Vendor Risk Manager
Westport, CT · On-site
Strong risk assessment and analytical skills * Technical understanding of enterprise security architecture * Excellent communication and stakeholder management skills * Proven ability to lead and ...
Vendor Risk Manager
Westport, CT · On-site
Strong risk assessment and analytical skills * Technical understanding of enterprise security architecture * Excellent communication and stakeholder management skills * Proven ability to lead and ...
Vendor Risk Manager
Westport, CT · Hybrid
Strong risk assessment and analytical skills * Technical understanding of enterprise security architecture * Excellent communication and stakeholder management skills * Proven ability to lead and ...
Vendor Risk Manager
Westport, CT · Hybrid
Strong risk assessment and analytical skills * Technical understanding of enterprise security architecture * Excellent communication and stakeholder management skills * Proven ability to lead and ...
... risk management and overall transformation and maturity of the information security initiatives ... Ensure security assessments of the information technology environment are being performed and with ...
... risk management and overall transformation and maturity of the information security initiatives ... Ensure security assessments of the information technology environment are being performed and with ...
... risk management and overall transformation and maturity of the information security initiatives ... Ensure security assessments of the information technology environment are being performed and with ...
... risk management and overall transformation and maturity of the information security initiatives ... Ensure security assessments of the information technology environment are being performed and with ...
... risk management and overall transformation and maturity of the information security initiatives ... Ensure security assessments of the information technology environment are being performed and with ...
... risk management and overall transformation and maturity of the information security initiatives ... Ensure security assessments of the information technology environment are being performed and with ...
... risk management and overall transformation and maturity of the information security initiatives ... Ensure security assessments of the information technology environment are being performed and with ...
... risk management and overall transformation and maturity of the information security initiatives ... Ensure security assessments of the information technology environment are being performed and with ...
Client Assurance & TPRM Manager - Assistant Vice President
Greenwich, CT · On-site
$100 - $125/hr
... security inquiries * Demonstrated experience performing cybersecurity risk assessments of third-party vendors * Prior experience leading, mentoring, or managing cybersecurity, risk, or assurance ...
Client Assurance & TPRM Manager - Assistant Vice President
Greenwich, CT · On-site
$100 - $125/hr
... security inquiries * Demonstrated experience performing cybersecurity risk assessments of third-party vendors * Prior experience leading, mentoring, or managing cybersecurity, risk, or assurance ...
... security inquiries * Demonstrated experience performing cybersecurity risk assessments of third-party vendors * Prior experience leading, mentoring, or managing cybersecurity, risk, or assurance ...
... security inquiries * Demonstrated experience performing cybersecurity risk assessments of third-party vendors * Prior experience leading, mentoring, or managing cybersecurity, risk, or assurance ...
Client Assurance and TPRM Manager - Assistant Vice President
Greenwich, CT · On-site
$100K - $140K/yr
... security inquiries * Demonstrated experience performing cybersecurity risk assessments of third-party vendors * Prior experience leading, mentoring, or managing cybersecurity, risk, or assurance ...
Client Assurance and TPRM Manager - Assistant Vice President
Greenwich, CT · On-site
$100K - $140K/yr
... security inquiries * Demonstrated experience performing cybersecurity risk assessments of third-party vendors * Prior experience leading, mentoring, or managing cybersecurity, risk, or assurance ...
Design and manage executive protection strategy and program (threat assessments, protective intelligence, logistics, secure transportation, and event security). * Provide risk support oversight for ...
Design and manage executive protection strategy and program (threat assessments, protective intelligence, logistics, secure transportation, and event security). * Provide risk support oversight for ...
Head of Corporate Security
Hartford, CT · On-site
Design and manage executive protection strategy and program (threat assessments, protective intelligence, logistics, secure transportation, and event security). * Provide risk support oversight for ...
Head of Corporate Security
Hartford, CT · On-site
Design and manage executive protection strategy and program (threat assessments, protective intelligence, logistics, secure transportation, and event security). * Provide risk support oversight for ...
Head of Corporate Security
$157K - $236K/yr
Design and manage executive protection strategy and program (threat assessments, protective intelligence, logistics, secure transportation, and event security). * Provide risk support oversight for ...
Head of Corporate Security
$157K - $236K/yr
Design and manage executive protection strategy and program (threat assessments, protective intelligence, logistics, secure transportation, and event security). * Provide risk support oversight for ...
Senior Security Engineer
Hartford, CT · On-site
$115K - $158K/yr
... security, risk assessments, and threat modeling of applications. Responsibilities : • Develop ... Management, Threat and Vulnerability Management) • At least 4 years of working experience in ...
Senior Security Engineer
Hartford, CT · On-site
$115K - $158K/yr
... security, risk assessments, and threat modeling of applications. Responsibilities : • Develop ... Management, Threat and Vulnerability Management) • At least 4 years of working experience in ...
... assessments; management of information security risks and exceptions; oversight of third-party security risk; and delivery of meaningful program reporting to leadership and governance committees. The ...
... assessments; management of information security risks and exceptions; oversight of third-party security risk; and delivery of meaningful program reporting to leadership and governance committees. The ...
RISK ANALYST
Canton, CT · On-site
... security risk, and model risk. * Track, manage, monitor, and report on risk issues and corrective ... Skills Risk Control Self Assessments Risk Management Programs & Policy Risk Appetite Statement ...
Quick apply
RISK ANALYST
Canton, CT · On-site
... security risk, and model risk. * Track, manage, monitor, and report on risk issues and corrective ... Skills Risk Control Self Assessments Risk Management Programs & Policy Risk Appetite Statement ...
RISK ANALYST
Canton, CT · On-site
... security risk, and model risk. * Track, manage, monitor, and report on risk issues and corrective ... Skills Risk Control Self Assessments Risk Management Programs & Policy Risk Appetite Statement ...
Quick apply
RISK ANALYST
Canton, CT · On-site
... security risk, and model risk. * Track, manage, monitor, and report on risk issues and corrective ... Skills Risk Control Self Assessments Risk Management Programs & Policy Risk Appetite Statement ...
Risk Manager, Investment Risk
Hartford, CT · On-site +1
Director, Market Risk Mgmt - VNE67R We're determined to make a difference and are proud to be an ... Develop and maintain repeatable risk assessment frameworks to identify key drivers, deteriorating ...
Risk Manager, Investment Risk
Hartford, CT · On-site +1
Director, Market Risk Mgmt - VNE67R We're determined to make a difference and are proud to be an ... Develop and maintain repeatable risk assessment frameworks to identify key drivers, deteriorating ...
Director, Market Risk Mgmt - VNE67R We're determined to make a difference and are proud to be an ... Develop and maintain repeatable risk assessment frameworks to identify key drivers, deteriorating ...
Director, Market Risk Mgmt - VNE67R We're determined to make a difference and are proud to be an ... Develop and maintain repeatable risk assessment frameworks to identify key drivers, deteriorating ...
Risk Manager, Investment Risk
Hartford, CT · On-site +1
$121K - $182K/yr
Director, Market Risk Mgmt - VNE67R We're determined to make a difference and are proud to be an ... Develop and maintain repeatable risk assessment frameworks to identify key drivers, deteriorating ...
Risk Manager, Investment Risk
Hartford, CT · On-site +1
$121K - $182K/yr
Director, Market Risk Mgmt - VNE67R We're determined to make a difference and are proud to be an ... Develop and maintain repeatable risk assessment frameworks to identify key drivers, deteriorating ...
RISK ANALYST
Canton, CT · On-site
... Management (ERM) program. The role will help identify, assess, and monitor risks across the ... security risk, and model risk. * Track, manage, monitor, and report on risk issues and corrective ...
RISK ANALYST
Canton, CT · On-site
... Management (ERM) program. The role will help identify, assess, and monitor risks across the ... security risk, and model risk. * Track, manage, monitor, and report on risk issues and corrective ...
Manager Security Risk Assessment information
What is the difference between Manager Security Risk Assessment vs Security Analyst?
| Aspect | Manager Security Risk Assessment | Security Analyst |
|---|---|---|
| Certifications | CISSP, CISM, CRISC | CISSP, Security+ |
| Work Environment | Oversees security programs, manages teams | Analyzes security threats, monitors systems |
| Industry Usage | Common in organizations with complex security needs | Widely used across various industries for threat detection |
The Manager Security Risk Assessment focuses on leading security risk evaluations, managing teams, and developing security strategies. In contrast, a Security Analyst primarily monitors security systems, analyzes threats, and responds to incidents. Both roles require relevant certifications and work within the cybersecurity industry, but their responsibilities differ in scope and focus.
What are the most commonly searched types of Security Risk Assessment jobs in Connecticut?
The most popular types of Security Risk Assessment jobs in Connecticut are:
What cities in Connecticut are hiring for Manager Security Risk Assessment jobs?
Cities in Connecticut with the most Manager Security Risk Assessment job openings:
Vendor Risk Manager
Westport, CT • On-site
DFO Referrals
Full-time
Dental, Vision, Life, Retirement, PTO
This job post has expired today. Applications are no longer accepted.
Job description
Vendor Risk Manager
Dalio Family Office
Dalio Family Office Overview:
The Dalio Family Office (DFO) supports Barbara and Ray Dalio and their family in their ventures, investments, and philanthropic efforts under Dalio Philanthropies, which includes OceanX, Dalio Education, Endless Network, and the Beijing Dalio Foundation. The core of the DFO's culture is built around meaningful work and meaningful relationships and the family's commitment to giving back. The office is headquartered in Westport, CT with regional offices in New York City, Singapore, and Abu Dhabi.
Position Summary:
The Vendor Risk Manager owns the end-to-end third-party risk lifecycle, onboarding, diligence, monitoring, and exit across a high-volume, diverse vendor portfolio. You will synthesize risk across cybersecurity, AI, privacy, financial, and AML/CFT/sanctions domains into clear, actionable risk positions, performing structured threat modeling for high-exposure vendors.
Day-to-day responsibilities would include a combination of the following:
The ideal candidate will possess the following knowledge, skills, attributes, and values:
Illustrative Benefits:
Qualifications:
Compensation:
Compensation for the role includes a competitive salary in the range from $175,000 -$260,000 (inclusive of a merit-based bonus, dependent on years of experience, level of education obtained, as well as applicable skillset) and an excellent benefits package, including paid time off ranging from 15 to 25 days based on years of service, paid sick and safe leave, dental, vision, life and disability insurance, paid parental time off, birth mother recovery pay, sick family member pay, parental ramp back up program, gym reimbursement and generous employer match for 401k.
Please note we are unable to provide immigration sponsorship for this position.
At the DFO, we believe our biggest asset is our people. We are proud to be an equal opportunity employer, hiring and developing individuals from diverse backgrounds and experiences to add to our collaborative culture. The DFO treats all candidates and employees with respect and does not discriminate in our recruiting, hiring, and promoting processes and general treatment during employment, including on the basis of actual or perceived race, creed, color, religion, sex, age, sexual orientation, gender identity and/or expression, alienage or national origin, ancestry, citizenship status, marital status, veteran status, or disability.
Dalio Family Office
Dalio Family Office Overview:
The Dalio Family Office (DFO) supports Barbara and Ray Dalio and their family in their ventures, investments, and philanthropic efforts under Dalio Philanthropies, which includes OceanX, Dalio Education, Endless Network, and the Beijing Dalio Foundation. The core of the DFO's culture is built around meaningful work and meaningful relationships and the family's commitment to giving back. The office is headquartered in Westport, CT with regional offices in New York City, Singapore, and Abu Dhabi.
Position Summary:
The Vendor Risk Manager owns the end-to-end third-party risk lifecycle, onboarding, diligence, monitoring, and exit across a high-volume, diverse vendor portfolio. You will synthesize risk across cybersecurity, AI, privacy, financial, and AML/CFT/sanctions domains into clear, actionable risk positions, performing structured threat modeling for high-exposure vendors.
Day-to-day responsibilities would include a combination of the following:
- Own the VRM program end-to-end: strategy, policy, procedure, workflow, tooling, metrics, and executive reporting for CISO/CRO/board visibility.
- Lead holistic vendor risk assessments across cybersecurity, AI risk, privacy, financial, AML/CFT/sanctions.
- Document residual risk acceptances with named accountable executives and time-boxed review dates; coordinate with IT, Legal, Finance, and Compliance as appropriate.
- Evaluate and monitor vendor security controls based on data sensitivity and business criticality, leveraging industry frameworks and evidence such as SOC 2, ISO 27001, penetration testing, and security assessments.
- Conduct structured threat models (STRIDE, PASTA) for high risk vendors, and document findings as durable artifacts informing contracting, monitoring, and exit planning.
- Translate threat model outputs into concrete, testable control requirements drawing from OWASP (ASVS, API Security Top 10, LLM/Agentic Top 10), NIST (SP 800-53, SP 800-161, CSF 2.0, SP 800-207), and MITRE ATT&CK; scale requirements to vendor tier.
- Partner with Legal to translate identified risks into enforceable contractual requirements.
- Apply FAIR or comparable quantitative methods for high-impact vendor decisions, expressing cyber risk in loss-exposure terms that resonate with senior leadership.
- Advise IT, Engineering and business teams on vendor integration architecture (SSO/SCIM, OAuth, conditional access, DLP, segmentation, BYOK, VPC peering) and maintain approved reference patterns.
- Drive automation and tooling maturity to handle high vendor volume without proportional headcount growth; produce program dashboards tracking throughput, cycle time, recertification compliance, and remediation aging.
The ideal candidate will possess the following knowledge, skills, attributes, and values:
- Expert knowledge of third-party/vendor risk management
- Strong risk assessment and analytical skills
- Technical understanding of enterprise security architecture
- Excellent communication and stakeholder management skills
- Proven ability to lead and optimize vendor risk programs
Illustrative Benefits:
- 100% company paid medical premiums
- 17 company paid holidays
- Friday summer hours
- Monthly community happy hours
- Hybrid work environment
- Free catered food services for in-office days
- Generous PTO offering
- Casual dress code
- 150% 401(k) match up to $7,500 and 100% match above $7,500 ($15k match limit)
- Gym reimbursement, back up childcare services, insurance, financial, and legal services, and much more!
Qualifications:
- Bachelor's degree in Information Security, Risk Management, Computer Science, Cybersecurity, or a related discipline.
- At least 7 years of progressive experience across vendor risk management, cybersecurity architecture, security engineering, GRC, audit, or related fields.
- Experience managing the full third-party/vendor risk lifecycle, including vendor onboarding, due diligence, risk assessments, continuous monitoring, recertification, remediation tracking, and vendor exit planning, with at least 2 years owning an end-to-end TPRM program.
- Strong technical knowledge of cybersecurity frameworks, standards, and methodologies including NIST, ISO 27001/27002, OWASP, MITRE ATT&CK, Shared Assessments, threat modeling approaches (STRIDE/PASTA), and risk management practices.
- Hands-on experience evaluating enterprise security controls, cloud and integration architectures, SOC 2 Type II reports, ISO certifications, penetration testing results, data protection requirements, and third-party security risks across complex technology environments.
- Ability to communicate complex technical and risk concepts to executive stakeholders, collaborate effectively across business functions
- 10% travel as required based on business needs.
Compensation:
Compensation for the role includes a competitive salary in the range from $175,000 -$260,000 (inclusive of a merit-based bonus, dependent on years of experience, level of education obtained, as well as applicable skillset) and an excellent benefits package, including paid time off ranging from 15 to 25 days based on years of service, paid sick and safe leave, dental, vision, life and disability insurance, paid parental time off, birth mother recovery pay, sick family member pay, parental ramp back up program, gym reimbursement and generous employer match for 401k.
Please note we are unable to provide immigration sponsorship for this position.
At the DFO, we believe our biggest asset is our people. We are proud to be an equal opportunity employer, hiring and developing individuals from diverse backgrounds and experiences to add to our collaborative culture. The DFO treats all candidates and employees with respect and does not discriminate in our recruiting, hiring, and promoting processes and general treatment during employment, including on the basis of actual or perceived race, creed, color, religion, sex, age, sexual orientation, gender identity and/or expression, alienage or national origin, ancestry, citizenship status, marital status, veteran status, or disability.