ZipRecruiter

Log In

1

Third Party Risk Management Jobs in Raleigh, NC (NOW HIRING)

NC SECU

IT GRC Analyst II

Raleigh, NC · On-site

Third party risk management Working knowledge of various industry security standards and frameworks including: NIST, ISO 27001, ISF Standard of Good Practice (SoGP), etc. Desired Knowledge, Abilities ...

State Employees' Credit Union

IT GRC Analyst II

Raleigh, NC · On-site

$100 - $125/hr

Risk and controls assessments Documenting and maintaining IT Policies / Standards IT Risk aggregation, reporting, KPI/KRIs Issues management Third party risk management Working knowledge of various ...

American Tower

Supplier Performance Manager

Cary, NC · On-site

$123K - $155K/yr

Collaborate with Third-Party Risk Management ("TPRM") teams to evaluate and onboard key suppliers in line with risk frameworks to ensure suppliers meet cybersecurity, data privacy, and regulatory ...

Truist

Chief Cybersecurity Risk Officer

Raleigh, NC · On-site

... ensuring effective risk management across cybersecurity, while supporting the institution ... third-party service providers, and (c) ensuring compliance with regulatory requirements and ...

previous page

Showing results 41-60

All JobsThird Party Risk Management JobsThird Party Risk Management Jobs in Raleigh, NC

Third Party Risk Management information

See Raleigh, NC salary details

$50.1K

$108.4K

$165.2K

How much do third party risk management jobs pay per year?

As of Sep 10, 2026, the average yearly pay for third party risk management in Raleigh, NC is $108,435.00, according to ZipRecruiter salary data. Most workers in this role earn between $87,500.00 and $125,400.00 per year, depending on experience, location, and employer.

What is a third party risk management?

A Third Party Risk Management (TPRM) job involves assessing, monitoring, and mitigating risks associated with an organization's external vendors, suppliers, and service providers. Professionals in this role evaluate third parties for compliance, cybersecurity vulnerabilities, financial stability, and operational risks. They develop frameworks, conduct risk assessments, and ensure that vendors meet regulatory and organizational standards. TPRM specialists collaborate with internal teams like compliance, procurement, and IT security to protect the organization's interests. Their goal is to minimize potential disruptions, data breaches, or regulatory non-compliance stemming from third-party relationships.

What are some common challenges faced in a third party risk management role, and how are they addressed?

One of the primary challenges in Third Party Risk Management is keeping up with evolving regulatory requirements and the diverse risk profiles of different vendors. Professionals in this role often encounter situations where they must coordinate risk assessments across multiple departments and ensure timely responses from both internal teams and external partners. To address these challenges, strong project management skills, proactive communication, and the use of dedicated risk management tools are essential. Many organizations also emphasize ongoing training and cross-functional collaboration to stay ahead of emerging risks and regulatory changes.

What are the key skills and qualifications needed to thrive in third party risk management, and why are they important?

To thrive in Third Party Risk Management, you need a strong understanding of risk assessment, compliance regulations, vendor management, and data analysis, typically supported by a bachelor's degree in business, finance, or a related field. Familiarity with risk assessment tools, third-party risk management platforms (such as Archer or ProcessUnity), and certifications like Certified Third Party Risk Professional (CTPRP) are common in this field. Exceptional communication, negotiation, and analytical-thinking skills are crucial soft skills for engaging vendors and stakeholders effectively. These abilities ensure comprehensive risk mitigation and help organizations maintain compliance and security while building strong external partnerships.

Is third party risk management a good career?

Third Party Risk Management is a growing field focused on identifying and mitigating risks associated with external vendors and partners. It requires skills in compliance, cybersecurity, and contract management, often involving certifications like CTPRP or CRISC. The role offers opportunities in various industries with increasing demand due to regulatory requirements and supply chain complexities.

What does a third party risk management do?

A third party risk management professional assesses and monitors risks associated with external vendors, suppliers, and partners to ensure compliance, security, and operational integrity. They conduct risk assessments, develop mitigation strategies, and often use tools like risk management software to protect the organization from potential threats and vulnerabilities.

What are the most commonly searched types of Third Party Risk Management jobs in Raleigh, NC?

The most popular types of Third Party Risk Management jobs in Raleigh, NC are:

What are popular job titles related to Third Party Risk Management jobs in Raleigh, NC?

For Third Party Risk Management jobs in Raleigh, NC, the most frequently searched job titles are:

What job categories do people searching Third Party Risk Management jobs in Raleigh, NC look for?

The top searched job categories for Third Party Risk Management jobs in Raleigh, NC are:

What cities near Raleigh, NC are hiring for Third Party Risk Management jobs?

Cities near Raleigh, NC with the most Third Party Risk Management job openings:

Third Party Risk Management jobs near you
Infographic showing various Third Party Risk Management job openings in Raleigh, NC as of September 2026, with employment types broken down into 1% As Needed, 80% Full Time, 17% Part Time, and 2% Contract. Highlights an 86% Physical, 2% Hybrid, and 12% Remote job distribution, with an average salary of $108,435 per year, or $52.1 per hour.

Lead Security Governance Partner - Risk Management

Raleigh, NC • Hybrid

Envestnet
See more jobs at Envestnetexternal

Full-time

Medical, Retirement, PTO

Posted 10 days ago

Job description

The application window will close November 1st, 2026 

Job Location   

The primary work location for this role is Berwyn, PA or our Raleigh, NC office with a hybrid work model.   

  

About Envestnet  

Envestnet is an adaptive WealthTech company that is redefining the future of wealth management by helping advisors meet the moment with its comprehensive technology, actionable insights, and industry leading support. Backed by over 25 years of experience and approximately $7.0 trillion in platform assets, Envestnet is trusted by over one third of financial advisors across leading banks, wealth managers, brokerages, and RIAs.   

   

For a deeper look at how Envestnet is shaping the future of financial advice, visit www.envestnet.com.   

   

The Team You’ll Join  

You’ll join Envestnet’s Enterprise Cybersecurity team, a collaborative group focused on protecting the organization’s technology, data, and clients through effective security governance and risk management. Working closely with partners across Technology, Product, Infrastructure, Architecture, AI/ML Engineering, Legal, Compliance, and Risk & Assurance, the team identifies and evaluates security risks, strengthens controls, and supports informed business decision-making. In this role, you’ll help advance a consistent, proactive approach to managing cybersecurity risk across applications, cloud platforms, third-party integrations, and emerging technologies.

How You’ll Contribute   

Responsible for ensuring that technology decisions align with business strategy, regulatory requirements and client expectations. Encompasses administration of a strategic and comprehensive cybersecurity framework. Identifies, assesses and mitigates technology and information security risks to protect sensitive financial and client data. Establishes policies, controls and oversight to meet regulatory standards for the financial services and wealth management industry. Enables the company to operate securely, responsibly and at scale while maintaining trust with advisors, partners and regulators.  

  • Provides Security Governance support and advice companywide. 
  • Develops, validates, implements and maintains cybersecurity and related policies, standards, guidelines and procedures to ensure compliance with company and regulatory requirements. 
  • Collaborates with cross-functional teams and leaders to ensure security related controls are understood, documented and managed. 
  • Coordinates with Legal and across relevant compliance functions to ensure proper implementation of data privacy legislation and disclosure. 
  • Establishes and maintains the framework and roadmap for Security Governance documentation. 
  • Works with Cyber Security team members and business partners to define risk tolerance and construct risk scenarios. 
  • Ensures risk scenarios provide a realistic and relatable view of risks based on business context, system environment and pertinent threats. 
  • Perform Security Risk Assessments (SRAs) across applications, infrastructure, cloud platforms, third-party integrations, and AI systems to identify threats, vulnerabilities, and business impact, and determine inherent and residual risk levels using established risk taxonomies, scoring
  • methodologies, and impact criteria aligned to enterprise standards. 
  • Evaluate the design and effectiveness of technical, administrative, and operational security controls against identified risks, partnering with technology, product, infrastructure, architecture, and AI/ML engineering teams to design, recommend, and refine controls that mitigate risk to acceptable levels. 
  • Operate and leverage continuous risk monitoring tools (e.g., vulnerability management, configuration and cloud posture monitoring) to detect changes in risk posture, and analyze monitoring outputs to identify emerging risks, control degradation, and remediation needs. 
  • Own the full lifecycle of identified risks — documentation, remediation planning, validation of corrective actions, and risk closure — and produce clear, actionable risk reporting, metrics, and dashboards that communicate severity, trends, and priority issues to Information Security and technology leadership. 
  • Execute firmwide GRC activities such as RCSAs, risk acceptances and exceptions, and policy-driven risk assessments, and maintain accurate and current risk data within enterprise GRC and workflow tooling to support aggregated reporting and second-line oversight. 
  • Act as a trusted security risk advisor by translating technical findings into clear business risk context to support risk-informed decision-making, and partner closely with 2nd Line Risk & Assurance functions by providing high-quality risk artifacts and evidence, without performing independent assurance activities.

What You’ll Need to Bring  

  • Candidates should demonstrate the relevant experience, skills, and capabilities needed to successfully perform in the role. Relevant experience may be gained through current responsibilities, prior roles, project work, leadership opportunities, or other comparable experiences.
  • Hands‑on experience evaluating and defining security controls for AI agents, models, and applications, including model risk, data governance, and output‑integrity considerations.
  • Familiarity with risk and governance frameworks (e.g., NIST AI RMF, ISO/IEC 42001).
  • Hands‑on experience performing Security Risk Assessments and documenting risk scenarios, impacts, controls, and conclusions.
  • Strong understanding of security control frameworks (NIST CSF, NIST SP 800-53) and risk methodologies.
  • Demonstrated experience evaluating control effectiveness and supporting remediation planning.
  • Familiarity with continuous monitoring concepts and tools (e.g., vulnerability management, CSPM, configuration monitoring).
  • Ability to clearly document and communicate security risk to both technical teams and non‑technical stakeholders.
  • Strong analytical, writing, and organizational skills with attention to detail.
  • Experience creating dashboards and KPI status from real-time data.
  • Experience operating in fast‑paced, matrixed environments with multiple stakeholders.  

Nice-to-Haves  

  • 7+ years of experience in information security, cybersecurity risk management, or technology risk.
  • Knowledge of Investment Banking or Wealth Management    
  • Resourceful and proactive in resolving technical challenges.    
  • Experience working within a Three Lines of Defense operating model, particularly in financial services or other regulated environments.
  • Hands‑on experience with Jira‑based risk workflows or enterprise GRC platforms.
  • Cloud security experience.
  • Experience with generative AI/LLM governance and secure AI development lifecycle practices.
  • Relevant certifications such as CISSP, CISM, CCSP, or equivalent.

Why You’ll Enjoy Working at Envestnet  

Help shape the future of WealthTech. At Envestnet you’ll gain hands-on experience and collaborate with some of the industry’s brightest minds to deliver meaningful, innovative solutions that make a real difference. 

We value flexibility in how and where work gets done, and we recognize strong performance with meaningful rewards—because your contributions should drive both business success and your own personal growth. If you’re looking for a place where your work has impact, your development is supported, and your contributions are truly valued, Envestnet is where you can build your future.  

The opportunity is now!  

  

Sponsorship  

This position is not open to candidates requiring visa sponsorship  

  

Our Investment in You 

This role offers a base salary range of $138,500 to $173,100. The range listed represents a good-faith estimate of base salary compensation for this position and does not include incentive compensation, equity or benefits. Individual pay will be determined based on factors including, but not limited to, relevant experience, skills, education, certifications, and geographic location, in accordance with applicable pay transparency laws.  This role is eligible for an additional incentive component as part of the total rewards package.   

 

We provide a comprehensive suite of benefits - subject to Envestnet’s plan eligibility rules - that support your overall well-being including, medical insurance, paid time off (PTO), 401k company match, paid parental leave, education reimbursement, disability coverage and mental health & wellness support. Our investment in you means supporting you professionally, financially, and personally at every stage of your journey with us.  Please visit our benefits page on our career site to learn more.  

   

Our Commitment to Inclusion & Belonging  

Envestnet is an Equal Opportunity Employer and is committed to creating an inclusive environment for all employees and applicants. We welcome and value individuals of all backgrounds and do not discriminate based on race, color, religion, creed, sex (including pregnancy or related medical conditions), gender identity or expression, sexual orientation, national origin, ancestry, age, disability, genetic information, military or veteran status, citizenship status, or any other status protected by applicable law. We encourage individuals from all backgrounds to apply.  

 

We strive to provide an inclusive application and interview process. If you are a candidate with a disability and require reasonable accommodation, please contact us at  careers@envestnet.com. Please include your full name, the title of the role you are applying for, and the accommodation necessary to assist you with the recruiting process.      

Recruitment Fraud 

At Envestnet, safeguarding the trust and safety of job seekers is a top priority. We are aware that scammers may impersonate Envestnet recruiters or create fake job opportunities to deceive candidates. Review the information on our recruitment fraud awareness page to help you recognize and avoid recruitment fraud. 

#LI-AA1