1

Third Party Risk Management Jobs in Silver Spring, MD

Responsibilities As a Third-Party Risk Management Analyst, you will play a critical role in ensuring that our partnership with vendors and service providers are secure, compliant and align with the ...

Responsibilities As a Third-Party Risk Management Analyst, you will play a critical role in ensuring that our partnership with vendors and service providers are secure, compliant and align with the ...

Third-Party Risk Analyst

Mclean, VA · On-site

$45 - $47/hr

Key Responsibilities Risk & Program Management * Partner with the Governance Advisor to execute EOCTP and VIM programs. * Ensure divisions comply with internal guidance for managing third-party risk.

You will be responsible for the full lifecycle of third-party risk management, including identifying, assessing, mitigating, and monitoring risks to ensure our programs and business operations remain ...

Create and manage reporting that provides leadership with clear insights into third-party risk posture, trends, and key performance indicators (KPIs). Risk Assessment & Due Diligence * Conduct ...

Third Party Risk management encompasses evaluating suppliers across all operational risk domains including: Information, Technology, Operational Resiliency,Processes/Transactions, Models, Reporting ...

Third Party Risk management encompasses evaluating suppliers across all operational risk domains including: Information, Technology, Operational Resiliency, Processes/Transactions, Models, Reporting ...

next page

Showing results 1-20

Third Party Risk Management information

See Silver Spring, MD salary details

$53.2K

$115.3K

$175.7K

How much do third party risk management jobs pay per year?

As of Jun 27, 2026, the average yearly pay for third party risk management in Silver Spring, MD is $115,324.00, according to ZipRecruiter salary data. Most workers in this role earn between $93,000.00 and $133,400.00 per year, depending on experience, location, and employer.

What is a Third Party Risk Management job?

A Third Party Risk Management (TPRM) job involves assessing, monitoring, and mitigating risks associated with an organization's external vendors, suppliers, and service providers. Professionals in this role evaluate third parties for compliance, cybersecurity vulnerabilities, financial stability, and operational risks. They develop frameworks, conduct risk assessments, and ensure that vendors meet regulatory and organizational standards. TPRM specialists collaborate with internal teams like compliance, procurement, and IT security to protect the organization's interests. Their goal is to minimize potential disruptions, data breaches, or regulatory non-compliance stemming from third-party relationships.

What is the highest paying risk management job?

The highest paying risk management roles are often senior positions such as Chief Risk Officer (CRO) or Director of Risk Management, with salaries exceeding $150,000 annually. These roles require extensive experience, advanced certifications like FRM or CRM, and strong leadership skills in overseeing enterprise-wide risk strategies.

What is the role of a third party Risk Manager?

A third party Risk Manager is responsible for identifying, assessing, and mitigating risks associated with an organization’s external vendors and partners. They develop risk management strategies, conduct due diligence, and monitor third-party compliance to protect the organization from potential threats and ensure contractual obligations are met. Strong analytical skills and knowledge of risk assessment tools are essential in this role.

What is 3rd party risk management?

Third party risk management is the process of identifying, assessing, and mitigating risks associated with external vendors, suppliers, or partners that an organization relies on. It involves evaluating third parties' security, compliance, and operational practices to protect the organization from potential threats and disruptions. Professionals in this field often use risk assessment tools and frameworks to ensure third-party relationships do not compromise organizational integrity.

What are some common challenges faced in a Third Party Risk Management role, and how are they addressed?

One of the primary challenges in Third Party Risk Management is keeping up with evolving regulatory requirements and the diverse risk profiles of different vendors. Professionals in this role often encounter situations where they must coordinate risk assessments across multiple departments and ensure timely responses from both internal teams and external partners. To address these challenges, strong project management skills, proactive communication, and the use of dedicated risk management tools are essential. Many organizations also emphasize ongoing training and cross-functional collaboration to stay ahead of emerging risks and regulatory changes.

What are the key skills and qualifications needed to thrive in the Third Party Risk Management position, and why are they important?

To thrive in Third Party Risk Management, you need a strong understanding of risk assessment, compliance regulations, vendor management, and data analysis, typically supported by a bachelor's degree in business, finance, or a related field. Familiarity with risk assessment tools, third-party risk management platforms (such as Archer or ProcessUnity), and certifications like Certified Third Party Risk Professional (CTPRP) are common in this field. Exceptional communication, negotiation, and analytical-thinking skills are crucial soft skills for engaging vendors and stakeholders effectively. These abilities ensure comprehensive risk mitigation and help organizations maintain compliance and security while building strong external partnerships.

Is TPRM a good career?

Third Party Risk Management (TPRM) is a growing field focused on assessing and mitigating risks from external vendors and partners. It requires skills in compliance, cybersecurity, and risk assessment, often involving certifications like CTPRP or CRISC. The role offers opportunities in various industries and can lead to advancement in risk and compliance management careers.
What are popular job titles related to Third Party Risk Management jobs in Silver Spring, MD? For Third Party Risk Management jobs in Silver Spring, MD, the most frequently searched job titles are:
What job categories do people searching Third Party Risk Management jobs in Silver Spring, MD look for? The top searched job categories for Third Party Risk Management jobs in Silver Spring, MD are:
What cities near Silver Spring, MD are hiring for Third Party Risk Management jobs? Cities near Silver Spring, MD with the most Third Party Risk Management job openings:
Director, Third Party Risk Management

Director, Third Party Risk Management

T Rowe Price

Baltimore, MD

Other

Posted 19 days ago


T. Rowe Price rating

9.1

Company rating: 9.1 out of 10

Based on 21 frontline employees who took The Breakroom Quiz


Job description

Role Summary

TheDirector- ThirdParty Risk Management is aSecond Line of Defense (2LoD)leadership role responsible for thestrategic development, oversight, and ongoing maturation of the firm'sThirdPartyRisk Management (TPRM) program. Reporting to the Head of Privacy & TPRM, this role is regarded as asubject matter expert in third-party riskand plays a key role in shaping the firm's risk strategy, governance framework, and operating model following the implementation of anoutsourced TPRMcapability.

TheDirectorprovides independent oversight, crediblechallenge, and assurance over first-line and outsourced TPRM activities, while building a sustainable, regulator-ready 2LoD function aligned with the firm's risk appetite and regulatory expectations.

Responsibilities

TPRM Strategy & Program Leadership:

  • Serve as the firm'ssubject matter experton third-party risk management.

  • Contribute to the development and execution of the firm'sTPRM strategy, roadmap, and target-state operating model.

  • Lead the build-out and continuous improvement of a 2LoD TPRM functionfollowing outsourcing of due diligence and periodic reviews.

  • Define and maintain TPRM policies, standards, risk methodologies, and oversight frameworks aligned with regulatory expectations and industry best practices.

  • Ensure alignment of the TPRM program with enterprise risk appetite and governance structures.

  • Lead assessment of emergingthird partyrisks and technologies, including AI, andintegratefindings into TPRM strategy, governance, and executive reporting.

Oversight of Outsourced & First-Line TPRM Activities:

  • Provide independent oversight and effectivechallengeofoutsourced TPRM service providers, including due diligence execution and ongoing monitoring.

  • Oversight of monitoring activities related toSLAs, KPIs, quality assurance standards, and performance metrics for outsourced partners.

  • Report onsystemic control gaps, concentration risk, and emerging third-party risk themes across the vendor population.

  • Escalatematerialthird-party risk issues and control deficiencies throughappropriate governanceand risk committees.

Risk Governance, Reporting & Regulatory Readiness:

  • Design and deliver executive and board-level reporting on third-party risk, including trends, emerging risks, and risk appetite breaches.

  • Lead TPRM-related regulatory exams, internal audits, and management assurance activities.

  • Ensure TPRM documentation, evidence, and reporting areaudit-and exam-ready.

  • Partner with Enterprise Risk, Compliance, Legal, Information Security, Procurement, and Technology while maintaining 2LoD independence.

Leadership & Capability Development:

  • Provide leadership, guidance, and technical mentorship to TPRM risk analysts and managers.

  • Establish clear roles, responsibilities, and RACI alignment across 1LoD, 2LoD, and outsourced providers.

  • Drive adoption of data-driven, AI-enabled reporting and analytics to enhance risk insight and oversight efficiency.

  • Promote a strong risk culture and consistent application of third-party risk standards across the firm.

Qualifications

Required:

  • Bachelor's degree in Risk Management, Information Systems, Finance, Business, Law, ora relatedfield.10+ years of experience inthird-party risk management, operational risk, or compliance, withsignificant experiencein a2LoD capacitywithin financial services or asset management(or other industry subject to equivalent regulatory scrutiny).

  • Demonstrated experiencedesigning, implementing, or maturing a TPRM program, including oversight of outsourced or co-sourced models.

  • Deep understanding of regulatory expectations for third-party risk (e.g., SEC, FINRA, global regulators).

  • Proven ability tooperateas a trusted expert and strategic advisor to senior leadership.

  • Required Certifications (at least one): Certified Third Party Risk Professional (CTPRP), Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Auditor (CISA)

Preferred:

  • Advanced degree (MBA, JD, or equivalent).

  • Experience supporting global or complex vendor ecosystems.

  • Additionalcertifications:

  • ISO 27001 Lead Implementer or Auditor

  • PMP or equivalent program management certification

  • ExperienceleveragingAI, automation, or advanced analytics in TPRM oversight(e.g., Microsoft Co-Pilot, ChatGPT Enterprise).

Tools & Technology (Preferred)

  • Extensive experience with TPRM and GRC platforms (e.g., ServiceNow, Coupa).

  • Strong executive-level reporting and data visualization skills (e.g., Power BI).

  • Experience implementing metrics, KRIs, and dashboards aligned to risk appetite.

Key Competencies

  • Recognizedexpertisein third-party risk management.

  • Strategic mindset with hands-on oversight capability.

  • Strong executive presence and ability to provide crediblechallenge.

  • Excellent written and verbal communication skills.

  • Ability to lead through influence in a matrixed, regulated environment.

FINRA Requirements

FINRA licenses are not required and will not be supported for this role.

Work Flexibility

This role is eligible for hybrid work, with up to one day per week from home.


What T. Rowe Price employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom