ZipRecruiter

Log In

1

Vendor Risk Assessment Jobs in Virginia (NOW HIRING)

IMR Soft Llc

Risk Manager

Mclean, VA · On-site

$55 - $60/hr

... assessment. * Recommend enhancements to the business/technology processes and controls to improve effectiveness of technology & vendor risk management capabilities * Perform risk tracking, trending ...

Fortreum

Assessment Analyst

Leesburg, VA · On-site +1

$87K - $95K/yr

... risk. Together, we deliver independent, third-party, vendor-agnostic regulatory assessment and advisory services, alongside advanced cybersecurity offensive and compliance technical solutions. Our ...

Fortreum

Assessment Analyst

Leesburg, VA · On-site

$88 - $95/hr

... risk. Together, we deliver independent, third-party, vendor-agnostic regulatory assessment and advisory services, alongside advanced cybersecurity offensive and compliance technical solutions. Our ...

SC&H Group

Risk Senior Manager

Tysons Corner, VA · On-site

Lead ISO/IEC 27001 implementations (ISMS design, risk assessment, controls, internal audits ... vendor risk, cloud controls, incident response, logging/monitoring, data governance, AI governance)

next page

Showing results 1-20

All JobsVendor Risk Assessment JobsVendor Risk Assessment Jobs in Virginia

Vendor Risk Assessment information

What is a vendor risk assessment?

A Vendor Risk Assessment is a process used by organizations to evaluate and manage the potential risks associated with outsourcing services or products to third-party vendors. The assessment typically examines areas such as data security, regulatory compliance, financial stability, and operational practices of the vendor. Its purpose is to identify potential vulnerabilities or threats that could impact the organization if the vendor fails to meet expectations or is compromised. Regular vendor risk assessments help ensure that third-party relationships do not expose the company to undue risk and that appropriate controls are in place.

What are the key skills and qualifications needed to thrive as a vendor risk assessment professional?

To thrive in Vendor Risk Assessment, you need a solid understanding of risk management principles, third-party due diligence, and regulatory compliance, often supported by a degree in business, IT, or a related field. Familiarity with risk assessment tools, governance frameworks (like ISO 27001), and platforms such as GRC (Governance, Risk, and Compliance) systems is typically required. Strong analytical thinking, attention to detail, and effective communication skills help professionals assess vendor risks and collaborate across departments. These skills are crucial for identifying, mitigating, and communicating risks that could impact an organization’s operations, security, or reputation.

What are some common challenges faced in a vendor risk assessment role, and how can I prepare to address them?

Professionals in Vendor Risk Assessment often encounter challenges such as managing large volumes of vendor data, ensuring compliance with evolving regulations, and effectively communicating risks to both internal stakeholders and vendors. To prepare for these challenges, it's important to develop strong organizational and analytical skills, stay informed about regulatory changes, and build effective communication strategies. Collaborating closely with procurement, legal, and IT teams is also essential for gathering accurate information and implementing risk mitigation measures.

What is the difference between Vendor Risk Assessment vs Vendor Compliance Analyst?

AspectVendor Risk AssessmentVendor Compliance Analyst
Primary FocusEvaluating risks associated with vendors and third-party providersEnsuring vendors comply with policies, regulations, and contractual obligations
CertificationsCertifications like CISSP, CISA, or vendor risk management coursesCertifications such as CCEP, CISA, or compliance-specific credentials
Work EnvironmentRisk management teams, procurement, cybersecurity departmentsCompliance teams, legal, procurement, and audit departments
Industry UsageCommon in finance, healthcare, and IT sectorsPrevalent in regulated industries like finance, healthcare, and manufacturing

Vendor Risk Assessment focuses on identifying and mitigating risks posed by vendors, while Vendor Compliance Analysts ensure vendors adhere to policies and regulations. Both roles are essential for managing third-party relationships but differ in their primary objectives and activities.

What cities in Virginia are hiring for Vendor Risk Assessment jobs?

Cities in Virginia with the most Vendor Risk Assessment job openings:

Vendor Risk Assessment jobs near you
Infographic showing various Vendor Risk Assessment job openings in Virginia as of August 2026, with employment types broken down into 1% As Needed, 86% Full Time, 10% Part Time, and 3% Contract. Highlights an 87% Physical, 4% Hybrid, and 9% Remote job distribution.

Procurement Risk & Compliance Lead

S&P Global

Centreville, VA • On-site

$155K/yr

Full-time

Re-posted 26 days ago

S&P Global rating

7.3

Company rating: 7.3 out of 10

Based on 10 frontline employees who took The Breakroom Quiz

Job description

The Role:
Mobility Global is developing and building its third-party governance framework to support regulatory compliance, information security, and enterprise risk management.
Reporting to the Global Head of Procurement, the Procurement Risk & Compliance Lead, will lead a small team responsible for the operational implementation of the Company's vendor risk management process within Procurement. While Legal Risk & Compliance will design and maintain the enterprise risk framework, this role will be responsible for developing and building the third-party risk management function inside of procurement, aligning with enterprise risk domain owners (information security, HR, ethics and compliance, and finance), monitoring and mitigating supplier risk, and ensure proper governance across the procurement function.
This role serves as the operational bridge between Procurement, Legal, Risk & Compliance, and Information Security.
Responsibility and Impact:
Vendor Risk Process Operationalization
  • Translate the enterprise vendor risk framework into scalable procurement processes and policies.
  • Work with risk domain owners to define intake requirements and risk-tiering triggers for vendor engagements.
  • Monitor the TPRM process and ensure timely completeness of the risk reviews by the applicable risk domain owners.
  • Drive continuous improvement in vendor risk governance processes.
  • Maintain vendor risk attributes, classifications, and documentation repositories.
  • Partner with Finance Systems and IT to enhance automation and reporting.
  • Develop dashboards and reporting to monitor review completion, SLAs, and compliance trends.

Policy & Documentation Development
  • Draft and maintain procurement-facing vendor risk policies and SOPs.
  • Conduct training sessions for business stakeholders.

Risk Review Coordination & Enforcement
  • Monitor review timelines and escalate exceptions.
  • Maintain documentation of approvals, conditions, and remediation requirements.
  • Track and report compliance metrics to Procurement and Finance leadership.

Audit & Compliance Support
  • Maintain audit-ready documentation of vendor risk approvals and workflows.
  • Support SOX-related vendor governance controls where applicable.
  • Partner with Internal Audit on third-party risk assessments.
  • Support remediation efforts tied to vendor governance findings.
  • Promote a culture of governance and risk awareness.

What We're Looking For:
Basic Required Qualifications:
  • Bachelor's degree in Business, Supply Chain, Risk Management, Finance, or related field or equivalent relevant experience.
  • 7 to 10+ years of experience in Procurement, Third-Party Risk, Compliance, or Governance.
  • Experience in a publicly traded organization required.
  • Strong understanding of third-party risk domains, including:
    • Information security
    • Data privacy
    • Regulatory and compliance risk
    • Operational and financial risk
  • Experience developing policy documentation and process controls.
  • Strong systems and workflow configuration experience.
  • Must be a results-focused team player and adapt well to a multitasking, fast paced environment with changing priorities and challenges
  • Strong organizational, presentation and communication skills.
  • Experience working cross-functionally with Technology, Legal, Finance, and Risk teams.

Additional Preferred Qualifications:
  • Experience with LogicGate or similar TPRM tool
  • Governance-oriented with strong attention to detail.
  • Systems-minded and process-driven.
  • Confident cross-functional influencer.
  • Able to enforce controls in a collaborative but firm manner.
  • Comfortable operating in a transformation-oriented, post-spin environment.

If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us!
It is the policy of Mobility to provide equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law. In addition, Mobility will provide reasonable accommodations for qualified individuals with disabilities.

What S&P Global employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply