ZipRecruiter

Log In

1

Vendor Risk Assessment Jobs (NOW HIRING)

Chubb

Vendor Risk Analyst

Chicago, IL · On-site +1

Conduct comprehensive risk assessments of third-party vendors, including evaluating their security practices, financial stability, and compliance with regulatory requirements. * Maintain a vendor ...

DFO Referrals

Vendor Risk Manager

Westport, CT · On-site

Lead holistic vendor risk assessments across cybersecurity, AI risk, privacy, financial, AML/CFT/sanctions. * Document residual risk acceptances with named accountable executives and time-boxed ...

Dalio Family Office

Vendor Risk Manager

Westport, CT · Hybrid

Lead holistic vendor risk assessments across cybersecurity, AI risk, privacy, financial, AML/CFT/sanctions. * Document residual risk acceptances with named accountable executives and time-boxed ...

Dalio Family Office

Vendor Risk Manager

Westport, CT · On-site

Lead holistic vendor risk assessments across cybersecurity, AI risk, privacy, financial, AML/CFT/sanctions. * Document residual risk acceptances with named accountable executives and time-boxed ...

DFO Referrals

Vendor Risk Manager

Westport, CT · Hybrid

Lead holistic vendor risk assessments across cybersecurity, AI risk, privacy, financial, AML/CFT/sanctions. * Document residual risk acceptances with named accountable executives and time-boxed ...

Hilltop Holdings

Vendor Risk Analyst

Dallas, TX · On-site

Assess and monitor risks associated with critical and high-risk vendors. * Assess risks associated ... with new products and services. * Develop and maintain competency with key risk technology ...

Hilltop Holdings

Vendor Risk Analyst

Dallas, TX

We apply a systematic approach to develop risk metrics, execute risk assessments, and evaluate loss ... Perform functions related to vendor risk management: * Assist with due diligence reviews of current ...

Baker Botts

Client & Vendor Risk Manager

Dallas, TX · On-site

Lead complex vendor-risk assessments for high-impact technology and service providers, including review of SOC 2 reports, ISO 27001 certifications, penetration-test results, cloud-security controls ...

ZS

Governance & Risk Analyst

Chicago, IL · On-site

$85K - $95K/yr

Key Responsibilities Third-Party Risk Management (TPRM) & Vendor Risk Assessments (VRA) * Conduct end-to-end Vendor Risk Assessments (VRA) including initiation, analysis, follow-ups, and final ...

True Anomaly

Enterprise Risk Analyst

Denver, CO · On-site

Execute vendor risk assessments as part of the onboarding and periodic review lifecycle, including security questionnaire administration, documentation review, and risk scoring. * Maintain the vendor ...

Intellectt INC

Vendor Quality Manager

Boston, MA · On-site

Assess and manage vendor quality risks across GMP/GDP operations using risk-based methodologies. * Monitor vendor quality metrics, KPIs, and dashboards to identify trends and potential compliance ...

next page

Showing results 1-20

All JobsVendor Risk Assessment Jobs

Vendor Risk Assessment information

See salary details

$51.5K

$111.6K

$170K

How much do vendor risk assessment jobs pay per year?

As of Jul 26, 2026, the average yearly pay for vendor risk assessment in the United States is $111,556.00, according to ZipRecruiter salary data. Most workers in this role earn between $90,000.00 and $129,000.00 per year, depending on experience, location, and employer.

What is the difference between Vendor Risk Assessment vs Vendor Compliance Analyst?

AspectVendor Risk AssessmentVendor Compliance Analyst
Primary FocusEvaluating risks associated with vendors and third-party providersEnsuring vendors comply with policies, regulations, and contractual obligations
CertificationsCertifications like CISSP, CISA, or vendor risk management coursesCertifications such as CCEP, CISA, or compliance-specific credentials
Work EnvironmentRisk management teams, procurement, cybersecurity departmentsCompliance teams, legal, procurement, and audit departments
Industry UsageCommon in finance, healthcare, and IT sectorsPrevalent in regulated industries like finance, healthcare, and manufacturing

Vendor Risk Assessment focuses on identifying and mitigating risks posed by vendors, while Vendor Compliance Analysts ensure vendors adhere to policies and regulations. Both roles are essential for managing third-party relationships but differ in their primary objectives and activities.

What are the key skills and qualifications needed to thrive as a Vendor Risk Assessment professional, and why are they important?

To thrive in Vendor Risk Assessment, you need a solid understanding of risk management principles, third-party due diligence, and regulatory compliance, often supported by a degree in business, IT, or a related field. Familiarity with risk assessment tools, governance frameworks (like ISO 27001), and platforms such as GRC (Governance, Risk, and Compliance) systems is typically required. Strong analytical thinking, attention to detail, and effective communication skills help professionals assess vendor risks and collaborate across departments. These skills are crucial for identifying, mitigating, and communicating risks that could impact an organization’s operations, security, or reputation.

What are some common challenges faced in a Vendor Risk Assessment role, and how can I prepare to address them?

Professionals in Vendor Risk Assessment often encounter challenges such as managing large volumes of vendor data, ensuring compliance with evolving regulations, and effectively communicating risks to both internal stakeholders and vendors. To prepare for these challenges, it's important to develop strong organizational and analytical skills, stay informed about regulatory changes, and build effective communication strategies. Collaborating closely with procurement, legal, and IT teams is also essential for gathering accurate information and implementing risk mitigation measures.

What is a Vendor Risk Assessment?

A Vendor Risk Assessment is a process used by organizations to evaluate and manage the potential risks associated with outsourcing services or products to third-party vendors. The assessment typically examines areas such as data security, regulatory compliance, financial stability, and operational practices of the vendor. Its purpose is to identify potential vulnerabilities or threats that could impact the organization if the vendor fails to meet expectations or is compromised. Regular vendor risk assessments help ensure that third-party relationships do not expose the company to undue risk and that appropriate controls are in place.
More about Vendor Risk Assessment jobs
What cities are hiring for Vendor Risk Assessment jobs? Cities with the most Vendor Risk Assessment job openings:
What states have the most Vendor Risk Assessment jobs? States with the most job openings for Vendor Risk Assessment jobs include:
What job categories do people searching Vendor Risk Assessment jobs look for? The top searched job categories for Vendor Risk Assessment jobs are:
Vendor Risk Assessment jobs near you
Infographic showing various Vendor Risk Assessment job openings in the United States as of July 2026, with employment types broken down into 2% As Needed, 79% Full Time, 16% Part Time, and 3% Contract. Highlights an 92% Physical, 2% Hybrid, and 6% Remote job distribution, with an average salary of $111,556 per year, or $53.6 per hour.
Vendor Risk Analyst

Vendor Risk Analyst

Chubb

Chicago, IL • On-site, Remote

Full-time

Medical, Dental, Life, Retirement

Posted 10 days ago

Chubb rating

8.2

Company rating: 8.2 out of 10

Based on 66 frontline employees who took The Breakroom Quiz

134th of 298 rated insurance

Job description

We are seeking a detail-oriented and analytical Vendor Risk Management Analyst to join our team. The Vendor Risk Management Analyst will be responsible for assessing, monitoring, and mitigating risks associated with third-party vendors to ensure compliance with organizational policies, industry standards, and regulatory requirements. This role plays a critical part in safeguarding the organization's operations, data, and reputation by identifying potential risks and implementing effective vendor risk management strategies.

Key Responsibilities

  1. Conduct comprehensive risk assessments of third-party vendors, including evaluating their security practices, financial stability, and compliance with regulatory requirements.
  2. Maintain a vendor risk management framework, including policies, procedures, and tools to assess and monitor vendor risks. 
  3. Complete onsite or remote audits of vendors to ensure that controls work as expected and procedures are followed correctly. 
  4. Monitor vendor performance risk levels on an ongoing basis, security posture, and ongoing compliance to ensure continued alignment with organizational standards and risk levels and identifying and addressing any changes in risk profiles or compliance issues.
  5. Collaborate with internal stakeholders, such as procurement, legal, IT, and compliance teams, to ensure vendor contracts include appropriate risk mitigation measures.
  6. Prepare detailed reports and presentations on vendor risk assessments, findings, and recommendations for senior management and other stakeholders.
  7. Stay up to date with industry trends, regulatory changes, and best practices in vendor risk management to continuously improve the organization's risk management processes.
  8. Support the development and delivery of training programs to educate internal teams on vendor risk management policies and procedures.

Key Competencies (knowledge and abilities required to perform a role effectively, comprising skills, competencies and behaviors)

  • Strong analytical and problem-solving skills with the ability to assess complex vendor risk scenarios.
  • Excellent communication and interpersonal skills to collaborate effectively with internal and external stakeholders.
  • Knowledge of regulatory requirements and industry standards related to vendor risk management (e.g., GDPR, ISO 27001, SOC 2).
  • Proficiency in using vendor risk management tools and software.
  • Strong organizational skills and attention to detail to manage multiple vendor assessments simultaneously.
  • Ability to work independently and make informed decisions in a fast-paced environment.
  • High ethical standards and a commitment to maintaining confidentiality and integrity.

Accreditations (Education, Certifications and/or Experience)

  • Bachelor's degree in Business Administration, Risk Management, Information Security, or a related field.
  • 0-4 years of experience in vendor risk management, third-party risk assessment, or a related role.
  • Relevant certifications such as Certified Third Party Risk Professional (CTPRP), Certified Information Systems Auditor (CISA), or Certified Risk and Information Systems Control (CRISC) are preferred.
  • Experience with risk management frameworks and tools is a plus.
OUR BENEFITS
As a Chubb corporate employee, you have access to one of the most comprehensive benefit plans in the business, designed to meet your needs and help you reach your financial goals. More details can be found here. Chubb is committed to supporting its employees with a comprehensive compensation package that is appropriate in the market where they work. Below are several of the many benefits we offer our employees: 
  • Health insurance
  • Dental insurance
  • Tuition reimbursement
  • A company-match 401(k) plan
  • Disability insurance
  • Life insurance
  • Employee referral bonuses

ABOUT COMBINED INSURANCE

Combined Insurance Company of America is a Chubb company and a leading provider of supplemental accident, health, disability, and life insurance products in North America. Headquartered in Chicago, with satellite office in Columbia, SC, Combined is celebrating over 100 years in business. We are committed to making the world of supplemental insurance easy to access and understand. The company has an A+ rating by the Better Business Bureau and an A + (Superior) financial strength rating by A.M. Best. We are ranked by VIQTORY as the number one Military Friendly Employer in 2023 (over $1 billion revenue category), marking Combined's twelfth consecutive year on the Top 10 list. We pride ourselves on approaching all situations with a Positive Mental Attitude (PMA) and encouraging collaboration.


ABOUT CHUBB
Chubb is a world leader in insurance. With operations in 54 countries, Chubb provides commercial and personal property and casualty insurance, personal accident and supplemental health insurance, reinsurance, and life insurance to a diverse group of clients. The company is distinguished by its extensive product and service offerings, broad distribution capabilities, exceptional financial strength, underwriting excellence, superior claims handling expertise and local operations globally.

Connect with us on Twitter, Facebook, LinkedIn, and Instagram

#combined

What Chubb employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Chubb logo

About Chubb

Sourced by ZipRecruiter

Chubb is the world's largest publicly traded property and casualty insurer. With operations in 54 countries, Chubb provides commercial and personal property and casualty insurance, personal accident and supplemental health insurance, reinsurance and life insurance to a diverse group of clients. We are a unique global organization with a culture of individuals passionately committed to our respective crafts. With underwriting at our core, each of us contributes to providing the best insurance coverage and service to our clients. Our highly collaborative, inclusive nature helps us drive better business outcomes through diversity of background, experiences, insights and values.

Industry

Insurance services

Company size

10,000+ Employees

Headquarters location

Warren, NJ, US

View All Chubb Jobs

Apply