ZipRecruiter

Log In

1

Tprm Jobs in Virginia (NOW HIRING)

CapTech Consulting

GRC Team Lead

Richmond, VA · On-site +1

Own and enhance the Third-Party Risk Management (TPRM) framework, policy, process, and supporting technology in alignment with SOC 2 requirements. * Oversee technical risk evaluations and due ...

Workday

Principal Software Development Engineer

Reston, VA · On-site

$140K - $188K/yr

Third-Party Risk (TPRM): Architecting systems for automated due diligence, continuous monitoring, and assessment scoring for our vendor ecosystem. Cross-Functional Influence: Champion security risk ...

Workday

Principal Cybersecurity Engineer

Reston, VA · On-site

Third-Party Risk (TPRM): Architecting systems for automated due diligence, continuous monitoring, and assessment scoring for our vendor ecosystem. * Cross-Functional Influence: Champion security risk ...

campus4tech

Senior ServiceNow Developer

Reston, VA · On-site

$56.25 - $77.50/hr

Continuous Improvement Requirements: * 10+ years of experience with ServiceNow, including ITSM, ITAM, ITOM, SecOps, GRC, and TPRM modules. * Strong background in architecture and design of ServiceNow ...

DRC Systems

Third-Party Risk Analyst

Mclean, VA · On-site

$45 - $47/hr

Third-Party Risk Management (TPRM) * Data Analysis & Aggregation * KPI/KRI Development * Executive Reporting * Microsoft Excel (Advanced) * Power BI * Stakeholder Management * Incident Management

Deloitte

ServiceNow Platform Architect - Manager

Mclean, VA · On-site

$72 - $90.75/hr

Architecting cross-module solutions that span IRM, SecOps, ITOM, ITAM, and TPRM, ensuring cohesive data flows, shared services, and consistent governance across modules * Designing complex ...

Seneca Holdings

CRM Manager

Falls Church, VA · On-site

... TPRM) government team, progress toward full financial auditability in alignment with DoD's Financial Improvement and Audit Readiness (FIAR) goals. The ideal candidate will bring a deep understanding ...

Deloitte

ServiceNow - Senior Manager

Rosslyn, VA

Third-Party Risk Management (TPRM) * 10+ years of demonstrated deep technical expertise in ServiceNow, typically evidenced by advanced ServiceNow certifications (e.g., Certified Application Developer ...

Truist

Centralized Service Manager I

Richmond, VA · On-site

$80K - $100K/yr

Coordinate and work with Division aligned support to ensure all managed services follow Third Party Risk Management (TPRM) Standards and Policies. Serve as a single point of supplier coordination and ...

Deloitte

ServiceNow - Senior Manager

Mclean, VA · On-site

Third-Party Risk Management (TPRM) * 10+ years of demonstrated deep technical expertise in ServiceNow, typically evidenced by advanced ServiceNow certifications (e.g., Certified Application Developer ...

previous pagenext page

Showing results 21-40

All JobsTprm JobsTprm Jobs in Virginia

Tprm information

See Virginia salary details

$5

$55

$86

How much do tprm jobs pay per hour?

As of Aug 20, 2026, the average hourly pay for tprm in Virginia is $55.71, according to ZipRecruiter salary data. Most workers in this role earn between $48.37 and $68.65 per hour, depending on experience, location, and employer.

What is a TPRM?

A TPRM (Third-Party Risk Management) job involves assessing, monitoring, and mitigating risks associated with an organization's third-party vendors, suppliers, or service providers. Professionals in TPRM evaluate vendor security, compliance, and operational stability to ensure they align with company policies and regulatory requirements. They often collaborate with internal stakeholders and external partners to conduct risk assessments, manage due diligence processes, and implement risk mitigation strategies. This role is critical in industries like finance, healthcare, and technology, where third-party relationships can significantly impact business operations and regulatory compliance.

What are typical challenges faced by a Third Party Risk Manager (TPRM) on a daily basis?

Third Party Risk Managers often navigate the complexities of assessing and monitoring multiple vendors across various departments, each with their own processes and risk profiles. Challenges include gathering sufficient due diligence documentation, staying updated on evolving regulations, and ensuring that vendors meet compliance and security standards. The role frequently collaborates with procurement, legal, IT, and business units to address concerns and remediate potential risks. Successfully managing these challenges requires strong organizational skills, attention to detail, and the ability to communicate requirements effectively both internally and externally.

What are the key skills and qualifications needed to thrive in the TPRM position, and why are they important?

To excel as a Third Party Risk Manager (TPRM), you need strong analytical skills, knowledge of risk management principles, and experience in vendor management or compliance frameworks. Familiarity with risk assessment tools, governance, risk and compliance (GRC) platforms, and relevant certifications such as CTPRP or CRISC is highly valued. Exceptional communication, stakeholder management, and critical thinking are standout soft skills that facilitate collaborative risk mitigation. These skills are essential for ensuring third-party relationships are assessed and managed responsibly to protect organizational interests.

Is TPRM a good career?

Third-Party Risk Management (TPRM) is a growing field focused on assessing and mitigating risks from external vendors and partners. It requires skills in compliance, cybersecurity, and risk assessment, often involving certifications like CISA or CRISC. The role offers opportunities in finance, healthcare, and technology sectors with increasing demand for expertise in managing third-party relationships.

What are the most commonly searched types of Tprm jobs in Virginia?

The most popular types of Tprm jobs in Virginia are:

What are popular job titles related to Tprm jobs in Virginia?

For Tprm jobs in Virginia, the most frequently searched job titles are:

What job categories do people searching Tprm jobs in Virginia look for?

The top searched job categories for Tprm jobs in Virginia are:

What cities in Virginia are hiring for Tprm jobs?

Cities in Virginia with the most Tprm job openings:

Tprm jobs near you
Infographic showing various Tprm job openings in Virginia as of August 2026, with employment types broken down into 88% Full Time, 10% Part Time, and 2% Contract. Highlights an 56% Physical, 7% Hybrid, and 37% Remote job distribution, with an average salary of $115,886 per year, or $55.7 per hour.

GRC Team Lead

CapTech Consulting

Richmond, VA • On-site, Remote

Full-time

Medical, Retirement, PTO

Re-posted 12 days ago

Job description

Company Description
CapTech is an award-winning consulting firm that collaborates with clients to achieve what's possible through the power of technology. At CapTech, we're passionate about the work we do and the results we achieve for our clients. From the outset, our founders shared a collective passion to create a consultancy centered on strong relationships that would stand the test of time. Today we work alongside clients that include Fortune 100 companies, mid-sized enterprises, and government agencies, a list that spans across the country.
Job Description
The Information Security GRC Team Lead leads CapTech's Governance, Risk, and Compliance (GRC) function, helping set the strategy and owning the execution, and continuous improvement of the programs that keep CapTech and our clients secure and compliant. This is a hands-on leadership role: you will lead and mentor a GRC analyst while remaining personally engaged in the work, running assessments, engineering automation, and setting technical direction.
You will own CapTech's compliance posture across SOC 2, NIST 800-53, and NIST AI RMF, along with applicable privacy regulations; mature our third-party risk management program; modernize the GRC function through automation and GRC engineering; and establish the governance practices that allow CapTech to adopt AI safely. This position reports to the Head of Information Security and operates with a high degree of autonomy to make decisions and set direction with minimal oversight.
Key Responsibilities:
Leadership & Team Management
  • Lead, mentor, and develop a GRC analyst, setting priorities, coaching for growth, and serving as the escalation point for complex risk and compliance matters.
  • Operate as a player-coach: remain hands-on in assessments, engineering, and analysis while coordinating the team's day-to-day execution and quality.
  • Help set the strategic direction and roadmap for the GRC program, driving initiatives to completion and making decisions independently with minimal oversight.
  • Define goals, metrics, and quality standards for the team; provide input into performance reviews and team goals; and participate in hiring, onboarding, and career development.
  • Report on risk and compliance posture to executive leadership, translating technical risk into business terms for non-technical stakeholders.

Governance, Risk & Compliance
  • Own and mature CapTech's compliance programs across SOC 2, NIST 800-53, and NIST AI RMF, ensuring controls are well-designed, operating effectively, and continuously monitored.
  • Extend the compliance program to applicable privacy and regulatory obligations, including HIPAA and GDPR/CCPA, as driven by CapTech's client base.
  • Lead internal control assessments, gap analyses, and audit-readiness activities; manage external audits and coordinate evidence collection end to end.
  • Develop, maintain, and enforce the information security policy suite, partnering with policy owners to keep documentation current and aligned to controls.
  • Identify, assess, and prioritize information security risks; drive remediation to closure against SLAs, negotiating compensating controls with stakeholders where appropriate.

Third-Party Risk Management
  • Own and enhance the Third-Party Risk Management (TPRM) framework, policy, process, and supporting technology in alignment with SOC 2 requirements.
  • Oversee technical risk evaluations and due diligence of third-party vendors, tools, and services, and recommend actions to strengthen vendor security posture.
  • Lead responses to inbound client and partner security questionnaires, and support business development and contract-negotiation teams to ensure security terms align with RFPs and agreed contracts.

GRC Engineering & Automation
  • Own and administer CapTech's GRC / compliance-automation platform, driving continuous control monitoring and automated evidence collection.
  • Design and build workflow automations and integrations across security, IT, and compliance tooling to reduce manual effort, improve data quality, and accelerate audit readiness.
  • Instrument GRC metrics, dashboards, and reporting so that control health and risk posture are continuously visible to stakeholders.

AI Governance & AI-Enabled GRC
  • Establish and run CapTech's AI governance program (covering AI-use policy, model/tool inventory, and risk assessment), aligned to recognized frameworks such as the NIST AI Risk Management Framework and ISO/IEC 42001.
  • Assess and govern the risk of AI tools and AI-enabled vendors, integrating AI risk into the existing TPRM and control frameworks.
  • Leverage AI responsibly to accelerate GRC work, using large language models to draft and maintain policies, cross-walk controls across frameworks, and analyze and respond to security questionnaires.
  • Build AI-enabled automations and agents to streamline GRC tasks such as evidence review, risk triage, and reporting.
  • Serve as a subject-matter advisor on AI risk and secure AI adoption for CapTech.

Security Awareness & Reporting
  • Own the security awareness and training program, including selection, delivery, and new-hire training aligned to company policy.
  • Produce technical and executive-level reporting on the effectiveness of the information security and compliance program.

Qualifications
Basic Qualifications
  • 6+ years of experience in Information Security, Governance/Risk/Compliance, IT Audit, or a related field, including prior experience leading or mentoring team members or driving major security and compliance initiatives.
  • Working understanding of SOC 2, NIST 800-53, and NIST AI RMF or similar frameworks required.
  • One or more of the following certifications, or an agreed certification to be attained within an agreed timeframe: ISACA Certified in Risk and Information Systems Control (CRISC) or ISACA Certified Information Security Manager (CISM).
  • Demonstrated ability to communicate technical risk in non-technical terms to executives and business stakeholders.
  • Strong problem-solving, analytical, and critical-thinking skills, with the proven ability to set direction and make decisions independently.

Preferred Qualifications
  • Additional certifications such as Certified Information Systems Auditor (CISA), Certified in Governance, Risk and Compliance (CGRC), or equivalent risk/audit/compliance credentials.
  • Hands-on experience owning or administering a GRC / compliance-automation platforms
  • Experience automating GRC workflows through scripting or integration tooling (e.g., Python, PowerShell, APIs, or iPaaS / no-code automation platforms).
  • Experience establishing or operating an AI governance program, with familiarity in the NIST AI RMF and ISO/IEC 42001.
  • Experience with privacy and regulatory frameworks such as HIPAA and GDPR/CCPA.
  • Prior experience in a consulting environment or supporting Fortune 100 and other regulated clients.
  • Prior experience with vendor management and third-party risk assessments.
  • Strong knowledge of the Microsoft Office suite of tools.

Additional Information
We want everyone at CapTech to be able to envision a lasting and rewarding career here, which is why we offer a variety of career paths based on your skills and passions. You decide where and how you want to develop, and we help get you there with customizable career progression and a comprehensive benefits package to support you along the way. Alongside our suite of traditional benefits encompassing generous time off, health coverage, disability insurance, paid family leave and more, we've launched extended benefits to help meet our employees' needs.
  • Learning & Development - Programs offering certification and tuition support, digital on-demand learning courses, mentorship, and skill development paths
  • Modern Health -A mental health and well-being platform that provides 1:1 care, group support sessions, and self-serve resources to support employees and their families through life's ups and downs
  • Carrot Fertility -Inclusive fertility and family-forming coverage for all paths to parenthood - including adoption, surrogacy, fertility treatments, pregnancy, and more - and opportunities for employer-sponsored funds to help pay for care
  • Fringe -A company paid stipend program for personalized lifestyle benefits, allowing employees to choose benefits that matter most to them - ranging from vendors like Netflix, Spotify, and GrubHub to services like student loan repayment, travel, fitness, and more
  • Employee Resource Groups - Employee-led committees that embrace and incorporate diversity and inclusion into our day-to-day operations
  • Philanthropic Partnerships - Opportunities to engage in partnerships and pro-bono projects that support our communities.
  • 401(k) Matching - Generous matching and no vesting period to help you continue to build financial wellness

CapTech is committed to providing a flexible work environment and helping our employees achieve a work-life balance that suits their individual needs. Employees must be available to work onsite in a client location or a CapTech office as requested. We allow CapTech employees to work remotely when compatible with CapTech and client needs.
CapTech is an equal opportunity employer committed to fostering a culture of equality, inclusion and fairness - each foundational to our core values. We strive to create a diverse environment where each employee is encouraged to bring their unique ideas, backgrounds and experiences to the workplace. As part of this commitment, CapTech will ensure that persons with disabilities are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment.
At this time, CapTech cannot transfer nor sponsor a work visa for this position. Applicants must be authorized to work directly for any employer in the United States without visa sponsorship.

Apply