ZipRecruiter

Log In

1

Vendor Risk Analyst Jobs in Reston, VA (NOW HIRING)

Pae

Foreign Investment Risk Analyst

Washington, DC

The Telecommunications Risk Analyst will coordinate with internal DoD stakeholders and DOJ/DHS counterparts to conduct timely technical reviews and develop risk-based analyses in support of DoD CIO's ...

Amentum

Foreign Investment Risk Analyst

Washington, DC · On-site

The Telecommunications Risk Analyst will coordinate with internal DoD stakeholders and DOJ/DHS counterparts to conduct timely technical reviews and develop risk-based analyses in support of DoD CIO's ...

Technomics

Cyber Risk Analyst SME

Arlington, VA · On-site +1

We are seeking a Cyber Risk Analyst (SME-level). This role involves conducting on-site and remote cyber risk assessments, developing mitigation strategies, and enabling proactive enterprise risk ...

next page

Showing results 1-20

All JobsVendor Risk Analyst JobsVendor Risk Analyst Jobs in Reston, VA

Vendor Risk Analyst information

See Reston, VA salary details

$16

$42

$68

How much do vendor risk analyst jobs pay per hour?

As of Jun 19, 2026, the average hourly pay for vendor risk analyst in Reston, VA is $42.12, according to ZipRecruiter salary data. Most workers in this role earn between $31.01 and $51.25 per hour, depending on experience, location, and employer.

Is risk analyst a good career?

A risk analyst, including vendor risk analysts, plays a key role in identifying and mitigating potential threats to an organization, often requiring skills in data analysis, risk assessment, and familiarity with compliance standards. The profession offers steady demand, competitive salaries, and opportunities for advancement, especially with relevant certifications like CRCM or CRISC. It can be a rewarding career for those interested in security, compliance, and strategic decision-making.

How much do risk analysts make in the US?

Risk analysts in the US typically earn a median annual salary of around $70,000 to $90,000, depending on experience, industry, and location. Senior risk analysts or those with specialized skills and certifications can earn higher salaries, often exceeding $100,000 annually.

What is a vendor risk analyst?

A vendor risk analyst is a professional responsible for assessing and managing risks associated with third-party vendors and suppliers. They evaluate vendor security, compliance, and operational risks, often using risk management tools and frameworks to ensure organizational safety and regulatory adherence.

How does a Vendor Risk Analyst typically collaborate with other departments within an organization?

Vendor Risk Analysts work closely with various departments such as procurement, legal, IT security, and compliance to assess and manage risks associated with third-party vendors. They facilitate communication between teams to ensure vendor contracts meet security and regulatory requirements. Regularly, they coordinate risk assessments, share findings, and help develop mitigation strategies, ensuring that vendor relationships support the organization's risk tolerance and business goals.

What are the key skills and qualifications needed to thrive as a Vendor Risk Analyst, and why are they important?

To thrive as a Vendor Risk Analyst, you need strong analytical skills, knowledge of risk management frameworks, and a relevant degree in business, finance, or a related field. Familiarity with third-party risk management platforms, regulatory compliance tools, and certifications like Certified Third Party Risk Professional (CTPRP) are often required. Excellent communication, attention to detail, and problem-solving abilities help you effectively assess vendor risks and collaborate with cross-functional teams. These competencies ensure your organization can identify, mitigate, and manage risks associated with external vendors, protecting both operational integrity and regulatory compliance.

What does a vendor analyst do?

A vendor risk analyst evaluates third-party vendors to ensure they meet security, compliance, and performance standards. They review contracts, conduct risk assessments, and monitor vendor activities using tools like risk management software to mitigate potential threats to the organization.
What are the most commonly searched types of Vendor Risk Analyst jobs in Reston, VA? The most popular types of Vendor Risk Analyst jobs in Reston, VA are:
What are popular job titles related to Vendor Risk Analyst jobs in Reston, VA? For Vendor Risk Analyst jobs in Reston, VA, the most frequently searched job titles are:
What job categories do people searching Vendor Risk Analyst jobs in Reston, VA look for? The top searched job categories for Vendor Risk Analyst jobs in Reston, VA are:
What cities near Reston, VA are hiring for Vendor Risk Analyst jobs? Cities near Reston, VA with the most Vendor Risk Analyst job openings:
Vendor Risk Analyst jobs near you
Governance, Risk, and Compliance (GRC) Analyst

Governance, Risk, and Compliance (GRC) Analyst

EdgeConneX

Herndon, VA • On-site

Other

Posted 25 days ago

Job description

We are seeking a highly motivated and experienced Governance, Risk, and Compliance (GRC) Analyst to join our team. The ideal candidate will have at least five years of experience in GRC or IT risk, a bachelor's degree or higher in a related field, and professional certifications in GRC or cybersecurity. As a GRC Analyst, you will play a pivotal role in ensuring our organization adheres to regulatory requirements, manage risks effectively, and maintain robust governance practices for industry standards, frameworks and international data protection law.

Responsibilities:

  • Develop, implement, and maintain governance, risk, and compliance frameworks, policies, standards and procedures.
  • Conduct risk assessments and analyze potential threats to the organization's information systems and business operations.
  • Monitor compliance with internal policies and external regulatory requirements (e.g., NIS2, DORA, ISO27001, AICPA Trust Principles, NIST, CIS, GDPR, SOX, HIPAA).
  • Track changes to regional data protection law in the regions where EdgeConneX operates (APAC, EU, North America and South America)
  • Collaborate with cross-functional teams to identify, assess, and mitigate risks across the organization.
  • Maintain risk registers, compliance metrics, and reporting dashboards
  • Support third-party risk management and vendor security assessments
  • Prepare and present regular reports on risk management activities, compliance status, and remediation efforts to management.
  • Support internal and external audits, including gathering documentation and facilitating audit processes.
  • Stay up to date with changes in relevant laws, regulations, and industry best practices.
  • Assist in the development and delivery of training programs related to governance, risk, and compliance topics.
  • Contribute to continuous improvement of GRC processes and tooling

Required education & experience:

  • Bachelor's degree or higher in Information Security, Computer Science, Business Administration, or a related field.
  • Minimum of 5 years of professional experience in governance, risk, and compliance or a related discipline.
  • Professional certifications such as CISA, CRISC, CISSP, CISM, ISO27001LA or similar are required.
  • Strong understanding of regulatory requirements and frameworks (e.g., ISO 27001, NIST, PCI DSS).
  • Risk assessment methodologies and control testing
  • Excellent analytical and problem-solving skills.
  • Strong communication and interpersonal skills, with the ability to work collaboratively across departments.
  • Experience with:
    • Policy development and lifecycle management
    • Third-party/vendor risk assessments
    • GRC tools and risk management platforms (e.g., DRATA, VANTA, Archer, OneTrust)
  • Detail-oriented and highly organized, with a proactive approach to identifying and managing risks.

Preferred experience:

  • Experience with GRC software platforms and tools.
  • Project management experience or certification.
  • Experience in a regulated industry (e.g., datacenter, finance, technology).
  • Ability to train and mentor junior staff.

Apply