1

Vendor Risk Assessment Jobs in Pennsylvania (NOW HIRING)

Partner with IT, business, and vendor teams to guide secure technology implementations. * Define and maintain risk assessment standards, secure development processes, and vulnerability management.

Partner with IT, business, and vendor teams to guide secure technology implementations. Define and maintain risk assessment standards, secure development processes, and vulnerability management. Lead ...

Showing results 21-40

Vendor Risk Assessment information

What is a vendor risk assessment?

A Vendor Risk Assessment is a process used by organizations to evaluate and manage the potential risks associated with outsourcing services or products to third-party vendors. The assessment typically examines areas such as data security, regulatory compliance, financial stability, and operational practices of the vendor. Its purpose is to identify potential vulnerabilities or threats that could impact the organization if the vendor fails to meet expectations or is compromised. Regular vendor risk assessments help ensure that third-party relationships do not expose the company to undue risk and that appropriate controls are in place.

What are the key skills and qualifications needed to thrive as a vendor risk assessment professional?

To thrive in Vendor Risk Assessment, you need a solid understanding of risk management principles, third-party due diligence, and regulatory compliance, often supported by a degree in business, IT, or a related field. Familiarity with risk assessment tools, governance frameworks (like ISO 27001), and platforms such as GRC (Governance, Risk, and Compliance) systems is typically required. Strong analytical thinking, attention to detail, and effective communication skills help professionals assess vendor risks and collaborate across departments. These skills are crucial for identifying, mitigating, and communicating risks that could impact an organization’s operations, security, or reputation.

What are some common challenges faced in a vendor risk assessment role, and how can I prepare to address them?

Professionals in Vendor Risk Assessment often encounter challenges such as managing large volumes of vendor data, ensuring compliance with evolving regulations, and effectively communicating risks to both internal stakeholders and vendors. To prepare for these challenges, it's important to develop strong organizational and analytical skills, stay informed about regulatory changes, and build effective communication strategies. Collaborating closely with procurement, legal, and IT teams is also essential for gathering accurate information and implementing risk mitigation measures.

What is the difference between Vendor Risk Assessment vs Vendor Compliance Analyst?

AspectVendor Risk AssessmentVendor Compliance Analyst
Primary FocusEvaluating risks associated with vendors and third-party providersEnsuring vendors comply with policies, regulations, and contractual obligations
CertificationsCertifications like CISSP, CISA, or vendor risk management coursesCertifications such as CCEP, CISA, or compliance-specific credentials
Work EnvironmentRisk management teams, procurement, cybersecurity departmentsCompliance teams, legal, procurement, and audit departments
Industry UsageCommon in finance, healthcare, and IT sectorsPrevalent in regulated industries like finance, healthcare, and manufacturing

Vendor Risk Assessment focuses on identifying and mitigating risks posed by vendors, while Vendor Compliance Analysts ensure vendors adhere to policies and regulations. Both roles are essential for managing third-party relationships but differ in their primary objectives and activities.

What cities in Pennsylvania are hiring for Vendor Risk Assessment jobs?

Cities in Pennsylvania with the most Vendor Risk Assessment job openings:

Infographic showing various Vendor Risk Assessment job openings in Pennsylvania as of August 2026, with employment types broken down into 1% As Needed, 91% Full Time, 6% Part Time, and 2% Contract. Highlights an 85% Physical, 5% Hybrid, and 10% Remote job distribution.

Senior AI Risk Analyst

4 Staffing Corp

Malvern, PA • Hybrid

Full-time

This job post has expired today. Applications are no longer accepted.


Job description

Senior AI Risk Analyst

Malvern, Pennsylvania, United States

Senior AI Risk Analyst

Full-time/Regular/Direct Hire role

No VISA Sponsorship / US Citizen or Green Card holders only

Location: (Hybrid) 3 days onsite in Malvern, PA

About the Role: We are seeking a senior-level Artificial Intelligence Risk professional to lead advanced security assessments across enterprise IT systems, including cloud, on-premises, AI-powered platforms, and third-party solutions. This role leverages AI-driven tools to continuously monitor, assess, and mitigate technology risks while defining standards and best practices that protect enterprise assets.

Responsibilities:

  • Conduct in-depth security and risk assessments across cloud, on-prem, and AI-enabled systems.
  • Identify vulnerabilities and provide actionable remediation guidance.
  • Use AI/analytics tools to monitor, predict, and manage risks proactively.
  • Partner with IT, business, and vendor teams to guide secure technology implementations.
  • Define and maintain risk assessment standards, secure development processes, and vulnerability management.
  • Lead investigations, validate controls, and deliver strategic recommendations on emerging technologies and AI risk practices.

Requirements:

  • 8+ years in IT security, application development, or risk assurance, with exposure to cloud and AI-enabled systems.
  • Bachelors degree or equivalent experience.
  • Certifications such as CISSP, CRISC, CISA, CCSP, GIAC, GSEC, CEH preferred.
  • AI-focused certifications (AAISM, CSPAI) a plus.
  • Strong communication skills to advise technical and non- technical stakeholders.

Keywords for ATS & Search Optimization: AI Risk, Technical Risk Analyst, Cloud Security, Security Assessment, Vulnerability Management, Cybersecurity, AI Platforms, IT Risk Assurance