ZipRecruiter

Log In

1

Vendor Risk Assessment Jobs in California (NOW HIRING)

Discord

Technology Risk Audit Manager

San Francisco, CA · Hybrid

$180K - $202K/yr

Extend risk and controls assessment and assurance into consumer trust domains such as privacy ... Third-party/vendor risk depth * Data privacy regulatory fluency * DevSecOps / CI-CD pipeline ...

New

Sierra

Vendor Security Manager

San Francisco, CA · On-site

  • Medical

  • Dental

  • Vision

  • Life

  • Retirement

  • PTO

Assess and manage security risk across Sierra's full third-party landscape, recognizing that vendors, strategic partners, and contractors carry distinct risk profiles and require tailored oversight.

Ferrotec Usa

Director of Technology

Livermore, CA · Hybrid

  • Medical

  • Dental

  • Vision

  • Life

  • Retirement

  • PTO

Implement best practices for IT project management, vendor management, and cybersecurity risk assessment. * Ensure service delivery excellence through a customer-first approach to internal IT support ...

Ferrotec (USA) Corporation

Director of Technology

Livermore, CA · On-site

$150K - $203K/yr

  • Medical

  • Dental

  • Vision

  • Life

  • Retirement

  • PTO

Implement best practices for IT project management, vendor management, and cybersecurity risk assessment. * Ensure service delivery excellence through a customer-first approach to internal IT support ...

Prosum

Risk Analyst

El Segundo, CA · On-site

The Compliance Assessor of IT Risk & Compliance Management performs Security Risk Assessments on DIRECTV's 3rd party vendors. An assesment would typically involve the following tasks: Communicating ...

Glovis America, Inc.

Internal Audit Compliance Supervisor

Irvine, CA · On-site

$74K - $84K/yr

  • Medical

  • Dental

  • Vision

  • Life

  • Retirement

  • PTO

Partner with cross-functional teams to conduct third-party/vendor risk assessments to identify, assess, and mitigate third-party risks * Develop and maintain the Business Continuity Management (BCM ...

Hyundai Glovis

Internal Audit Compliance Supervisor

Irvine, CA · On-site

$74K - $84K/yr

  • Medical

  • Dental

  • Vision

  • Life

  • Retirement

  • PTO

Partner with cross-functional teams to conduct third-party/vendor risk assessments to identify, assess, and mitigate third-party risks * Develop and maintain the Business Continuity Management (BCM ...

RINGCENTRAL

Associate Security Trust Analyst

Belmont, CA

$250/day

  • Medical

  • Dental

  • Vision

  • Life

  • Retirement

  • PTO

Third-Party Risk Management (TPRM) * Conduct vendor security assessments, including collecting and evaluating security documentation. * Identify, document, and track vendor risk through the ...

New

Newegg

Director, Risk Management

Diamond Bar, CA · On-site

Conduct organization-wide risk assessments; ensure mitigation strategies are embedded within ... Conduct and oversee risk reviews for contracts, vendor agreements, and new business initiatives.

previous page

Showing results 41-60

All JobsVendor Risk Assessment JobsVendor Risk Assessment Jobs in California

Vendor Risk Assessment information

What is the difference between Vendor Risk Assessment vs Vendor Compliance Analyst?

AspectVendor Risk AssessmentVendor Compliance Analyst
Primary FocusEvaluating risks associated with vendors and third-party providersEnsuring vendors comply with policies, regulations, and contractual obligations
CertificationsCertifications like CISSP, CISA, or vendor risk management coursesCertifications such as CCEP, CISA, or compliance-specific credentials
Work EnvironmentRisk management teams, procurement, cybersecurity departmentsCompliance teams, legal, procurement, and audit departments
Industry UsageCommon in finance, healthcare, and IT sectorsPrevalent in regulated industries like finance, healthcare, and manufacturing

Vendor Risk Assessment focuses on identifying and mitigating risks posed by vendors, while Vendor Compliance Analysts ensure vendors adhere to policies and regulations. Both roles are essential for managing third-party relationships but differ in their primary objectives and activities.

What are the key skills and qualifications needed to thrive as a vendor risk assessment professional?

To thrive in Vendor Risk Assessment, you need a solid understanding of risk management principles, third-party due diligence, and regulatory compliance, often supported by a degree in business, IT, or a related field. Familiarity with risk assessment tools, governance frameworks (like ISO 27001), and platforms such as GRC (Governance, Risk, and Compliance) systems is typically required. Strong analytical thinking, attention to detail, and effective communication skills help professionals assess vendor risks and collaborate across departments. These skills are crucial for identifying, mitigating, and communicating risks that could impact an organization’s operations, security, or reputation.

What are some common challenges faced in a vendor risk assessment role, and how can I prepare to address them?

Professionals in Vendor Risk Assessment often encounter challenges such as managing large volumes of vendor data, ensuring compliance with evolving regulations, and effectively communicating risks to both internal stakeholders and vendors. To prepare for these challenges, it's important to develop strong organizational and analytical skills, stay informed about regulatory changes, and build effective communication strategies. Collaborating closely with procurement, legal, and IT teams is also essential for gathering accurate information and implementing risk mitigation measures.

What is a vendor risk assessment?

A Vendor Risk Assessment is a process used by organizations to evaluate and manage the potential risks associated with outsourcing services or products to third-party vendors. The assessment typically examines areas such as data security, regulatory compliance, financial stability, and operational practices of the vendor. Its purpose is to identify potential vulnerabilities or threats that could impact the organization if the vendor fails to meet expectations or is compromised. Regular vendor risk assessments help ensure that third-party relationships do not expose the company to undue risk and that appropriate controls are in place.

What cities in California are hiring for Vendor Risk Assessment jobs?

Cities in California with the most Vendor Risk Assessment job openings:

Vendor Risk Assessment jobs near you
Infographic showing various Vendor Risk Assessment job openings in California as of August 2026, with employment types broken down into 92% Full Time, and 8% Contract. Highlights an 84% In-person, 8% Hybrid, and 8% Remote job distribution.

Technology Risk Audit Manager

Discord

San Francisco, CA • Hybrid

$180K - $202K/yr

Full-time

Posted 2 days ago

New

Job description

Discord's Internal Audit team exists to demonstrate effective risk management, process optimization, and adherence to relevant regulations - through a mix of independent assurance and advisory work that helps teams strengthen our overall control environment. This Technology Risk Audit Manager role owns the technical side of that mission - IT SOX/ITGC, system controls, and domains centered around consumer trust - that protect hundreds of millions of our users worldwide. You'll have the opportunity to help build our internal audit function from the ground up: shaping the frameworks and processes with an AI-native approach from day one, rather than bolting AI on after the fact. Your first few months will focus on learning Discord's financial-reporting systems landscape, understanding the company's GRC program structure, and evaluating AI-powered testing solutions - setting the foundation for a function that's built to scale as Discord grows toward enterprise readiness. This person will report to the Vice President of Internal Audit.

What You'll Be Doing

  • Lead IT SOX/ITGC strategy and continuous improvement across financial-reporting-relevant systems
  • Extend risk and controls assessment and assurance into consumer trust domains such as privacy, security, and trust & safety
  • Partner with the Engineering organization to ensure proper access controls, segregation of duties, change management, and CI/CD integrity are in place
  • Guide control design through system implementations, migrations, and platform changes
  • Manage teams and projects related to IT controls and technical audits, including external contractors and/or internal teammates
  • Apply AI/automation tools to improve audit testing efficiency, anomaly detection, and control monitoring
  • Track remediation, coordinate with external auditors, and report to senior leadership

What you should have

  • Bachelor's degree in Information Systems, Computer Science, Accounting, or related field (or equivalent practical experience)
  • 8+ years in IT audit, risk management, or controls, spanning both financial (SOX/ITGC) and consumer trust domains (security, privacy, or trust & safety a plus)
  • Deep ITGC fundamentals - access management, change management, computer operations, and SDLC controls
  • SOX/ICFR knowledge and independent risk assessment methodology - able to scope an audit, identify key risks, and design test procedures rather than execute a checklist
  • Framework fluency across COSO, COBIT, and NIST CSF, applied appropriately by context
  • Proven external audit/co-source coordination experience, with a track record of driving remediation action plans through to closure
  • Hands-on experience applying AI or automation tools to audit processes, and strong communication skills translating technical risk for non-technical stakeholders

Bonus points

  • Consumer facing platform technology risk experience
  • Subscription and/or Ad Tech experience
  • Experience auditing homegrown systems and/or tools
  • AI governance experience
  • Third-party/vendor risk depth
  • Data privacy regulatory fluency
  • DevSecOps / CI-CD pipeline controls
  • CISA, CISSP, or CPA credential

Candidates must reside in or be willing to relocate to the San Francisco Bay Area (Alameda, Contra Costa, Marin, Napa, San Francisco, San Mateo, Santa Clara, Solano, and Sonoma counties). Relocation assistance may be available. For this role, the Hiring Manager would like folks to be in the office 1-2 days a week.

The US base salary range for this full-time position is $180,000 to $202,500 + equity + benefits. Our salary ranges are determined by role and level. Within the range, individual pay is determined by additional factors, including job-related skills, experience, and relevant education or training. Please note that the compensation details listed in US role postings reflect the base salary only, and do not include equity, or benefits.

Apply