ... Strong risk assessment and analytical skills * Technical understanding of enterprise security ...
Vendor Risk Manager
Westport, CT · Hybrid
Vendor Risk Manager Dalio Family Office Dalio Family Office Overview: The Dalio Family Office (DFO ... Strong risk assessment and analytical skills * Technical understanding of enterprise security ...
Vendor Risk Manager
Westport, CT · On-site
Vendor Risk Manager Dalio Family Office Dalio Family Office Overview: The Dalio Family Office (DFO ... Strong risk assessment and analytical skills * Technical understanding of enterprise security ...
Vendor Risk Manager
Westport, CT · On-site
Vendor Risk Manager Dalio Family Office Dalio Family Office Overview: The Dalio Family Office (DFO ... Strong risk assessment and analytical skills * Technical understanding of enterprise security ...
Vendor Risk Manager
Westport, CT · Hybrid
Vendor Risk Manager Dalio Family Office Dalio Family Office Overview: The Dalio Family Office (DFO ... Strong risk assessment and analytical skills * Technical understanding of enterprise security ...
Vendor Risk Manager
Westport, CT · Hybrid
Vendor Risk Manager Dalio Family Office Dalio Family Office Overview: The Dalio Family Office (DFO ... Strong risk assessment and analytical skills * Technical understanding of enterprise security ...
Be Seen First
Risk Analyst
Woodbury, NY · On-site
$32 - $35/hr
Third-Party Risk Analyst II The Third-Party Risk Analyst II supports the Enterprise Risk Management team by assessing and monitoring risks associated with current and prospective third-party vendors.
New
Quick apply
Be Seen First
Risk Analyst
Woodbury, NY · On-site
$32 - $35/hr
Third-Party Risk Analyst II The Third-Party Risk Analyst II supports the Enterprise Risk Management team by assessing and monitoring risks associated with current and prospective third-party vendors.
New
Operational Risk and Control Analyst
New York, NY · On-site
$75K - $110K/yr
Coordinate and conduct Vendor Risk Assessment, Model Risk Assessment, and Operational Risk Event (Business Continuity) Assessment. * Conduct analyses of risk data to identify trends and potential ...
Quick apply
Operational Risk and Control Analyst
New York, NY · On-site
$75K - $110K/yr
Coordinate and conduct Vendor Risk Assessment, Model Risk Assessment, and Operational Risk Event (Business Continuity) Assessment. * Conduct analyses of risk data to identify trends and potential ...
Operational Risk and Control Analyst
New York, NY · Hybrid
$75K - $110K/yr
Coordinate and conduct Vendor Risk Assessment, Model Risk Assessment, and Operational Risk Event (Business Continuity) Assessment. * Conduct analyses of risk data to identify trends and potential ...
Operational Risk and Control Analyst
New York, NY · Hybrid
$75K - $110K/yr
Coordinate and conduct Vendor Risk Assessment, Model Risk Assessment, and Operational Risk Event (Business Continuity) Assessment. * Conduct analyses of risk data to identify trends and potential ...
Senior Fintech Risk Analyst
Manhattan, NY · On-site
$122.72 - $137.50/hr
Conduct the risk analysis and due diligence for 4th-party vendors, while building and maintaining the 4th party vendor register ecosystem. * Execute 1LoD Partner Risk Oversight: Serve as the First ...
New
Senior Fintech Risk Analyst
Manhattan, NY · On-site
$122.72 - $137.50/hr
Conduct the risk analysis and due diligence for 4th-party vendors, while building and maintaining the 4th party vendor register ecosystem. * Execute 1LoD Partner Risk Oversight: Serve as the First ...
New
Collaborate with vendor management tool partner to ensure timely and efficient completion of vendor risk assessments. Perform review of the Third-Party Risk Management Policy and propose updates to ...
Collaborate with vendor management tool partner to ensure timely and efficient completion of vendor risk assessments. Perform review of the Third-Party Risk Management Policy and propose updates to ...
Head of Vendor Management & Governance
Manhattan, NY · On-site
$120 - $150/hr
Support contract renewal and renegotiation cycles by providing spend analytics, vendor performance data, and risk assessments to inform financial decision-making and budget cycle inputs * Play a key ...
Head of Vendor Management & Governance
Manhattan, NY · On-site
$120 - $150/hr
Support contract renewal and renegotiation cycles by providing spend analytics, vendor performance data, and risk assessments to inform financial decision-making and budget cycle inputs * Play a key ...
Head of Vendor Management & Governance
Manhattan, NY · On-site
$120K - $150K/yr
Support contract renewal and renegotiation cycles by providing spend analytics, vendor performance data, and risk assessments to inform financial decision-making and budget cycle inputs * Play a key ...
Quick apply
Head of Vendor Management & Governance
Manhattan, NY · On-site
$120K - $150K/yr
Support contract renewal and renegotiation cycles by providing spend analytics, vendor performance data, and risk assessments to inform financial decision-making and budget cycle inputs * Play a key ...
Cyber Security Risk Analyst
New York, NY · On-site
The Cyber Security Risk Analyst will be responsible for risk assessments, Cloud mitigations ... Experience evaluating 3rd party vendors supporting Banks processes with focus on date protection.
Cyber Security Risk Analyst
New York, NY · On-site
The Cyber Security Risk Analyst will be responsible for risk assessments, Cloud mitigations ... Experience evaluating 3rd party vendors supporting Banks processes with focus on date protection.
Risk Management Analyst
Fairfield, NJ · Hybrid
Risk Management Analyst Location: 185 US-46, Fairfield, NJ 07004, United States (Hybrid) JOB ... with insurance vendors * Track claims, direct investigations, monitor reserves and maintain ...
Quick apply
Risk Management Analyst
Fairfield, NJ · Hybrid
Risk Management Analyst Location: 185 US-46, Fairfield, NJ 07004, United States (Hybrid) JOB ... with insurance vendors * Track claims, direct investigations, monitor reserves and maintain ...
The Cyber Security Risk Analyst will be responsible for risk assessments, Cloud mitigations ... Experience evaluating 3rd party vendors supporting Banks processes with focus on date protection.
The Cyber Security Risk Analyst will be responsible for risk assessments, Cloud mitigations ... Experience evaluating 3rd party vendors supporting Banks processes with focus on date protection.
The Cyber Security Risk Analyst will be responsible for risk assessments, Cloud mitigations ... Experience evaluating 3rd party vendors supporting Banks processes with focus on date protection.
The Cyber Security Risk Analyst will be responsible for risk assessments, Cloud mitigations ... Experience evaluating 3rd party vendors supporting Banks processes with focus on date protection.
The Internship Program Our 10-week summer program puts real work of the firm in your hands. You ... The Summer Analyst will contribute to a variety of the Risk team's functions and gain practical ...
The Internship Program Our 10-week summer program puts real work of the firm in your hands. You ... The Summer Analyst will contribute to a variety of the Risk team's functions and gain practical ...
2027 Risk Summer Analyst
Greenwich, CT · On-site
The Internship Program Our 10-week summer program puts real work of the firm in your hands. You ... The Summer Analyst will contribute to a variety of the Risk team's functions and gain practical ...
2027 Risk Summer Analyst
Greenwich, CT · On-site
The Internship Program Our 10-week summer program puts real work of the firm in your hands. You ... The Summer Analyst will contribute to a variety of the Risk team's functions and gain practical ...
Cyber Security Risk Analyst
Manhattan, NY · On-site
The Cyber Security Risk Analyst will be responsible for conducting risk assessments, managing ... party vendors supporting Banks processes with focus on data protection. • Proven ability ...
Cyber Security Risk Analyst
Manhattan, NY · On-site
The Cyber Security Risk Analyst will be responsible for conducting risk assessments, managing ... party vendors supporting Banks processes with focus on data protection. • Proven ability ...
Perform vendor risk assessments across information security, operational resilience, financial ... Strong analytical, communication, and stakeholder management skills. * Ability to operate ...
Perform vendor risk assessments across information security, operational resilience, financial ... Strong analytical, communication, and stakeholder management skills. * Ability to operate ...
Cybersecurity Risk Analyst II
New York, NY · On-site
$119K - $140K/yr
Own CLEAR's third-party risk management program end-to-end, including vendor security assessments ... Applying analytical and critical thinking skills to quickly understand new technologies, systems ...
Cybersecurity Risk Analyst II
New York, NY · On-site
$119K - $140K/yr
Own CLEAR's third-party risk management program end-to-end, including vendor security assessments ... Applying analytical and critical thinking skills to quickly understand new technologies, systems ...
Internship Vendor Risk Analyst information
What is an internship vendor risk analyst?
An Internship Vendor Risk Analyst is an entry-level position, often designed for students or recent graduates, that focuses on assessing and managing the risks associated with third-party vendors. Interns in this role help organizations evaluate the security, compliance, and reliability of vendors by analyzing documentation, conducting risk assessments, and supporting ongoing risk monitoring activities. They work under the guidance of senior analysts to ensure vendors meet company standards and regulatory requirements, gaining hands-on experience in risk management and vendor oversight.
What are the key skills and qualifications needed to thrive as an internship vendor risk analyst, and why are they important?
To thrive as an Internship Vendor Risk Analyst, you need a solid understanding of risk assessment, vendor management principles, and basic knowledge of compliance frameworks, often supported by coursework in finance, business, or information security. Familiarity with tools like Excel, risk management software, and platforms such as SAP Ariba or RSA Archer is typically expected. Attention to detail, analytical thinking, and effective communication are standout soft skills for gathering data and collaborating with internal stakeholders. These skills are crucial for identifying potential vendor risks, ensuring regulatory compliance, and supporting organizational decision-making.
What are some common challenges internship vendor risk analysts face when assessing third-party vendors?
Internship Vendor Risk Analysts often encounter challenges such as limited access to comprehensive vendor data, navigating complex regulatory requirements, and balancing multiple stakeholder interests. Interns must learn to evaluate risk with incomplete information and communicate findings clearly to both internal teams and vendors. Building strong analytical and communication skills, as well as understanding the organization's risk appetite, are key to overcoming these challenges and making meaningful contributions during the internship.
What is the difference between Internship Vendor Risk Analyst vs Vendor Risk Analyst?
| Aspect | Internship Vendor Risk Analyst | Vendor Risk Analyst |
|---|---|---|
| Credentials | Typically pursuing or recent graduate, some certifications optional | Usually requires professional certifications like CRISC or CTP |
| Work Environment | Internship setting, entry-level tasks, learning-focused | Full-time role, responsible for ongoing risk assessments |
| Industry Usage | Common in finance, consulting, and tech companies for training | Established position in risk management departments across industries |
The Internship Vendor Risk Analyst is an entry-level role designed for students or recent graduates gaining experience in vendor risk management. In contrast, the Vendor Risk Analyst is a full-time professional responsible for ongoing risk assessments and mitigation strategies. While both roles involve evaluating vendor risks, the internship focuses on learning and support, whereas the analyst role involves independent decision-making and expertise.
What are the most commonly searched types of Vendor Risk Analyst jobs in New York?
The most popular types of Vendor Risk Analyst jobs in New York are:
What cities in New York are hiring for Internship Vendor Risk Analyst jobs?
Cities in New York with the most Internship Vendor Risk Analyst job openings:
Full-time
Dental, Vision, Life, Retirement, PTO
Re-posted 18 days ago
Job description
Vendor Risk Manager
Dalio Family Office
Dalio Family Office Overview:
The Dalio Family Office (DFO) supports Barbara and Ray Dalio and their family in their ventures, investments, and philanthropic efforts under Dalio Philanthropies, which includes OceanX, Dalio Education, Endless Network, and the Beijing Dalio Foundation. The core of the DFO's culture is built around meaningful work and meaningful relationships and the family's commitment to giving back. The office is headquartered in Westport, CT with regional offices in New York City, Singapore, and Abu Dhabi.
Position Summary:
The Vendor Risk Manager owns the end-to-end third-party risk lifecycle, onboarding, diligence, monitoring, and exit across a high-volume, diverse vendor portfolio. You will synthesize risk across cybersecurity, AI, privacy, financial, and AML/CFT/sanctions domains into clear, actionable risk positions, performing structured threat modeling for high-exposure vendors.
Day-to-day responsibilities would include a combination of the following:
The ideal candidate will possess the following knowledge, skills, attributes, and values:
Illustrative Benefits:
Qualifications:
Compensation:
Compensation for the role includes a competitive salary in the range from $175,000 -$260,000 (inclusive of a merit-based bonus, dependent on years of experience, level of education obtained, as well as applicable skillset) and an excellent benefits package, including paid time off ranging from 15 to 25 days based on years of service, paid sick and safe leave, dental, vision, life and disability insurance, paid parental time off, birth mother recovery pay, sick family member pay, parental ramp back up program, gym reimbursement and generous employer match for 401k.
Please note we are unable to provide immigration sponsorship for this position.
At the DFO, we believe our biggest asset is our people. We are proud to be an equal opportunity employer, hiring and developing individuals from diverse backgrounds and experiences to add to our collaborative culture. The DFO treats all candidates and employees with respect and does not discriminate in our recruiting, hiring, and promoting processes and general treatment during employment, including on the basis of actual or perceived race, creed, color, religion, sex, age, sexual orientation, gender identity and/or expression, alienage or national origin, ancestry, citizenship status, marital status, veteran status, or disability.
Dalio Family Office
Dalio Family Office Overview:
The Dalio Family Office (DFO) supports Barbara and Ray Dalio and their family in their ventures, investments, and philanthropic efforts under Dalio Philanthropies, which includes OceanX, Dalio Education, Endless Network, and the Beijing Dalio Foundation. The core of the DFO's culture is built around meaningful work and meaningful relationships and the family's commitment to giving back. The office is headquartered in Westport, CT with regional offices in New York City, Singapore, and Abu Dhabi.
Position Summary:
The Vendor Risk Manager owns the end-to-end third-party risk lifecycle, onboarding, diligence, monitoring, and exit across a high-volume, diverse vendor portfolio. You will synthesize risk across cybersecurity, AI, privacy, financial, and AML/CFT/sanctions domains into clear, actionable risk positions, performing structured threat modeling for high-exposure vendors.
Day-to-day responsibilities would include a combination of the following:
- Own the VRM program end-to-end: strategy, policy, procedure, workflow, tooling, metrics, and executive reporting for CISO/CRO/board visibility.
- Lead holistic vendor risk assessments across cybersecurity, AI risk, privacy, financial, AML/CFT/sanctions.
- Document residual risk acceptances with named accountable executives and time-boxed review dates; coordinate with IT, Legal, Finance, and Compliance as appropriate.
- Evaluate and monitor vendor security controls based on data sensitivity and business criticality, leveraging industry frameworks and evidence such as SOC 2, ISO 27001, penetration testing, and security assessments.
- Conduct structured threat models (STRIDE, PASTA) for high risk vendors, and document findings as durable artifacts informing contracting, monitoring, and exit planning.
- Translate threat model outputs into concrete, testable control requirements drawing from OWASP (ASVS, API Security Top 10, LLM/Agentic Top 10), NIST (SP 800-53, SP 800-161, CSF 2.0, SP 800-207), and MITRE ATT&CK; scale requirements to vendor tier.
- Partner with Legal to translate identified risks into enforceable contractual requirements.
- Apply FAIR or comparable quantitative methods for high-impact vendor decisions, expressing cyber risk in loss-exposure terms that resonate with senior leadership.
- Advise IT, Engineering and business teams on vendor integration architecture (SSO/SCIM, OAuth, conditional access, DLP, segmentation, BYOK, VPC peering) and maintain approved reference patterns.
- Drive automation and tooling maturity to handle high vendor volume without proportional headcount growth; produce program dashboards tracking throughput, cycle time, recertification compliance, and remediation aging.
The ideal candidate will possess the following knowledge, skills, attributes, and values:
- Expert knowledge of third-party/vendor risk management
- Strong risk assessment and analytical skills
- Technical understanding of enterprise security architecture
- Excellent communication and stakeholder management skills
- Proven ability to lead and optimize vendor risk programs
Illustrative Benefits:
- 100% company paid medical premiums
- 17 company paid holidays
- Friday summer hours
- Monthly community happy hours
- Hybrid work environment
- Free catered food services for in-office days
- Generous PTO offering
- Casual dress code
- 150% 401(k) match up to $7,500 and 100% match above $7,500 ($15k match limit)
- Gym reimbursement, back up childcare services, insurance, financial, and legal services, and much more!
Qualifications:
- Bachelor's degree in Information Security, Risk Management, Computer Science, Cybersecurity, or a related discipline.
- At least 7 years of progressive experience across vendor risk management, cybersecurity architecture, security engineering, GRC, audit, or related fields.
- Experience managing the full third-party/vendor risk lifecycle, including vendor onboarding, due diligence, risk assessments, continuous monitoring, recertification, remediation tracking, and vendor exit planning, with at least 2 years owning an end-to-end TPRM program.
- Strong technical knowledge of cybersecurity frameworks, standards, and methodologies including NIST, ISO 27001/27002, OWASP, MITRE ATT&CK, Shared Assessments, threat modeling approaches (STRIDE/PASTA), and risk management practices.
- Hands-on experience evaluating enterprise security controls, cloud and integration architectures, SOC 2 Type II reports, ISO certifications, penetration testing results, data protection requirements, and third-party security risks across complex technology environments.
- Ability to communicate complex technical and risk concepts to executive stakeholders, collaborate effectively across business functions
- 10% travel as required based on business needs.
Compensation:
Compensation for the role includes a competitive salary in the range from $175,000 -$260,000 (inclusive of a merit-based bonus, dependent on years of experience, level of education obtained, as well as applicable skillset) and an excellent benefits package, including paid time off ranging from 15 to 25 days based on years of service, paid sick and safe leave, dental, vision, life and disability insurance, paid parental time off, birth mother recovery pay, sick family member pay, parental ramp back up program, gym reimbursement and generous employer match for 401k.
Please note we are unable to provide immigration sponsorship for this position.
At the DFO, we believe our biggest asset is our people. We are proud to be an equal opportunity employer, hiring and developing individuals from diverse backgrounds and experiences to add to our collaborative culture. The DFO treats all candidates and employees with respect and does not discriminate in our recruiting, hiring, and promoting processes and general treatment during employment, including on the basis of actual or perceived race, creed, color, religion, sex, age, sexual orientation, gender identity and/or expression, alienage or national origin, ancestry, citizenship status, marital status, veteran status, or disability.