ZipRecruiter

Log In

1

Third Party Risk Assessment Jobs in Virginia (NOW HIRING)

ECS

Supply Chain Risk Management Lead

Falls Church, VA · On-site

... of third-party risk identification, assessment, mitigation, and reporting across NIPRNet, SIPRNet, and JWICS environments in compliance with DoW SCRM policy, Risk Management Framework requirements ...

next page

Showing results 1-20

All JobsThird Party Risk Assessment JobsThird Party Risk Assessment Jobs in Virginia

Third Party Risk Assessment information

See Virginia salary details

$44.1K

$85.9K

$123.4K

How much do third party risk assessment jobs pay per year?

As of Jun 15, 2026, the average yearly pay for third party risk assessment in Virginia is $85,944.00, according to ZipRecruiter salary data. Most workers in this role earn between $56,000.00 and $99,100.00 per year, depending on experience, location, and employer.

Is TPRM a good career?

Third Party Risk Assessment (TPRM) is a growing field within risk management and compliance, focusing on evaluating and mitigating risks from external vendors and partners. It requires skills in cybersecurity, vendor management, and regulatory knowledge, often involving certifications like CTPRP or CRISC. The role offers opportunities for career advancement in industries such as finance, healthcare, and technology.

What are some challenges commonly faced in a Third Party Risk Assessment role?

Professionals in Third Party Risk Assessment often face the challenge of managing a large and diverse portfolio of third-party vendors, each with unique risk factors and compliance requirements. Balancing thorough risk analysis with tight project deadlines can require strong organizational and prioritization skills. Additionally, staying current with evolving regulatory standards and ensuring consistent communication with both internal stakeholders and external vendors can be demanding. However, these challenges also provide opportunities to develop critical expertise in risk management, improve cross-functional collaboration, and contribute significantly to organizational resilience and reputation.

What is a Third Party Risk Assessment job?

A Third Party Risk Assessment job involves evaluating the security, compliance, and operational risks associated with external vendors, suppliers, or partners. Professionals in this role assess third-party practices to ensure they meet regulatory and organizational standards. They analyze potential risks such as data breaches, financial instability, and operational disruptions. The job typically involves conducting risk assessments, reviewing contracts, and working with internal stakeholders to mitigate risks.

How much does a third party risk analyst make?

A third party risk analyst typically earns between $60,000 and $100,000 annually, depending on experience, location, and industry. Entry-level positions may start lower, while experienced analysts with certifications like CRISC or CISSP can earn higher salaries. The role often requires strong analytical skills and knowledge of risk management tools.

What does a third party risk analyst do?

A third party risk analyst evaluates the risks associated with an organization's vendors, suppliers, and partners. They review contracts, assess compliance, and analyze potential vulnerabilities to ensure third-party relationships do not pose security or operational threats, often using risk management tools and industry standards. Their work helps organizations mitigate financial, legal, and reputational risks from external entities.

Do risk analysts make good money?

Risk analysts, including those specializing in third-party risk assessment, typically earn competitive salaries that vary by industry, experience, and location. Entry-level positions may start around $60,000 annually, while experienced professionals can earn over $100,000, especially with certifications like CRCM or CRISC. The role often involves analyzing data, assessing vulnerabilities, and using risk management tools, which can influence earning potential.

What are the key skills and qualifications needed to thrive in the Third Party Risk Assessment position, and why are they important?

To thrive in Third Party Risk Assessment, you need a solid understanding of risk management frameworks, vendor due diligence processes, and regulatory compliance, typically supported by a degree in business, IT, or a related field. Familiarity with GRC (Governance, Risk, and Compliance) platforms, risk assessment tools, and relevant certifications such as Certified Third Party Risk Professional (CTPRP) or Certified Risk Manager (CRM) is highly desirable. Excellent communication, analytical thinking, and problem-solving abilities set top candidates apart, as do project management skills. These skills are vital to effectively identify, evaluate, and mitigate risks posed by third-party vendors, ensuring the organization's overall security and compliance.

What are popular job titles related to Third Party Risk Assessment jobs in Virginia? For Third Party Risk Assessment jobs in Virginia, the most frequently searched job titles are:
What job categories do people searching Third Party Risk Assessment jobs in Virginia look for? The top searched job categories for Third Party Risk Assessment jobs in Virginia are:
What cities in Virginia are hiring for Third Party Risk Assessment jobs? Cities in Virginia with the most Third Party Risk Assessment job openings:
Third Party Risk Assessment jobs near you
Infographic showing various Third Party Risk Assessment job openings in Virginia as of June 2026, with employment types broken down into 1% As Needed, 84% Full Time, 11% Part Time, 1% Temporary, and 3% Contract. Highlights an 89% Physical, 4% Hybrid, and 7% Remote job distribution, with an average salary of $85,944 per year, or $41.3 per hour.
Procurement Risk & Compliance Lead

Procurement Risk & Compliance Lead

S&P Global

Centreville, VA • On-site

$155K/yr

Full-time

Posted 12 days ago

S&P Global rating

8.0

Company rating: 8.0 out of 10

Based on 5 frontline employees who took The Breakroom Quiz

Job description

The Role:
Mobility Global is developing and building its third-party governance framework to support regulatory compliance, information security, and enterprise risk management.
Reporting to the Global Head of Procurement, the Procurement Risk & Compliance Lead, will lead a small team responsible for the operational implementation of the Company's vendor risk management process within Procurement. While Legal Risk & Compliance will design and maintain the enterprise risk framework, this role will be responsible for developing and building the third-party risk management function inside of procurement, aligning with enterprise risk domain owners (information security, HR, ethics and compliance, and finance), monitoring and mitigating supplier risk, and ensure proper governance across the procurement function.
This role serves as the operational bridge between Procurement, Legal, Risk & Compliance, and Information Security.
Responsibility and Impact:
Vendor Risk Process Operationalization
  • Translate the enterprise vendor risk framework into scalable procurement processes and policies.
  • Work with risk domain owners to define intake requirements and risk-tiering triggers for vendor engagements.
  • Monitor the TPRM process and ensure timely completeness of the risk reviews by the applicable risk domain owners.
  • Drive continuous improvement in vendor risk governance processes.
  • Maintain vendor risk attributes, classifications, and documentation repositories.
  • Partner with Finance Systems and IT to enhance automation and reporting.
  • Develop dashboards and reporting to monitor review completion, SLAs, and compliance trends.

Policy & Documentation Development
  • Draft and maintain procurement-facing vendor risk policies and SOPs.
  • Conduct training sessions for business stakeholders.

Risk Review Coordination & Enforcement
  • Monitor review timelines and escalate exceptions.
  • Maintain documentation of approvals, conditions, and remediation requirements.
  • Track and report compliance metrics to Procurement and Finance leadership.

Audit & Compliance Support
  • Maintain audit-ready documentation of vendor risk approvals and workflows.
  • Support SOX-related vendor governance controls where applicable.
  • Partner with Internal Audit on third-party risk assessments.
  • Support remediation efforts tied to vendor governance findings.
  • Promote a culture of governance and risk awareness.

What We're Looking For:
Basic Required Qualifications:
  • Bachelor's degree in Business, Supply Chain, Risk Management, Finance, or related field or equivalent relevant experience.
  • 7 to 10+ years of experience in Procurement, Third-Party Risk, Compliance, or Governance.
  • Experience in a publicly traded organization required.
  • Strong understanding of third-party risk domains, including:
    • Information security
    • Data privacy
    • Regulatory and compliance risk
    • Operational and financial risk
  • Experience developing policy documentation and process controls.
  • Strong systems and workflow configuration experience.
  • Must be a results-focused team player and adapt well to a multitasking, fast paced environment with changing priorities and challenges
  • Strong organizational, presentation and communication skills.
  • Experience working cross-functionally with Technology, Legal, Finance, and Risk teams.

Additional Preferred Qualifications:
  • Experience with LogicGate or similar TPRM tool
  • Governance-oriented with strong attention to detail.
  • Systems-minded and process-driven.
  • Confident cross-functional influencer.
  • Able to enforce controls in a collaborative but firm manner.
  • Comfortable operating in a transformation-oriented, post-spin environment.

If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us!
It is the policy of Mobility to provide equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law. In addition, Mobility will provide reasonable accommodations for qualified individuals with disabilities.

Apply