Support the Business Continuity and Disaster Recovery (BCDR) program, including planning, documentation, testing, and continuous improvement activities. * Assist in the Third Party Risk Management ...
Support the Business Continuity and Disaster Recovery (BCDR) program, including planning, documentation, testing, and continuous improvement activities. * Assist in the Third Party Risk Management ...
Risk Manager
Saint Louis, MO · On-site +1
... third-party consultants. * Provide training and guidance to project teams on risk management procedures and contractual awareness; stay current on industry trends, regulations, and best practices.
Risk Manager
Saint Louis, MO · On-site +1
... third-party consultants. * Provide training and guidance to project teams on risk management procedures and contractual awareness; stay current on industry trends, regulations, and best practices.
Support the Business Continuity and Disaster Recovery (BCDR) program, including planning, documentation, testing, and continuous improvement activities. * Assist in the Third Party Risk Management ...
Support the Business Continuity and Disaster Recovery (BCDR) program, including planning, documentation, testing, and continuous improvement activities. * Assist in the Third Party Risk Management ...
Corporate Risk Coordinator
Moberly, MO · On-site
$50K - $70K/yr
... third-party damage recovery. * Partner with insurance brokers and leadership to evaluate risk exposures and develop appropriate insurance strategies. * Manage insurance licensing, continuing ...
Corporate Risk Coordinator
Moberly, MO · On-site
$50K - $70K/yr
... third-party damage recovery. * Partner with insurance brokers and leadership to evaluate risk exposures and develop appropriate insurance strategies. * Manage insurance licensing, continuing ...
Corporate Risk Coordinator
$50K - $70K/yr
... third-party damage recovery. * Partner with insurance brokers and leadership to evaluate risk exposures and develop appropriate insurance strategies. * Manage insurance licensing, continuing ...
Quick apply
Corporate Risk Coordinator
$50K - $70K/yr
... third-party damage recovery. * Partner with insurance brokers and leadership to evaluate risk exposures and develop appropriate insurance strategies. * Manage insurance licensing, continuing ...
Risk Management Coordinator
Columbia, MO · On-site
Title: Risk Management Coordinator Location: Columbia, MO Schedule: Hybrid POSITION SUMMARY ... and third-party administrators in a timely manner. * File maintenance: Establish and maintain ...
Quick apply
Risk Management Coordinator
Columbia, MO · On-site
Title: Risk Management Coordinator Location: Columbia, MO Schedule: Hybrid POSITION SUMMARY ... and third-party administrators in a timely manner. * File maintenance: Establish and maintain ...
Corporate Risk Coordinator
Moberly, MO · On-site
$50K - $70K/yr
... third-party damage recovery. * Partner with insurance brokers and leadership to evaluate risk exposures and develop appropriate insurance strategies. * Manage insurance licensing, continuing ...
Corporate Risk Coordinator
Moberly, MO · On-site
$50K - $70K/yr
... third-party damage recovery. * Partner with insurance brokers and leadership to evaluate risk exposures and develop appropriate insurance strategies. * Manage insurance licensing, continuing ...
Governance Risk and Compliance Analyst
Kansas City, MO · On-site
$100K - $120K/yr
You have Information Governance Professional (IGP) and/or Certified Information Professional (CIP) certifications, Third Party Risk Management Practitioner (TPRMP) * You have experience in the Legal ...
Governance Risk and Compliance Analyst
Kansas City, MO · On-site
$100K - $120K/yr
You have Information Governance Professional (IGP) and/or Certified Information Professional (CIP) certifications, Third Party Risk Management Practitioner (TPRMP) * You have experience in the Legal ...
The Senior BaaS Compliance Specialist will report to the Director of Third-Party Risk Management and works closely with the BaaS Team and helps the organization ensure that operational functions ...
The Senior BaaS Compliance Specialist will report to the Director of Third-Party Risk Management and works closely with the BaaS Team and helps the organization ensure that operational functions ...
Fraud, Operations, People, Security of Physical Assets, Third Party, Business Resiliency, Systems, Cyber/Information Security, Legal, Model, Conduct, Data Management, and Fiduciary. Objective risk ...
Fraud, Operations, People, Security of Physical Assets, Third Party, Business Resiliency, Systems, Cyber/Information Security, Legal, Model, Conduct, Data Management, and Fiduciary. Objective risk ...
Financial Crime Compliance Lead
$95K - $120K/yr
... wealth management products and services. With over $5 billion in revenue and almost 20,000 ... Third Party Risk * Expand/enhance third party diligence program to align with evolving company risk ...
Financial Crime Compliance Lead
$95K - $120K/yr
... wealth management products and services. With over $5 billion in revenue and almost 20,000 ... Third Party Risk * Expand/enhance third party diligence program to align with evolving company risk ...
Sr. Information Security Risk Analyst
Kansas City, MO · On-site +1
Contribute to internal and external audits, including third-party security assessments. * Run ... What You Bring * 5+ years in information security, security audit, or risk management/compliance.
Quick apply
Sr. Information Security Risk Analyst
Kansas City, MO · On-site +1
Contribute to internal and external audits, including third-party security assessments. * Run ... What You Bring * 5+ years in information security, security audit, or risk management/compliance.
Compliance Officer- Fintech Services
$107K - $160K/yr
Prepares internal risk assessments of individual third-party relationships as well as the BaaS program overall. * Prepares and presents comprehensive reports to keep senior management informed of the ...
Compliance Officer- Fintech Services
$107K - $160K/yr
Prepares internal risk assessments of individual third-party relationships as well as the BaaS program overall. * Prepares and presents comprehensive reports to keep senior management informed of the ...
... and Third Party Risk Management functions as well as all business and finance functions to understand historical spend data, future demands, obligations, business needs and consequently develops ...
... and Third Party Risk Management functions as well as all business and finance functions to understand historical spend data, future demands, obligations, business needs and consequently develops ...
Third-Party Risk Management (TPRM) * 10+ years of demonstrated deep technical expertise in ServiceNow, typically evidenced by advanced ServiceNow certifications (e.g., Certified Application Developer ...
Third-Party Risk Management (TPRM) * 10+ years of demonstrated deep technical expertise in ServiceNow, typically evidenced by advanced ServiceNow certifications (e.g., Certified Application Developer ...
... and Third Party Risk Management functions as well as all business and finance functions to understand historical spend data, future demands, obligations, business needs and consequently develops ...
... and Third Party Risk Management functions as well as all business and finance functions to understand historical spend data, future demands, obligations, business needs and consequently develops ...
Corporate Counsel I
Saint Louis, MO · On-site
$82K - $96K/yr
Collaborate with Third Party Risk Management on enhancements and improvements to the contract review process * Perform a variety of general legal tasks and help resolve legal issues * Collaborate ...
Corporate Counsel I
Saint Louis, MO · On-site
$82K - $96K/yr
Collaborate with Third Party Risk Management on enhancements and improvements to the contract review process * Perform a variety of general legal tasks and help resolve legal issues * Collaborate ...
Corporate Counsel I
$82K - $96K/yr
Collaborate with Third Party Risk Management on enhancements and improvements to the contract review process * Perform a variety of general legal tasks and help resolve legal issues * Collaborate ...
Corporate Counsel I
$82K - $96K/yr
Collaborate with Third Party Risk Management on enhancements and improvements to the contract review process * Perform a variety of general legal tasks and help resolve legal issues * Collaborate ...
... third-party risk management by reviewing vendor security controls, questionnaires, contracts, and due diligence documentation. • Coordinate security awareness training, phishing simulations, and ...
... third-party risk management by reviewing vendor security controls, questionnaires, contracts, and due diligence documentation. • Coordinate security awareness training, phishing simulations, and ...
Partner with Legal, Third-Party Risk Management (TPRM), and Procurement to enforce contractual obligations for secure development, reporting, incident notification, and replace/patch SLAs. All About ...
Partner with Legal, Third-Party Risk Management (TPRM), and Procurement to enforce contractual obligations for secure development, reporting, incident notification, and replace/patch SLAs. All About ...
Third Party Risk Management information
See Missouri salary details
$48.3K - $58.4K
4% of jobs
$58.4K - $68.5K
6% of jobs
$68.5K - $78.6K
11% of jobs
$82.4K is the 25th percentile. Wages below this are outliers.
$78.6K - $88.7K
11% of jobs
The median wage is $96.8K / yr.
$88.7K - $98.8K
23% of jobs
$98.8K - $108.9K
13% of jobs
$115.6K is the 75th percentile. Wages above this are outliers.
$108.9K - $119K
12% of jobs
$119K - $129.1K
8% of jobs
$129.1K - $139.3K
6% of jobs
$139.3K - $149.4K
4% of jobs
$149.4K - $159.5K
2% of jobs
$48.3K
$104.6K
$159.5K
How much do third party risk management jobs pay per year?
What is a Third Party Risk Management job?
A Third Party Risk Management (TPRM) job involves assessing, monitoring, and mitigating risks associated with an organization's external vendors, suppliers, and service providers. Professionals in this role evaluate third parties for compliance, cybersecurity vulnerabilities, financial stability, and operational risks. They develop frameworks, conduct risk assessments, and ensure that vendors meet regulatory and organizational standards. TPRM specialists collaborate with internal teams like compliance, procurement, and IT security to protect the organization's interests. Their goal is to minimize potential disruptions, data breaches, or regulatory non-compliance stemming from third-party relationships.
What are some common challenges faced in a Third Party Risk Management role, and how are they addressed?
One of the primary challenges in Third Party Risk Management is keeping up with evolving regulatory requirements and the diverse risk profiles of different vendors. Professionals in this role often encounter situations where they must coordinate risk assessments across multiple departments and ensure timely responses from both internal teams and external partners. To address these challenges, strong project management skills, proactive communication, and the use of dedicated risk management tools are essential. Many organizations also emphasize ongoing training and cross-functional collaboration to stay ahead of emerging risks and regulatory changes.
What are the key skills and qualifications needed to thrive in the Third Party Risk Management position, and why are they important?
To thrive in Third Party Risk Management, you need a strong understanding of risk assessment, compliance regulations, vendor management, and data analysis, typically supported by a bachelor's degree in business, finance, or a related field. Familiarity with risk assessment tools, third-party risk management platforms (such as Archer or ProcessUnity), and certifications like Certified Third Party Risk Professional (CTPRP) are common in this field. Exceptional communication, negotiation, and analytical-thinking skills are crucial soft skills for engaging vendors and stakeholders effectively. These abilities ensure comprehensive risk mitigation and help organizations maintain compliance and security while building strong external partnerships.
- Bank Risk Management
- Freelance Operational Risk Manager
- Work From Home Model Risk Management
- Weekend Remote Risk Management
- Senior Technology Risk Management
- Manager Third Party Vendor Management
- Certified Project Risk Manager
- Manager Enterprise Risk Management
- Beyond Risk Management
- Senior Vendor Risk Analyst

Continuity & Security Assurance Analyst
Lees Summit, MO • On-site
Full-time
Medical, Dental, Vision, Life, Retirement, PTO
Posted 18 hours ago
Job description
G.E.H.A has one mission: To empower federal workers to be healthy and well.
The Continuity and Security Assurance Analyst supports G.E.H.A's Cybersecurity and Information Protection (CIP) program by executing security, compliance, and business continuity initiatives. This role is responsible for assessing controls, monitoring compliance with regulatory and internal standards, supporting audit activities, and contributing to the resilience and security posture of G.E.H.A's systems, data, and third-party relationships.
SKILLS
Key Responsibilities:
- Develop and execute security, compliance, and risk assessment plans aligned to regulatory requirements, industry standards, and G.E.H.A policies.
- Monitor security programs and systems, analyze logs and activities, and identify control gaps, anomalies, or areas of elevated risk.
- Perform audits across key control areas, including Data Loss Prevention (DLP), inbound email security/quarantine processes, and user access management.
- Perform and support periodic user access control reviews, including validation of user entitlements, identification of inappropriate or excessive access, coordination with business owners, and tracking remediation of identified issues.
- Review and troubleshoot compliance requests to ensure alignment with G.E.H.A security policies, standards, and applicable legal/regulatory requirements.
- Conduct ongoing compliance monitoring activities, including documentation, evidence collection, and remediation tracking for identified issues.
- Evaluate existing processes and controls, identify areas for improvement, and develop actionable remediation plans to strengthen compliance and security posture.
- Support internal and external audits by preparing documentation, coordinating responses, and validating control effectiveness.
- Create, maintain, and enhance security documentation, procedures, and control artifacts to support governance and audit readiness.
- Support the execution of security awareness and training initiatives.
- Contribute to the development and continuous improvement of programs that ensure the availability and resilience of G.E.H.A's information systems and data.
- Support the Business Continuity and Disaster Recovery (BCDR) program, including planning, documentation, testing, and continuous improvement activities.
- Assist in the Third Party Risk Management program, including review and analysis of third-party maturity assessments, SOC reports, and HITRUST certifications.
- Monitor third-party security posture and identify risks, gaps, and opportunities for improvement across G.E.H.A's vendor ecosystem.
Job Requirements:
Experience and Education
- Bachelor's degree in Computer Science, Information Systems, or a related discipline.
- Three (3) or more years of experience in Information Technology, Information Security, IT Assurance, Risk Management, Governance, or Business Continuity.
- Equivalent combinations of education and additional experience may be considered in lieu of formal degree or certification requirements.
Certifications
- One or more industry certifications such as: CISSP, HCISPP, CRMA, CGEIT, CRISC, CISM, CISA, CBCP, GIAC, or similar governance, risk, security, or BCDR certifications.
Technical and Functional Knowledge
- Working knowledge of governance, risk, and compliance frameworks such as: COSO, COBIT, ITIL, ISO 31000, ISO 27002, ISO 22301, NIST CSF, NIST 800-53, and SANS Critical Security Controls.
- Experience with enterprise Governance, Risk, and Compliance (GRC) platforms (e.g., Archer, MetricStream, LockPath, etc.).
- Proficiency with Microsoft Office applications.
Skills and Competencies
- Strong analytical and problem-solving skills with the ability to identify risk and recommend practical solutions.
- Effective written and verbal communication skills, including the ability to translate technical risks into business-focused language.
- Ability to build relationships, influence stakeholders, and collaborate across multiple business units and teams.
- Strong organizational skills with the ability to manage multiple priorities in a fast-paced environment.
- Customer service orientation with a focus on delivering high-quality, accurate outcomes.
- Effective presentation and interpersonal skills.
Work-at-home requirements
- Must have the ability to provide a non-cellular High Speed Internet Service such as Fiber, DSL, or cable Modems for a home office.
- A minimum standard speed for optimal performance of 30x5 (30mpbs download x 5mpbs upload) is required.
- Latency (ping) response time lower than 80 ms
- Hotspots, satellite and wireless internet service is NOT allowed for this role.
- A dedicated space lacking ongoing interruptions to protect member PHI / HIPAA information
How we value you
- Competitive pay/salary ranges
- Incentive plan
- Health/Vision/Dental benefits effective day one
- 401(k) retirement plan: company match - dollar for dollar up to 4% employee contribution (pretax or Roth options) plus a 6% annual company contribution
- Robust employee well-being program
- Paid Time Off
- Personal Community Enrichment Time
- Company-provided Basic Life and AD&D
- Company-provided Short-Term & Long-Term Disability
- Tuition Assistance Program
While this is a remote opportunity, at this time G.E.H.A does not hire employees from U.S. territories or the following states: Alaska, Hawaii, California, Washington, Oregon, Colorado, Wyoming, Montana, New York, Connecticut, Vermont, Pennsylvania, Maine.
Please note that the salary information is a general guideline only. G.E.H.A considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/training, key skills, internal peer equity, as well as, market and business considerations when extending an offer.
The target hiring range for this position is $75,862 - $95,970 USD. At G.E.H.A, the current maximum salary for this role is $106,938 USD. While initial compensation may vary based on experience and qualifications, there is a path to work toward this top rate through performance and continued growth within the organization.
G.E.H.A is an Equal Opportunity Employer, which means we will not discriminate against any individual based on sex, race, color, national origin, disability, religion, age, military status, genetic information, veteran status, pregnancy, marital status, gender identity, and sexual orientation, as well as all other characteristics and qualities protected by federal, state, or local law. G.E.H.A will not discriminate against employees or applicants because they have inquired about, discussed, or disclosed their compensation or the compensation of another employee or applicant. We are committed to creating an inclusive environment for all employees.
G.E.H.A is headquartered in Lee's Summit, Missouri, in the Kansas City area. We recognize the importance of balance and flexibility and offer hybrid and work-from-home options for many of our roles.
About Government Employees Health Association
Sourced by ZipRecruiter
Company size
1,001 - 5,000 Employees
Headquarters location
Lee's Summit", 'country_admin_code': 'US.MO, MO, US
Year founded
1937