ZipRecruiter

Log In

1

Vendor Risk Management Jobs in Iowa (NOW HIRING)

Life Care Services

VP, Information Security

Des Moines, IA · On-site

$153K - $191K/yr

Establish and oversee third-party cybersecurity risk management programs. * Evaluate security controls of vendors, service providers, software applications, and business partners. * Ensure ...

LCS

VP, Information Security

Des Moines, IA · On-site

$153K - $191K/yr

Establish and oversee third-party cybersecurity risk management programs. * Evaluate security controls of vendors, service providers, software applications, and business partners. * Ensure ...

Life Care Services

VP, Information Security

Des Moines, IA · On-site

$153K - $191K/yr

Establish and oversee third-party cybersecurity risk management programs. * Evaluate security controls of vendors, service providers, software applications, and business partners. * Ensure ...

Asbury Village

VP, Information Security

Des Moines, IA

$153K - $191K/yr

Establish and oversee third-party cybersecurity risk management programs. * Evaluate security controls of vendors, service providers, software applications, and business partners. * Ensure ...

LCS

VP, Information Security

Des Moines, IA

$153K - $191K/yr

Establish and oversee third-party cybersecurity risk management programs. * Evaluate security controls of vendors, service providers, software applications, and business partners. * Ensure ...

Hills Bank

Vice President, Product Strategy

Hills, IA · On-site

Evaluate fintech partnerships, vendor solutions, and emerging technologies that support product ... Balance innovation and growth objectives with sound risk management practices. EDUCATION AND ...

Hills Bank

Vice President, Product Strategy

Hills, IA · On-site

Evaluate fintech partnerships, vendor solutions, and emerging technologies that support product ... Balance innovation and growth objectives with sound risk management practices.EDUCATION AND SPECIAL ...

Hills Bank

Vice President, Product Strategy

Hills, IA · On-site

Evaluate fintech partnerships, vendor solutions, and emerging technologies that support product ... Balance innovation and growth objectives with sound risk management practices. EDUCATION AND ...

previous pagenext page

Showing results 21-40

All JobsVendor Risk Management JobsVendor Risk Management Jobs in Iowa

Vendor Risk Management information

See Iowa salary details

$40.9K

$97.4K

$157.3K

How much do vendor risk management jobs pay per year?

As of Sep 12, 2026, the average yearly pay for vendor risk management in Iowa is $97,406.00, according to ZipRecruiter salary data. Most workers in this role earn between $68,100.00 and $124,000.00 per year, depending on experience, location, and employer.

What is vendor risk management?

A Vendor Risk Management (VRM) job involves assessing, monitoring, and mitigating risks associated with third-party vendors and suppliers. Professionals in this role evaluate vendor security, compliance, and operational risks to protect their organization from potential disruptions, data breaches, or regulatory violations. They work closely with procurement, legal, and IT teams to establish risk management frameworks and ensure vendors meet contractual and security standards. Their responsibilities often include conducting risk assessments, reviewing vendor contracts, and developing risk mitigation strategies. Effective VRM helps organizations reduce exposure to risks while maintaining productive vendor relationships.

What are some common challenges faced in vendor risk management?

Professionals in Vendor Risk Management often encounter the challenge of assessing and monitoring a wide range of vendors, each with unique risk profiles and compliance requirements. Balancing multiple projects, managing deadlines, and ensuring clear communication between internal stakeholders and vendors can also be demanding. Staying updated on evolving regulatory standards and quickly adapting to new risks is essential in this role. Overcoming these challenges requires strong organizational skills, continual learning, and proactive relationship management.

What are the key skills and qualifications needed to thrive in vendor risk management?

To thrive in Vendor Risk Management, you need a solid background in risk assessment, contract analysis, and supply chain management, often supported by a degree in business, finance, or a related field. Familiarity with risk management software, vendor management systems, and relevant certifications such as Certified Third Party Risk Professional (CTPRP) are highly valued. Strong attention to detail, excellent communication, and negotiation skills help build effective vendor relationships and navigate complex scenarios. These capabilities are crucial for ensuring organizational compliance, minimizing third-party risks, and maintaining strong supplier performance.

How to do vendor risk management?

Vendor risk management involves identifying, assessing, and mitigating risks associated with third-party vendors to ensure they meet security, compliance, and performance standards. It typically includes conducting due diligence, evaluating vendor controls, and monitoring ongoing performance using tools like risk assessment frameworks and audits. Strong communication and documentation are essential for effective management.

What does a vendor risk management do?

A vendor risk management professional assesses and monitors the risks associated with third-party vendors to ensure compliance, security, and operational integrity. They evaluate vendor security practices, contractual obligations, and potential vulnerabilities, often using risk assessment tools and frameworks to mitigate potential threats to the organization.

What are popular job titles related to Vendor Risk Management jobs in Iowa?

For Vendor Risk Management jobs in Iowa, the most frequently searched job titles are:

What job categories do people searching Vendor Risk Management jobs in Iowa look for?

The top searched job categories for Vendor Risk Management jobs in Iowa are:

Vendor Risk Management jobs near you
Infographic showing various Vendor Risk Management job openings in Iowa as of September 2026, with employment types broken down into 1% As Needed, 82% Full Time, 15% Part Time, and 2% Contract. Highlights an 86% Physical, 3% Hybrid, and 11% Remote job distribution, with an average salary of $97,406 per year, or $46.8 per hour.

Information Security Compliance Analyst

West Des Moines, IA • On-site

Holmes Murphy
Insurance Services • 501 - 1,000 employees
Learn more about Holmes Murphyexternal

Full-time

Medical, Dental, Vision, Retirement

Re-posted 7 days ago

Job description

Job Description:
We are looking to add an Information Security Compliance Analyst II to join our Information Security team in West Des Moines, Iowa. Offering a forward-thinking, innovative, and vibrant company culture, along with the opportunity to share your unique potential, there really is no place like Holmes!
Essential Responsibilities:
The purpose of this position is to support the information security program, including initiatives related to strategy, policies, standards, risk management, awareness, and training. This role will also support the enhancement of the Enterprise's overall governance program.
Essential Responsibilities:
  • Conduct comprehensive risk assessments and provide detailed reports on findings and required mitigations.
  • Lead the development and maintenance of policies, ensuring they address regulatory requirements.
  • Oversee implementation of risk mitigation controls, risk management, and conduct follow-up audits.
  • Manage vendor risk assessments, working with third parties to address any gaps.
  • Review contractual agreements against compliance standards and in alignment with HMA contractual requirements

Additional Responsibilities:
  • Develop and present compliance metrics and reports to senior management and auditors.
  • Mentor junior analysts and oversee documentation quality.
  • Take the lead on special compliance projects, ensuring alignment with strategic goals.
  • Assist with the annual SOC2 audit and other audits or assessments as appropriate.

Knowledge, Skills and Abilities:
  • Strong understanding and application of privacy policies, compliance standards and regulations such as NIST, HIPAA, NYDFS or GLBA.
  • Solid knowledge of GRC tools such as Apptega, Archer, etc.
  • Broad technical knowledge of network, cloud, and application security.
  • Ability to conduct internal and external risk assessments and identify various types of risks, such as operational, cybersecurity, regulatory, and reputational risks, and recognize the implications of these risks on the organization.
  • Proficient with mapping and analyzing workflows to identify points of inefficiency, risk, or non-compliance.
  • Strong understanding of SDLC and experience in compliance integration.
  • Ability to analyze complex issues and implement effective solutions.
  • Experience using automation tools within the work environment.
  • Ability and willingness to consistently participate in internal and external educational opportunities to enhance knowledge of current insurance topics or relevant system improvements.
  • Ability to be available for work on a daily basis and extended hours as necessary.
  • Ability and willingness to consistently participate in internal and external educational opportunities to enhance knowledge of current insurance topics or relevant system improvements.
  • Ability and willingness to pursue relevant designations and/or continuing education, as appropriate.
  • Ability to apply common sense understanding to carry out instructions furnished in written, oral or diagram form. Ability to deal with problems involving several concrete variables in standardized situations.
  • Ability to exert up to 10 pounds of force occasionally, and/or negligible amount of force frequently or constantly to lift, carry, push, or pull objects.
  • Must be knowledgeable of and comply with HMA's Client Privacy Policy, HIPAA regulations and E&O procedures and policies.

Qualifications:
  • Education: Associate's or Bachelor's degree in cybersecurity, technology, information systems, or related area or an equivalent combination of education, training, and experience.
  • Experience: 3-5 years of relevant experience in Information Security, compliance, governance, or other security-related fields. Relevant certifications preferred.
  • Ability and willingness to pursue relevant designations and/or continuing education, as appropriate.

Core Competencies
  • Trust: Build trust through honest and caring actions and consistently do the right thing.
  • Communication: Seek understanding to convey messages and information to others in a caring and constructive manner.
  • Client Focus: Establish meaningful relationships with clients (internal and external) by supporting their unique potential and delivering an impactful experience.
  • Teamwork: Contributes to the success of the organization by effectively influencing others and uplifting their experiences and unique strengths.

Technical Competencies
  • Business & Technology Knowledge: Invests in the development of technical knowledge, understands business needs to make informed decisions and deliver technology solutions, including effective related processes and procedures.
  • Problem Solving: Ability to efficiently identify problem(s), leverage resources to determine root cause(s) and propose and implement solutions or make improvements

Here's a little bit about us:
In addition to being great at what you do, we place a high emphasis on building a best-in-class culture. We do this through empowering employees to build trust through honest and caring actions, ensuring clear and constructive communication, establishing meaningful client relationships that support their unique potential, and contributing to the organization's success by effectively influencing and uplifting team members.
Benefits: In addition to core benefits like health, dental and vision, also enjoy benefits such as:
  • Paid Parental Leave and supportive New Parent Benefits - We know being a working parent is hard, and we want to support our employees in this journey!
  • Company paid continuing Education & Tuition Reimbursement - We support those who want to develop and grow.
  • 401k Profit Sharing - Each year, Holmes Murphy makes a lump sum contribution to every full-time employee's 401k. This means, even if you're not in a position to set money aside for the future at any point in time, Holmes Murphy will do it on your behalf! We are forward-thinking and want to be sure your future is cared for.
  • Generous time off practices in addition to paid holidays - Yes, we actually encourage employees to use their time off, and they do. After all, you can't be at your best for our clients if you're not at your best for yourself first.
  • Supportive of community efforts with paid Volunteer time off and employee matching gifts to charities that are important to you - Through our Holmes Murphy Foundation, we offer several vehicles where you can make an impact and care for those around you.
  • Inclusion & Belonging Programs - Holmes Murphy is committed to celebrating every employee's unique potential. Through inclusion and belonging initiatives, titled Uniquely United, not only do we offer employees a paid Diversity Day time-off option, but we also have a Uniquely United Committee, Employee Resource Groups, and development programs to advance our culture of belonging. We encourage employees to engage in ways that are meaningful to them to enhance their overall experience!
  • Consistent merit increase and promotion opportunities - Employees are reviewed annually for merit increases and promotion opportunities because we believe growth is important - not only with your financial wellbeing, but also your career wellbeing.
  • Discretionary bonus opportunity - Yes, there is an annual opportunity to make more money. Who doesn't love that?!

Holmes Murphy & Associates is an Equal Opportunity Employer.

Apply