Security Engineer
Phoenix, AZ · On-site
... vendors and cloud solutions for security and compliance requirements. • Track remediation activities and verify implementation of security recommendations. • Prepare assessment reports, risk ...
Security Engineer
Phoenix, AZ · On-site
... vendors and cloud solutions for security and compliance requirements. • Track remediation activities and verify implementation of security recommendations. • Prepare assessment reports, risk ...
Senior IT Security Architect
Phoenix, AZ · On-site
Support vendor risk assessments, review SOC 2 Type 2 reports, evaluate vendor SSO/SCIM/RBAC/audit-logging, and author SDLC security standards (secrets management, logging baselines, secure deployment ...
Senior IT Security Architect
Phoenix, AZ · On-site
Support vendor risk assessments, review SOC 2 Type 2 reports, evaluate vendor SSO/SCIM/RBAC/audit-logging, and author SDLC security standards (secrets management, logging baselines, secure deployment ...
Subcontract Sourcing Specialist
Scottsdale, AZ · On-site
$80K - $95K/yr
Perform bid leveling to ensure accurate comparison across vendors. * Facilitate clarification meetings and support negotiation efforts. • Qualification & Risk Assessment * Conduct risk assessments ...
Subcontract Sourcing Specialist
Scottsdale, AZ · On-site
$80K - $95K/yr
Perform bid leveling to ensure accurate comparison across vendors. * Facilitate clarification meetings and support negotiation efforts. • Qualification & Risk Assessment * Conduct risk assessments ...
Subcontract Sourcing Specialist
Scottsdale, AZ · On-site
$80K - $95K/yr
Perform bid leveling to ensure accurate comparison across vendors. * Facilitate clarification meetings and support negotiation efforts. • Qualification & Risk Assessment * Conduct risk assessments ...
Subcontract Sourcing Specialist
Scottsdale, AZ · On-site
$80K - $95K/yr
Perform bid leveling to ensure accurate comparison across vendors. * Facilitate clarification meetings and support negotiation efforts. • Qualification & Risk Assessment * Conduct risk assessments ...
Senior IT Security Architect
Phoenix, AZ · On-site
Govern the security and privacy architecture of AI platforms, vendors, and internal AI tooling, including model-training and data-handling terms. • Support vendor risk assessments, review SOC 2 ...
Senior IT Security Architect
Phoenix, AZ · On-site
Govern the security and privacy architecture of AI platforms, vendors, and internal AI tooling, including model-training and data-handling terms. • Support vendor risk assessments, review SOC 2 ...
Senior IT Security Architect
Phoenix, AZ · On-site
Support vendor risk assessments, review SOC 2 Type 2 reports, evaluate vendor SSO/SCIM/RBAC/audit-logging, and author SDLC security standards (secrets management, logging baselines, secure deployment ...
Senior IT Security Architect
Phoenix, AZ · On-site
Support vendor risk assessments, review SOC 2 Type 2 reports, evaluate vendor SSO/SCIM/RBAC/audit-logging, and author SDLC security standards (secrets management, logging baselines, secure deployment ...
Security Engineer
Phoenix, AZ · On-site
Assess third-party vendors and cloud solutions for security and compliance * Track remediation activities and verify implementation of security recommendations * Prepare assessment reports, risk ...
Security Engineer
Phoenix, AZ · On-site
Assess third-party vendors and cloud solutions for security and compliance * Track remediation activities and verify implementation of security recommendations * Prepare assessment reports, risk ...
Senior IT Security Architect
Phoenix, AZ · On-site
Govern the security and privacy architecture of AI platforms, vendors, and internal AI tooling, including model-training and data-handling terms. · Support vendor risk assessments, review SOC 2 Type ...
Senior IT Security Architect
Phoenix, AZ · On-site
Govern the security and privacy architecture of AI platforms, vendors, and internal AI tooling, including model-training and data-handling terms. · Support vendor risk assessments, review SOC 2 Type ...
Sr. Specialist, Risk Management Litigation
Phoenix, AZ · On-site
$97K/yr
Work closely with the IT department and external vendors to enhance and optimize the RMIS system ... Assess risk transfer opportunities to third-parties and draft all tender documents when risk ...
Sr. Specialist, Risk Management Litigation
Phoenix, AZ · On-site
$97K/yr
Work closely with the IT department and external vendors to enhance and optimize the RMIS system ... Assess risk transfer opportunities to third-parties and draft all tender documents when risk ...
Sr. Specialist, Risk Management Litigation
Phoenix, AZ · On-site
$97K/yr
Work closely with the IT department and external vendors to enhance and optimize the RMIS system ... Assess risk transfer opportunities to third-parties and draft all tender documents when risk ...
Quick apply
Sr. Specialist, Risk Management Litigation
Phoenix, AZ · On-site
$97K/yr
Work closely with the IT department and external vendors to enhance and optimize the RMIS system ... Assess risk transfer opportunities to third-parties and draft all tender documents when risk ...
Risk and Safety Coordinator
Tucson, AZ · On-site
... by team members, vendors, and contractors. Operates in a fast-paced casino and hospitality ... Performs on-scene assessments, gathers statements, photographs, and evidence, and ensures accurate ...
Risk and Safety Coordinator
Tucson, AZ · On-site
... by team members, vendors, and contractors. Operates in a fast-paced casino and hospitality ... Performs on-scene assessments, gathers statements, photographs, and evidence, and ensures accurate ...
Sr. Specialist, Risk Management Litigation
Phoenix, AZ · On-site
$97K/yr
Work closely with the IT department and external vendors to enhance and optimize the RMIS system ... Assess risk transfer opportunities to third-parties and draft all tender documents when risk ...
Sr. Specialist, Risk Management Litigation
Phoenix, AZ · On-site
$97K/yr
Work closely with the IT department and external vendors to enhance and optimize the RMIS system ... Assess risk transfer opportunities to third-parties and draft all tender documents when risk ...
... vendor assessments. * Participate in investigations of nonconformances and quality issues, including root-cause analyses and corrective and preventive action (CAPA) activities. * Support risk and ...
... vendor assessments. * Participate in investigations of nonconformances and quality issues, including root-cause analyses and corrective and preventive action (CAPA) activities. * Support risk and ...
... thirdparty vendors to support the design, launch, and ongoing oversight of payment products in ... Assess the design and effectiveness of existing controls supporting payment products and ...
... thirdparty vendors to support the design, launch, and ongoing oversight of payment products in ... Assess the design and effectiveness of existing controls supporting payment products and ...
Strategic Alliances Manager
Scottsdale, AZ · Remote
$85K - $110K/yr
Vendor Risk Management: Continually assess the financial and operational health of the vendor base to ensure long-term stability for BlueYonder'shardware commitments What We're Looking For: * 6+ ...
Strategic Alliances Manager
Scottsdale, AZ · Remote
$85K - $110K/yr
Vendor Risk Management: Continually assess the financial and operational health of the vendor base to ensure long-term stability for BlueYonder'shardware commitments What We're Looking For: * 6+ ...
Senior Manager, Cybersecurity
$111K - $151K/yr
... vendor cybersecurity risk assessments. • Perform software security reviews and drive remediation efforts. Incident Response and Investigation: • Maintain the incident response plan and lead hands ...
Senior Manager, Cybersecurity
$111K - $151K/yr
... vendor cybersecurity risk assessments. • Perform software security reviews and drive remediation efforts. Incident Response and Investigation: • Maintain the incident response plan and lead hands ...
Senior Manager, Cybersecurity
Scottsdale, AZ · On-site
$107K - $145K/yr
... vendor cybersecurity risk assessments. • Perform software security reviews and drive remediation efforts. Incident Response and Investigation: • Maintain the incident response plan and lead hands ...
Senior Manager, Cybersecurity
Scottsdale, AZ · On-site
$107K - $145K/yr
... vendor cybersecurity risk assessments. • Perform software security reviews and drive remediation efforts. Incident Response and Investigation: • Maintain the incident response plan and lead hands ...
Senior Manager, Cybersecurity
Scottsdale, AZ · On-site
$107K - $145K/yr
Manage third-party and vendor cybersecurity risk assessments. Perform software security reviews and drive remediation efforts. Incident Response and Investigation: Maintain the incident response plan ...
Senior Manager, Cybersecurity
Scottsdale, AZ · On-site
$107K - $145K/yr
Manage third-party and vendor cybersecurity risk assessments. Perform software security reviews and drive remediation efforts. Incident Response and Investigation: Maintain the incident response plan ...
Contract Manager - Southwest Region
Gilbert, AZ · On-site
$88K - $118K/yr
... and vendors. * Partner with internal stakeholders to understand business needs while providing contract guidance, risk assessment, change-order support, and formal notice responses. * Maintain ...
Contract Manager - Southwest Region
Gilbert, AZ · On-site
$88K - $118K/yr
... and vendors. * Partner with internal stakeholders to understand business needs while providing contract guidance, risk assessment, change-order support, and formal notice responses. * Maintain ...
Contract Manager - Southwest Region
Gilbert, AZ · On-site
$88K - $118K/yr
... and vendors. * Partner with internal stakeholders to understand business needs while providing contract guidance, risk assessment, change-order support, and formal notice responses. * Maintain ...
Contract Manager - Southwest Region
Gilbert, AZ · On-site
$88K - $118K/yr
... and vendors. * Partner with internal stakeholders to understand business needs while providing contract guidance, risk assessment, change-order support, and formal notice responses. * Maintain ...
Vendor Risk Assessment information
What is the difference between Vendor Risk Assessment vs Vendor Compliance Analyst?
| Aspect | Vendor Risk Assessment | Vendor Compliance Analyst |
|---|---|---|
| Primary Focus | Evaluating risks associated with vendors and third-party providers | Ensuring vendors comply with policies, regulations, and contractual obligations |
| Certifications | Certifications like CISSP, CISA, or vendor risk management courses | Certifications such as CCEP, CISA, or compliance-specific credentials |
| Work Environment | Risk management teams, procurement, cybersecurity departments | Compliance teams, legal, procurement, and audit departments |
| Industry Usage | Common in finance, healthcare, and IT sectors | Prevalent in regulated industries like finance, healthcare, and manufacturing |
Vendor Risk Assessment focuses on identifying and mitigating risks posed by vendors, while Vendor Compliance Analysts ensure vendors adhere to policies and regulations. Both roles are essential for managing third-party relationships but differ in their primary objectives and activities.
What are the key skills and qualifications needed to thrive as a vendor risk assessment professional?
To thrive in Vendor Risk Assessment, you need a solid understanding of risk management principles, third-party due diligence, and regulatory compliance, often supported by a degree in business, IT, or a related field. Familiarity with risk assessment tools, governance frameworks (like ISO 27001), and platforms such as GRC (Governance, Risk, and Compliance) systems is typically required. Strong analytical thinking, attention to detail, and effective communication skills help professionals assess vendor risks and collaborate across departments. These skills are crucial for identifying, mitigating, and communicating risks that could impact an organization’s operations, security, or reputation.
What are some common challenges faced in a vendor risk assessment role, and how can I prepare to address them?
Professionals in Vendor Risk Assessment often encounter challenges such as managing large volumes of vendor data, ensuring compliance with evolving regulations, and effectively communicating risks to both internal stakeholders and vendors. To prepare for these challenges, it's important to develop strong organizational and analytical skills, stay informed about regulatory changes, and build effective communication strategies. Collaborating closely with procurement, legal, and IT teams is also essential for gathering accurate information and implementing risk mitigation measures.
What is a vendor risk assessment?
A Vendor Risk Assessment is a process used by organizations to evaluate and manage the potential risks associated with outsourcing services or products to third-party vendors. The assessment typically examines areas such as data security, regulatory compliance, financial stability, and operational practices of the vendor. Its purpose is to identify potential vulnerabilities or threats that could impact the organization if the vendor fails to meet expectations or is compromised. Regular vendor risk assessments help ensure that third-party relationships do not expose the company to undue risk and that appropriate controls are in place.
What cities in Arizona are hiring for Vendor Risk Assessment jobs? Cities in Arizona with the most Vendor Risk Assessment job openings:
Job description
Role : Security Engineer
Location: Phoenix AZ
Duration: Long term
Key Responsibilities
• Conduct data security assessments for Finance, Supply Chain, and HCM applications and projects.
• Review application architecture, integrations, APIs, and data flows to identify security risks.
• Assess sensitive data handling, including Personally Identifiable Information (PII), financial, payroll, and supplier information.
• Evaluate identity and access management (IAM), role-based access controls (RBAC), segregation of duties (SoD), and privileged access.
• Collaborate with cybersecurity, enterprise architecture, infrastructure, and application teams during project implementation.
• Review encryption standards for data at rest and in transit.
• Assess third-party vendors and cloud solutions for security and compliance requirements.
• Track remediation activities and verify implementation of security recommendations.
• Prepare assessment reports, risk documentation, and executive summaries.
• Support internal and external security audits.
Required Qualifications
• Bachelor's degree in computer science, Information Security, Information Systems, or a related field.
• 3-8+ years of experience in information security, cybersecurity, governance, risk, compliance (GRC), or ERP security.
• Experience with security assessments of SaaS platforms, preferred- Finance, Supply Chain, and Oracle HCM.
• Strong understanding of:
• Identity and Access Management (IAM)
• Data classification
• Encryption technologies
• Authentication and authorization
• Secure SDLC
• Cloud security principles
Preferred Skills
• Experience conducting security architecture or application security reviews.
• Understanding of cloud platforms such as AWS, Azure, or Google Cloud.
• Hands-on experience with security automation using Java or Python.
• Knowledge of ERP security models and Segregation of Duties (SoD).
• Familiarity with vulnerability management and risk assessment methodologies.
• Strong analytical, documentation, and communication skills.
• Ability to work effectively with cross-functional business and technical teams.
Location: Phoenix AZ
Duration: Long term
Key Responsibilities
• Conduct data security assessments for Finance, Supply Chain, and HCM applications and projects.
• Review application architecture, integrations, APIs, and data flows to identify security risks.
• Assess sensitive data handling, including Personally Identifiable Information (PII), financial, payroll, and supplier information.
• Evaluate identity and access management (IAM), role-based access controls (RBAC), segregation of duties (SoD), and privileged access.
• Collaborate with cybersecurity, enterprise architecture, infrastructure, and application teams during project implementation.
• Review encryption standards for data at rest and in transit.
• Assess third-party vendors and cloud solutions for security and compliance requirements.
• Track remediation activities and verify implementation of security recommendations.
• Prepare assessment reports, risk documentation, and executive summaries.
• Support internal and external security audits.
Required Qualifications
• Bachelor's degree in computer science, Information Security, Information Systems, or a related field.
• 3-8+ years of experience in information security, cybersecurity, governance, risk, compliance (GRC), or ERP security.
• Experience with security assessments of SaaS platforms, preferred- Finance, Supply Chain, and Oracle HCM.
• Strong understanding of:
• Identity and Access Management (IAM)
• Data classification
• Encryption technologies
• Authentication and authorization
• Secure SDLC
• Cloud security principles
Preferred Skills
• Experience conducting security architecture or application security reviews.
• Understanding of cloud platforms such as AWS, Azure, or Google Cloud.
• Hands-on experience with security automation using Java or Python.
• Knowledge of ERP security models and Segregation of Duties (SoD).
• Familiarity with vulnerability management and risk assessment methodologies.
• Strong analytical, documentation, and communication skills.
• Ability to work effectively with cross-functional business and technical teams.
About InfiCare Technologies
Sourced by ZipRecruiter
Industry
Recruiting and staffing services
Company size
51 - 200 Employees
Headquarters location
Dulles, VA, US
Year founded
2001