1

Third Party Risk Jobs in Frederick, MD (NOW HIRING)

... FedRAMP Third Party Assessment Organizations (3PAO). With the addition of Kovr.AI, we have expanded our capabilities to include advanced cyber risk quantification and analytics, enabling ...

... third-party vendors, global / local internal staff, and investigator sites to support effective delivery of a study. Your role will involve monitoring study conduct and progress, support risk ...

Global Study Manager

Gaithersburg, MD · On-site

$112K - $168K/yr

... third-party vendors, global / local internal staff, and investigator sites to support effective delivery of a study. Your role will involve monitoring study conduct and progress, support risk ...

Global Study Manager

Gaithersburg, MD · On-site

$112K - $168K/yr

... third-party vendors, global / local internal staff, and investigator sites to support effective delivery of a study. Your role will involve monitoring study conduct and progress, support risk ...

Federal Account Executive

Leesburg, VA · On-site +1

$140K - $150K/yr

... FedRAMP Third Party Assessment Organizations (3PAO). With the addition of Kovr.AI, we have expanded our capabilities to include advanced cyber risk quantification and analytics, enabling ...

Federal Account Executive

Leesburg, VA · Remote

$140K - $150K/yr

... FedRAMP Third Party Assessment Organizations (3PAO). With the addition of Kovr.AI, we have expanded our capabilities to include advanced cyber risk quantification and analytics, enabling ...

next page

Showing results 1-20

Third Party Risk information

See Frederick, MD salary details

$14

$30

$73

How much do third party risk jobs pay per hour?

As of Jun 12, 2026, the average hourly pay for third party risk in Frederick, MD is $30.16, according to ZipRecruiter salary data. Most workers in this role earn between $19.38 and $38.46 per hour, depending on experience, location, and employer.

What are some common challenges faced in a Third Party Risk role and how can they be managed?

Professionals in Third Party Risk often encounter challenges such as managing a large and diverse vendor portfolio, staying updated on regulatory requirements, and ensuring timely risk assessments. Navigating communication gaps between internal stakeholders and external vendors can also be demanding. These challenges are typically managed by implementing robust risk assessment frameworks, fostering cross-functional collaboration, and leveraging technology to streamline due diligence and monitoring processes. Continuous training and clear communication protocols further help in addressing these complexities and maintaining effective third-party risk management.

What is the difference between Third Party Risk vs Vendor Risk Management?

AspectThird Party RiskVendor Risk Management
FocusAssessing risks from all external entities, including vendors, partners, and contractorsEvaluating risks specifically associated with third-party vendors
CredentialsRisk management certifications, compliance knowledgeVendor management certifications, procurement experience
Work EnvironmentCorporate risk teams, compliance departmentsProcurement, vendor management teams
Industry UsageFinancial, healthcare, technology sectorsPrimarily in supply chain and procurement functions

Third Party Risk encompasses a broader scope, including all external entities, while Vendor Risk Management specifically focuses on vendors. Both roles require risk assessment skills and industry knowledge, but Third Party Risk roles often involve broader compliance and strategic oversight.

What are the key skills and qualifications needed to thrive as a Third Party Risk professional, and why are they important?

To thrive as a Third Party Risk professional, you need a solid understanding of risk management principles, vendor assessment processes, and relevant regulatory frameworks, often supported by a degree in business, finance, or a related field. Familiarity with risk assessment tools, GRC (governance, risk, and compliance) software, and certifications such as Certified Third Party Risk Professional (CTPRP) are common requirements. Strong analytical thinking, attention to detail, and effective communication skills help you evaluate vendors and influence stakeholders. These skills are vital for identifying, mitigating, and managing risks associated with third-party relationships to protect organizational integrity and compliance.

What is Third Party Risk?

Third Party Risk refers to the potential risks and vulnerabilities an organization faces when working with external vendors, suppliers, or service providers. These risks can include data breaches, compliance violations, operational disruptions, and reputational damage resulting from the actions or failures of third parties. Managing third party risk involves identifying, assessing, monitoring, and mitigating these risks to protect the organization’s interests and ensure regulatory compliance.
What are the most commonly searched types of Third Party Risk jobs in Frederick, MD? The most popular types of Third Party Risk jobs in Frederick, MD are:
What are popular job titles related to Third Party Risk jobs in Frederick, MD? For Third Party Risk jobs in Frederick, MD, the most frequently searched job titles are:
What job categories do people searching Third Party Risk jobs in Frederick, MD look for? The top searched job categories for Third Party Risk jobs in Frederick, MD are:
What cities near Frederick, MD are hiring for Third Party Risk jobs? Cities near Frederick, MD with the most Third Party Risk job openings:
Security Consultant-Gaithersburg, MD

Security Consultant-Gaithersburg, MD

Georgia IT Inc

Gaithersburg, MD • Hybrid

Other

Posted 6 days ago


Job description

Security Consultant

Location: Gaithersburg, MD 20878 Rate: DOE $/hr. Position Type: Contract Interview Process: Phone Followed by Skype

US Citizen, Green Card and GC EAD

Job Description

Position Overview Three or more years of experience in an Information Security or Information Technology discipline with demonstrated experience in one or more the following:

  • Experience providing and validating security requirements related to cloud security for private, public and hybrid
  • Experience with providing security consulting services for global deployments
  • Experience providing and validating security requirements related to information system design and implementation
  • Experience providing and validating security requirements related to a broad range of operating systems and databases
  • Experience conducting risk assessments, vulnerability assessments, vendor and third party risk assessments and recommending risk remediation strategies
  • Experience in the use of tools and methods to identify security exposures and business risks
  • Knowledge of common information security standards, such as: ISO 27001/27002, NIST, PCI DSS, ITIL, COBIT
  • Knowledge of OWASP top 10 and remediation's of attacks against web applications. The ability to convey the risks to IT and business stakeholders
  • Familiarity with information system attack methods and vulnerabilities
  • Working experience with the design and engineering of web-based multi-tier information systems and architecture design
  • Working experience with web technologies, application firewalls and programming languages
  • Working experience with operating systems and database platforms
  • Working experience with mobile applications and mobile enterprise application platforms
  • Penetration Testing

Relevant Certifications / Qualifications: Any of the following certifications would be highly beneficial:

  • CISSP
  • ISO27001 Lead Auditor
  • CCP IA Architect / SIRA / IA Auditor
  • PCI QSA
  • CISM/CISA
  • CEH

Georgia IT logo

About Georgia IT

Sourced by ZipRecruiter

A PROFESSIONAL SERVICES ORGANIZATION WITH A VISION OF DELIVERING SIMPLE AFFORDABLE, SUSTAINABLE SOLUTIONS FOR COMPLEX PROBLEMS WITH INTEGRITY. OUR GOAL IS TO ACHIEVE ALL THIS IN A COLLABRATIVE APPROACH WITH ALL PARTIES INVOLVED IN DELIVERING SOLUTIONS/PRODUCTS.

Industry

It services

Company size

51 - 200 Employees

Headquarters location

Alpharetta, GA, US

Year founded

2007

Social media