ZipRecruiter

Log In

1

Third Party Risk Assessment Jobs (NOW HIRING)

DRC Systems

Third-Party Risk Analyst

Mclean, VA · On-site

$45 - $47/hr

Third-Party Risk Analyst Location: McLean, VA (5 days - Onsite) Job Overview The Third-Party Risk ... Launch and review risk assessments across operational, financial, legal/compliance, reputational ...

Old National Bank

Third Party Risk Lead

Lake Elmo, MN · On-site

$165K/yr

Responsibilities The Third-Party Risk Management (TPRM) Lead is responsible for executing third ... Maintain third-party records, assessment results, issues, and supporting documentation within the ...

Anaplan

Third Party Risk Analyst

Minneapolis, MN

As our new Third Party Risk Analyst , you will play a critical role in protecting Anaplan by ... Risk Assessment & Due Diligence * Conduct comprehensive risk assessments of new and existing ...

The Institutes

Third-Party Risk Analyst

Malvern, PA · On-site

Third-Party Risk Analyst The Third-Party Risk Analyst role is responsible for advancing the ... Assess AI model risk exposure, including bias, explainability, and regulatory considerations.

BankUnited

Sr. Third Party Risk Analyst

Orlando, FL · On-site

Communicates risk assessment findings to all levels of the organization and presents high and moderate risk findings in Third Party Advisory Group. * Leads and executes design enhancements of Third ...

Anaplan

Third Party Risk Analyst

Miami, FL

As our new Third Party Risk Analyst , you will play a critical role in protecting Anaplan by ... Risk Assessment & Due Diligence * Conduct comprehensive risk assessments of new and existing ...

Anaplan

Third Party Risk Analyst

San Francisco, CA

As our new Third Party Risk Analyst , you will play a critical role in protecting Anaplan by ... Risk Assessment & Due Diligence * Conduct comprehensive risk assessments of new and existing ...

Point72

Third Party Risk Specialist

New York, NY · On-site

$150K - $175K/yr

A Career with Point72's Third-Party Risk Team The Third-Party Risk Management Team at Point72 is ... Drive timely risk assessments at vendor on-boarding, including accurate data capture, and adherence ...

Anaplan

Third Party Risk Analyst

Reston, VA

As our new Third Party Risk Analyst , you will play a critical role in protecting Anaplan by ... Risk Assessment & Due Diligence * Conduct comprehensive risk assessments of new and existing ...

Crowe LLP

Third Party Risk Manager

New York, NY · On-site

Managing and overseeing assessment teams, project timelines, and client deliverables across ... Certified Third-Party Risk Professional (CTPRP) * Certified Vendor Risk Management Professional ...

Crowe LLP

Third Party Risk Manager

Chicago, IL

Leading Third Party Risk Assessments by evaluating third-party questionnaire responses, performing control validation, and assessing documentation per established procedures and standards * Managing ...

Upstart

Manager, Third Party Risk Management

Maintain and enhance third-party risk management frameworks, risk tiering methodologies, assessment templates, and governance processes to support a scalable, risk-based program. * Partner with Legal ...

Upstart

Manager, Third Party Risk Management

OR · On-site +1

Lead execution of the bank's end-to-end third-party risk management program, including risk-tiered due diligence, onboarding risk assessments, ongoing monitoring, and offboarding activities across ...

Crowe LLP

Third Party Risk Manager

Indianapolis, IN · On-site

Managing and overseeing assessment teams, project timelines, and client deliverables across ... Certified Third-Party Risk Professional (CTPRP) * Certified Vendor Risk Management Professional ...

next page

Showing results 1-20

All JobsThird Party Risk Assessment Jobs

Third Party Risk Assessment information

See salary details

$44.5K

$86.7K

$124.5K

How much do third party risk assessment jobs pay per year?

As of Jun 30, 2026, the average yearly pay for third party risk assessment in the United States is $86,688.00, according to ZipRecruiter salary data. Most workers in this role earn between $56,500.00 and $100,000.00 per year, depending on experience, location, and employer.

Is TPRM a good career?

Third Party Risk Assessment (TPRM) is a growing field within risk management and compliance, focusing on evaluating and mitigating risks from external vendors and partners. It requires skills in cybersecurity, vendor management, and regulatory knowledge, often involving certifications like CTPRP or CRISC. The role offers opportunities for career advancement in industries such as finance, healthcare, and technology.

What are some challenges commonly faced in a Third Party Risk Assessment role?

Professionals in Third Party Risk Assessment often face the challenge of managing a large and diverse portfolio of third-party vendors, each with unique risk factors and compliance requirements. Balancing thorough risk analysis with tight project deadlines can require strong organizational and prioritization skills. Additionally, staying current with evolving regulatory standards and ensuring consistent communication with both internal stakeholders and external vendors can be demanding. However, these challenges also provide opportunities to develop critical expertise in risk management, improve cross-functional collaboration, and contribute significantly to organizational resilience and reputation.

What is a Third Party Risk Assessment job?

A Third Party Risk Assessment job involves evaluating the security, compliance, and operational risks associated with external vendors, suppliers, or partners. Professionals in this role assess third-party practices to ensure they meet regulatory and organizational standards. They analyze potential risks such as data breaches, financial instability, and operational disruptions. The job typically involves conducting risk assessments, reviewing contracts, and working with internal stakeholders to mitigate risks.

How much does a third party risk analyst make?

A third party risk analyst typically earns between $60,000 and $100,000 annually, depending on experience, location, and industry. Entry-level positions may start lower, while experienced analysts with certifications like CRISC or CISSP can earn higher salaries. The role often requires strong analytical skills and knowledge of risk management tools.

What does a third party risk analyst do?

A third party risk analyst evaluates the risks associated with an organization's vendors, suppliers, and partners. They review contracts, assess compliance, and analyze potential vulnerabilities to ensure third-party relationships do not pose security or operational threats, often using risk management tools and industry standards. Their work helps organizations mitigate financial, legal, and reputational risks from external entities.

Do risk analysts make good money?

Risk analysts, including those specializing in third-party risk assessment, typically earn competitive salaries that vary by industry, experience, and location. Entry-level positions may start around $60,000 annually, while experienced professionals can earn over $100,000, especially with certifications like CRCM or CRISC. The role often involves analyzing data, assessing vulnerabilities, and using risk management tools, which can influence earning potential.

What are the key skills and qualifications needed to thrive in the Third Party Risk Assessment position, and why are they important?

To thrive in Third Party Risk Assessment, you need a solid understanding of risk management frameworks, vendor due diligence processes, and regulatory compliance, typically supported by a degree in business, IT, or a related field. Familiarity with GRC (Governance, Risk, and Compliance) platforms, risk assessment tools, and relevant certifications such as Certified Third Party Risk Professional (CTPRP) or Certified Risk Manager (CRM) is highly desirable. Excellent communication, analytical thinking, and problem-solving abilities set top candidates apart, as do project management skills. These skills are vital to effectively identify, evaluate, and mitigate risks posed by third-party vendors, ensuring the organization's overall security and compliance.

More about Third Party Risk Assessment jobs
What cities are hiring for Third Party Risk Assessment jobs? Cities with the most Third Party Risk Assessment job openings:
What states have the most Third Party Risk Assessment jobs? States with the most job openings for Third Party Risk Assessment jobs include:
What job categories do people searching Third Party Risk Assessment jobs look for? The top searched job categories for Third Party Risk Assessment jobs are:
Third Party Risk Assessment jobs near you

Third-Party Risk Analyst

DRC Systems

Mclean, VA • On-site

$45 - $47/hr

Contractor

Posted 27 days ago

Job description

Title: Third-Party Risk Analyst
Location: McLean, VA (5 days - Onsite)
 
Job Overview
The Third-Party Risk Analyst will support Enterprise Operationally Critical Third Parties (EOCTP) and Enterprise Vulnerability Incident Management (VIM) programs. This role partners closely with Governance Advisors and enterprise stakeholders to drive risk oversight, data analysis, reporting, and program execution within a financial services environment.
 
Key Responsibilities
Risk & Program Management
  • Partner with the Governance Advisor to execute EOCTP and VIM programs.
  • Ensure divisions comply with internal guidance for managing third-party risk.
  • Support crisis response activities involving third parties.
  • Project manage the data management platform supporting EOCTP and VIM.
  • Launch and review risk assessments across operational, financial, legal/compliance, reputational, and lifecycle domains.
  • Analyze program requirements and propose solutions, risks, and impact assessments.
Data Analysis & Reporting
  • Aggregate and analyze enterprise data for periodic and ad hoc reporting.
  • Independently extract and interpret KRIs and KPIs.
  • Develop monthly and quarterly third-party metrics dashboards.
  • Maintain the Vulnerability Incident Management tracker.
  • Synthesize complex data into clear, executive-ready insights.
  • Document and track vulnerability incidents and control evidence.
Stakeholder & Project Coordination
  • Establish and maintain strong relationships with enterprise stakeholders.
  • Facilitate meetings, forums, and follow-ups to drive project goals.
  • Support leadership using OneTrust workflows and processes.
  • Monitor and document third-party risk and cybersecurity trends.
Documentation & Communications
  • Create professional communications including:
    • Procedures and guidance
    • Job aids
    • PowerPoint presentations
    • Questionnaire templates
    • Dashboards and reports
  • Produce incident summaries and executive-level write-ups.
Required Qualifications
  • Bachelor’s degree in Risk Management, Business Administration, Finance, Data Analytics, Project Management, Information Security, or related field.
  • 5+ years of experience in risk management or third-party risk management (financial services preferred).
  • Strong hands-on data analysis experience.
  • Advanced proficiency in Microsoft Office Suite:
    • Excel (required)
    • Word
    • PowerPoint
    • Power BI
  • Experience aggregating and interpreting enterprise data.
  • Excellent professional writing and communication skills.
  • Strong multitasking and time-management abilities.
  • Experience in third-party risk assessment, remediation, and monitoring.
  • Knowledge of cybersecurity or information security incident management.
  • Familiarity with third-party risk frameworks and methodologies.
  • Ability to work onsite Monday–Friday in McLean, VA.
Preferred Qualifications
  • Experience with OneTrust platform.
  • Background in financial services risk environments.
  • Exposure to enterprise vulnerability management programs.
Key Skills
  • Enterprise Risk Management
  • Third-Party Risk Management (TPRM)
  • Data Analysis & Aggregation
  • KPI/KRI Development
  • Executive Reporting
  • Microsoft Excel (Advanced)
  • Power BI
  • Stakeholder Management
  • Incident Management
  • Strong Written Communication