ZipRecruiter

Log In

1

Senior Vendor Risk Management Jobs in California

Okta

Senior Director, GRC

San Francisco, CA

Enterprise Cyber Risk Management: Lead enterprise-wide cyber risk identification, prioritization ... Direct high-impact vendor risk assessment programs, ensuring third-party SaaS tools and supply ...

Newegg

Director, Risk Management

Diamond Bar, CA · On-site

Conduct and oversee risk reviews for contracts, vendor agreements, and new business initiatives ... Serve as the primary advisor to senior leadership on all risk and insurance matters. * Lead, mentor ...

SOLV Energy

Director, Risk Management

San Diego, CA · On-site

Establish and track key risk indicators (KRIs) and present regular risk dashboards to senior ... and vendor agreements, equipment leases, joint ventures, and professional service agreements.

SOLV Energy

Director, Risk Management

San Diego, CA · On-site

Establish and track key risk indicators (KRIs) and present regular risk dashboards to senior ... and vendor agreements, equipment leases, joint ventures, and professional service agreements.

Ingram Micro

Sr IT Vendor Manager

Irvine, CA · On-site

$116K - $197K/yr

The Sr. IT Vendor Manager is a key member of the Vendor Management Office (VMO) responsible for ... Strategic Vendor Relationship Management * Manage vendor contracts, commercial governance, risk ...

previous pagenext page

Showing results 21-40

All JobsVendor Risk Management JobsSenior Vendor Risk Management JobsSenior Vendor Risk Management Jobs in California

Senior Vendor Risk Management information

What does a senior vendor risk management professional do?

A Senior Vendor Risk Management professional is responsible for overseeing an organization’s third-party vendors to identify, assess, and mitigate risks that could impact business operations, data security, or regulatory compliance. They develop and implement vendor risk assessment frameworks, conduct thorough due diligence, and collaborate with other departments to ensure vendors meet company standards and legal requirements. Additionally, they monitor ongoing vendor relationships, manage risk remediation efforts, and often report findings to senior leadership or regulatory bodies.

What are the key skills and qualifications needed to thrive as a senior vendor risk management professional, and why are they important?

To thrive as a Senior Vendor Risk Management professional, you need expertise in risk assessment, third-party due diligence, and a solid understanding of regulatory compliance, often supported by a bachelor's degree in business, finance, or a related field. Familiarity with risk management platforms, vendor management systems, and certifications like CISA or CRVPM is commonly expected. Strong analytical thinking, communication, and negotiation skills are crucial for building effective relationships and addressing vendor issues. These skills and qualifications are essential for mitigating risks, ensuring compliance, and safeguarding organizational interests in vendor relationships.

What are some common challenges faced by senior vendor risk management professionals, and how can they be addressed?

Senior Vendor Risk Management professionals often encounter challenges such as navigating complex regulatory requirements, managing relationships with a diverse range of vendors, and ensuring consistent due diligence across all third parties. Addressing these challenges typically involves staying updated on relevant regulations, implementing robust risk assessment frameworks, and fostering strong communication with both internal stakeholders and vendors. Building cross-functional collaboration with legal, compliance, and procurement teams is also crucial for effectively mitigating vendor-related risks.

What is the difference between Senior Vendor Risk Management vs Vendor Risk Analyst?

AspectSenior Vendor Risk ManagementVendor Risk Analyst
CertificationsCRISC, CISA, or similarCRISC, CISA, or similar
Work EnvironmentStrategic, leadership-focused, cross-departmentalOperational, data analysis, risk assessment
Employer & Industry UsageFinancial, healthcare, technology firmsFinancial, retail, technology sectors

Senior Vendor Risk Management roles typically involve strategic oversight and leadership in managing vendor risks, requiring advanced certifications and experience. Vendor Risk Analysts focus on data collection, risk assessment, and supporting vendor evaluations. While both roles require similar credentials, the senior role emphasizes strategy and management, whereas the analyst role is more operational and detail-oriented.

What are the most commonly searched types of Vendor Risk Management jobs in California?

The most popular types of Vendor Risk Management jobs in California are:

What are popular job titles related to Senior Vendor Risk Management jobs in California?

For Senior Vendor Risk Management jobs in California, the most frequently searched job titles are:

What job categories do people searching Senior Vendor Risk Management jobs in California look for?

The top searched job categories for Senior Vendor Risk Management jobs in California are:

What cities in California are hiring for Senior Vendor Risk Management jobs?

Cities in California with the most Senior Vendor Risk Management job openings:

Senior Vendor Risk Management jobs near you
Infographic showing various Senior Vendor Risk Management job openings in California as of August 2026, with employment types broken down into 1% As Needed, 82% Full Time, 15% Part Time, and 2% Contract. Highlights an 88% Physical, 3% Hybrid, and 9% Remote job distribution.

Manager, IT Risk Operations

Wilson Sonsini Goodrich and Rosati

Palo Alto, CA • On-site

$147K - $198K/yr

Full-time

Re-posted 25 days ago

Job description

Wilson Sonsini is the premier legal advisor to technology, life sciences, and other growth enterprises worldwide. We represent companies at every stage of development, from entrepreneurial start-ups to multibillion-dollar global corporations, as well as the venture firms, private equity firms, and investment banks that finance and advise them. The firm has approximately 1,100 attorneys in 17 offices: 13 in the U.S., two in China, and two in Europe. Our broad spectrum of practices and entrepreneurial spirit allow exceptional opportunities for professional achievement and career growth.
Essential Duties and Responsibilities:
This high-impact position in the Governance, Risk & Compliance function sits at the center of the firm's technology, security, and operational ecosystem. Managing a small team, you will work closely with senior leaders across IT, Security Engineering, General Counsel, and firm leadership to shape how risk is understood, measured, and managed.
The role can be 100% remote or hybrid-in person if located near a physical office.
Strengthen IT Governance & Controls
  • Lead the development of executive-level reporting on IT risk, compliance posture, and operational performance
  • Build and evolve KPI/KRI dashboards that provide real-time visibility into risk trends and control effectiveness
  • Translate complex IT and security data into meaningful insights for decision making
  • Ensure adherence to IT policies, standards, and leading frameworks (e.g., NIST, ISO 27001)
  • Own and evolve the firm's IT risk register and Risk & Control Self-Assessment (RCSA) program
  • Identify emerging and systemic risks across IT, security, privacy, and operational processes

Incident Governance & Investigations
  • Partner with General Counsel, Security, and IT to lead internal investigations

Own ITSM Governance & ServiceNow Analytics
  • Oversee governance and reporting across the IT Service Management (ITSM) ecosystem
  • Analyze incident, change, and problem management data to identify trends and improvement opportunities
  • Drive workflow optimization and automation within ServiceNow

Vendor Risk Management
  • Review and advise on vendor agreements
  • Enhance vendor risk processes, including risk tiering, assessments, and monitoring
  • Identify opportunities to streamline processes, enhance reporting, and improve governance
  • Introduce data-driven approaches to risk management and operational oversight
  • Perform related duties as assigned or directed by supervisor
  • Maintain compliance with all firm policies and procedures

Education and/or Work Experience Requirements:
  • Bachelor's degree preferred
  • Seven years of experience in IT risk, security compliance, technology audit, or IT governance preferred
  • Experience operating in complex, regulated environments (e.g., law firms, financial services, consulting) preferred
  • Proven ability to lead reporting, analytics, and governance initiatives
  • Familiarity with ServiceNow and ITSM reporting including understanding of incident, change, and problem management lifecycles
  • Experience with security and collaboration platforms such as Microsoft 365, Purview and email security tools
  • Working knowledge of frameworks such as the NIST Cybersecurity Framework, ISO/IEC 27001 and SOC 2
  • Strong understanding of control design, risk registers, RCSA programs, and audit response
  • Basic understanding of privacy regulations
  • CISA, CISSP, CRISC, CTPRM and/or ITIL preferred
The primary location for this job posting is in Palo Alto, but other locations may be listed. The actual base pay offered will depend upon a variety of factors, including but not limited to the selected candidate's qualifications, years of relevant experience, level of education, professional certifications and licenses, and work location. The anticipated pay range for this position is as follows:
Palo Alto, New York, San Francisco: $163,200 - $220,800 per year.Austin, Boston, Boulder, Century City, Los Angeles, Salt Lake City, San Diego, Seattle: $147,050 - $198,950 per year.
The compensation for this position may include a discretionary year-end merit bonus based on performance. We offer a highly competitive salary and benefits package.
Benefits information can be found here. Equal Opportunity Employer (EOE).

Apply