ZipRecruiter

Log In

1

Third Party Vendor Risk Jobs (NOW HIRING)

Whoop

GRC Analyst - Third Party Risk

Boston, MA · On-site

$70K - $110K/yr

You will help manage third-party vendor risk reviews, and operational requests, in cross-functional security compliance workflows. Success in this role requires strong attention to detail ...

Asurion

Position Overview The Senior Manager, Third Party Risk Management leads Asurion's enterprise vendor and supply-chain risk program as a second line of defense. This role owns the end-to-end third ...

Whoop

GRC Analyst - Third Party Risk

Boston, MA · On-site

$70K - $110K/yr

You will help manage third-party vendor risk reviews, and operational requests, in cross-functional security compliance workflows. Success in this role requires strong attention to detail ...

DFO Referrals

Vendor Risk Manager

Westport, CT · On-site

The Vendor Risk Manager owns the end-to-end third-party risk lifecycle, onboarding, diligence, monitoring, and exit across a high-volume, diverse vendor portfolio. You will synthesize risk across ...

Samsara

Third-Party Risk Management Analyst

As a Third-Party Risk Management Analyst, you will own security risk assessments for critical Samsara vendors and partners. You will oversee the complete lifecycle-from tiering and onboarding to ...

DFO Referrals

Vendor Risk Manager

Westport, CT · Hybrid

The Vendor Risk Manager owns the end-to-end third-party risk lifecycle, onboarding, diligence, monitoring, and exit across a high-volume, diverse vendor portfolio. You will synthesize risk across ...

NextGenEnergyJobs

$110K - $167K/yr

As a Third-Party Risk Management Analyst, you will own security risk assessments for critical Samsara vendors and partners. You will oversee the complete lifecycle--from tiering and onboarding to ...

247Hire

Third Party Risk Management Analyst

Vienna, VA · On-site

Experience supporting Third-Party Risk Management (TPRM), vendor risk, or enterprise risk management processes. * Experience gathering and documenting business requirements. * Hands-on experience ...

Samsara

Third-Party Risk Management Analyst

As a Third-Party Risk Management Analyst, you will own security risk assessments for critical Samsara vendors and partners. You will oversee the complete lifecycle-from tiering and onboarding to ...

Samsara

As a Third-Party Risk Management Analyst, you will own security risk assessments for critical Samsara vendors and partners. You will oversee the complete lifecycle--from tiering and onboarding to ...

Sungrow Na

$160K/yr

Third Party Risk Management Lead Professional US 2 days ago Requisition ID: 1286 Salary: $160,000 ... Vendor intake and risk tiering * Security assessments and due diligence * Ongoing monitoring and ...

next page

Showing results 1-20

All JobsBusiness JobsThird Party Vendor Risk Jobs

Third Party Vendor Risk information

See salary details

$14

$30

$74

How much do third party vendor risk jobs pay per hour?

As of Sep 12, 2026, the average hourly pay for third party vendor risk in the United States is $30.34, according to ZipRecruiter salary data. Most workers in this role earn between $19.47 and $38.70 per hour, depending on experience, location, and employer.

What is third party vendor risk?

Third party vendor risk refers to the potential threats and vulnerabilities that arise when an organization outsources services or shares sensitive information with external vendors, suppliers, or partners. These risks can include data breaches, compliance violations, operational disruptions, and reputational damage resulting from a vendor’s actions or failures. Assessing and managing third party vendor risk is crucial for organizations to ensure that their vendors maintain adequate security controls and comply with regulatory requirements.

What are some common challenges faced in a third party vendor risk role, and how can they be managed effectively?

Professionals in Third Party Vendor Risk often face challenges such as staying updated with evolving regulations, managing a large portfolio of vendors, and ensuring effective communication across internal stakeholders. Balancing thorough risk assessments with operational deadlines can also be demanding. To manage these challenges, it's important to establish standardized evaluation processes, leverage automation tools for tracking and monitoring, and foster strong collaboration with procurement, legal, and IT teams to ensure all risks are identified and mitigated in a timely manner.

What are the key skills and qualifications needed to thrive as a third party vendor risk professional, and why are they important?

To thrive as a Third Party Vendor Risk professional, you need a strong understanding of risk management, compliance, and vendor due diligence, often supported by a degree in business, finance, or a related field. Familiarity with risk assessment tools, GRC (Governance, Risk, and Compliance) platforms, and relevant certifications like CTPRP or CISA is highly valued. Excellent analytical skills, attention to detail, and effective communication are essential soft skills for collaborating with vendors and internal stakeholders. These competencies are critical for identifying, mitigating, and monitoring risks to protect organizational assets and ensure regulatory compliance.

What is the difference between Third Party Vendor Risk vs Vendor Management Specialist?

AspectThird Party Vendor RiskVendor Management Specialist
Primary FocusAssessing and mitigating risks associated with third-party vendorsManaging vendor relationships and performance
CertificationsCertifications like Certified Third Party Risk Professional (CTPRP) often preferredCertifications like Certified Vendor Management Professional (CVMP) may be relevant
Work EnvironmentRisk assessment, compliance, and audit settingsContract negotiations, relationship management, and performance tracking
Industry UsageCommon in finance, healthcare, and technology sectorsUsed across various industries for vendor oversight

While both roles involve working with vendors, Third Party Vendor Risk focuses on identifying and mitigating risks posed by third-party vendors, ensuring compliance and security. Vendor Management Specialists concentrate on maintaining vendor relationships, contract management, and performance optimization. Understanding these distinctions helps organizations assign the right responsibilities and ensure effective vendor oversight.

What states have the most Third Party Vendor Risk jobs?

States with the most job openings for Third Party Vendor Risk jobs include:

What other helpful pages are available for Third Party Vendor Risk?

Other pages related to Third Party Vendor Risk:

Third Party Vendor Risk jobs near you

GRC Analyst - Third Party Risk

Boston, MA • On-site

Whoop
Fitness and Sports Centers • 501 - 1,000 employees
Learn more about Whoopexternal

$70K - $110K/yr

Full-time

This job post has expired 3 days ago. Applications are no longer accepted.

Job description

As a GRC Analyst, you will support the WHOOP Governance, Risk, and Compliance program. You will help manage third-party vendor risk reviews, and operational requests, in cross-functional security compliance workflows. Success in this role requires strong attention to detail, responsiveness and accountability through completion in a fast-paced environment.
The key focus of this role will be helping ensure third-party vendor assessment requests are reviewed, prioritized, routed, tracked, and completed effectively. You will use intake and ticketing data to identify workflow trends, recurring questions, handoff gaps, and opportunities to improve guidance, templates, reporting, automation, and stakeholder experience.
RESPONSIBILITIES:
  • Support day-to-day third-party vendor risk assessments - manage and triage GRC third-party vendor assessment intakes and accurate tracking through resolution
  • Perform vendor risk reviews, reassessments, partner coordination, remediation tracking, and cross-functional follow-up with Security, Legal, Privacy, Procurement, IT, Finance, and business owners
  • Assist with third-party risk program management activities

QUALIFICATIONS:
  • 2+ years of experience in GRC - third-party risk management experience preferred
  • Understanding of Cybersecurity compliance frameworks and cybersecurity compliance controls - ISO 27001, NIST CSF, COSO, SOC 2, PDI-DSS
  • Highly organized and strong operational discipline ensuring clear and expedient escalations with informed recommendations to management
  • Being a team player and working to achieve common goal in a dynamic setting
  • A minimum bachelor's degree in any discipline. Computer science, cyber security and risk or technology degrees preferred.

This role is based in the WHOOP office located in Boston, MA. The successful candidate must be prepared to relocate if necessary to work out of the Boston, MA office.
Interested in the role, but don't meet every qualification? We encourage you to still apply! At WHOOP, we believe there is much more to a candidate than what is written on paper, and we value character as much as experience. As we continue to build a diverse and inclusive environment, we encourage anyone who is interested in this role to apply.
WHOOP is an Equal Opportunity Employer and participates in E-verify to determine employment eligibility
The WHOOP compensation philosophy is designed to attract, motivate, and retain exceptional talent by offering competitive base salaries, meaningful equity, and consistent pay practices that reflect our mission and core values.
At WHOOP, we view total compensation as the combination of base salary, equity, and benefits, with equity serving as a key differentiator that aligns our employees with the long-term success of the company and allows every member of our corporate team to own part of WHOOP and share in the company's long-term growth and success.
The U.S. base salary range for this full-time position is $70,000 - $110,000. Salary ranges are determined by role, level, and location. Within each range, individual pay is based on factors such as job-related skills, experience, performance, and relevant education or training.
In addition to the base salary, the successful candidate will also receive benefits and a generous equity package.
These ranges may be modified in the future to reflect evolving market conditions and organizational needs. While most offers will typically fall toward the starting point of the range, total compensation will depend on the candidate's specific qualifications, expertise, and alignment with the role's requirements.
Whoop logo

About Whoop

Sourced by ZipRecruiter

At WHOOP, we're on a mission to unlock human performance. WHOOP empowers users (Olympians, Professional Athletes, Fitness Enthusiasts, etc) to perform at a higher level through a deeper understanding of their bodies and daily lives.

Industry

Fitness and sports centers

Company size

501 - 1,000 Employees

Headquarters location

Boston, MA, US

Year founded

2012

View All Whoop Jobs

Apply