ZipRecruiter

Log In

2

Remote Vendor Risk Analyst Jobs in Cranston, RI (NOW HIRING)

Bcbsri

Information Security Analyst

Providence, RI · On-site +1

$83K - $124K/yr

Maintain vendor and AI risk inventories, portfolios, engagement records, risk assessments, and ... Remote: onsite 0-1 days per week. Permitted to reside in the following states, pending approval ...

Bcbsri

Lead Strategic Finance Analyst

Providence, RI · On-site +1

$102K - $163K/yr

Lead the financial support for provider and vendor valuebased care modeling, risk adjustment ... Remote: onsite 0-1 days per week. Permitted to reside in the following states, pending approval ...

next page

Showing results 1-20

All JobsVendor Risk Analyst JobsRemote Vendor Risk Analyst JobsRemote Vendor Risk Analyst Jobs in Cranston, RI

Remote Vendor Risk Analyst information

See Cranston, RI salary details

$15

$39

$64

How much do remote vendor risk analyst jobs pay per hour?

As of Aug 11, 2026, the average hourly pay for remote vendor risk analyst in Cranston, RI is $39.60, according to ZipRecruiter salary data. Most workers in this role earn between $29.13 and $48.22 per hour, depending on experience, location, and employer.
Remote Vendor Risk Analyst jobs near you
Infographic showing various Remote Vendor Risk Analyst job openings in Cranston, RI as of August 2026, with employment types broken down into 1% As Needed, 84% Full Time, 13% Part Time, and 2% Contract. Highlights an 87% Physical, 5% Hybrid, and 8% Remote job distribution, with an average salary of $82,363 per year, or $39.6 per hour.

(On-site) Information Security Vendor Management Analyst

Centreville Bank

West Warwick, RI • On-site, Remote

Full-time

Re-posted 21 days ago

Job description

The Vendor Management Analyst is responsible for supporting the Bank's Third-Party Risk Management (TPRM) Program within the Information Security department. This role evaluates the risk of new and existing third-party relationships, conducts and documents due diligence, supports contract reviews, and manages ongoing monitoring activities to ensure compliance with regulatory guidance (e.g., FFIEC, GLBA, FDIC). The Analyst will work closely with business owners, Risk, Compliance, Project Management, Finance, and senior leadership to ensure vendors meet the Bank's security, operational, and financial requirements.
Third-Party Risk Assessments
  • Evaluate risks presented by new and existing vendors across cybersecurity, operational, financial, compliance, business continuity, privacy, and reputational domains.
  • Determine required risk tiering and corresponding due diligence requirements.
  • Partner with business units to ensure clear articulation of vendor use cases and criticality.Due Diligence and Ongoing Vendor Monitoring
  • Gather required due diligence artifacts such as SOC 2 reports, independent audits, penetration test summaries, cybersecurity questionnaires, financial statements, insurance certificates, business continuity plans, and regulatory compliance attestations.
  • Review and assess due diligence documents for adequacy, control effectiveness, gaps, and red flags.
  • Document findings, residual risks, and recommendations within the Bank's vendor management system.
  • Request and follow up on remediation or compensating controls for identified deficiencies.
  • Maintain documentation memorializing new vendor diligence and ongoing monitoring results.

Contract Review Support
  • Review contracts and amendments for required information security and risk-related provisions, including data security requirements, confidentiality, incident reporting, business continuity, right to audit, subcontractor oversight, and termination rights.
  • Collaborate with Legal and Procurement to ensure contract terms align with bank policy.

Issue Tracking & Remediation Oversight
  • Maintain the Bank's Vendor Watchlist to track issues with vendors, vendor remediation efforts, and follow up on open issues.
  • Document evidence of corrective actions and ensure timely resolution of audit or exam findings.

Program Governance & Reporting
  • Prepare reporting for management, committees, and the Board.
  • Support internal/external audits and regulatory exams.
  • Assist with development and enhancement of TPRM policies and procedures.
  • Train business units and stakeholders on the vendor management process and program.

Requirements
  • Bachelor's degree in Information Security, Business, Risk Management, or related field.
  • 2-5 years of experience in vendor management, third-party risk, cybersecurity risk, or related banking role.
  • Prior experience in banking or financial services.
  • Ability to interpret SOC reports and cybersecurity controls.
  • Strong analytical and documentation skills.

Preferred Qualifications
  • Understanding of FFIEC, GLBA, and industry best practices.
  • Familiarity with NIST CSF, ISO 27001, SIG/AUP questionnaires.
  • Experience reviewing contracts from a security or risk perspective.
  • Exceptional candidates will have relevant certifications such as CTPRP, CRVPM, or CRISC

Apply