ZipRecruiter

Log In

1

Vendor Risk Management Jobs in Utah (NOW HIRING)

Lucid Software

Security Analyst

Salt Lake City, UT · On-site

Conduct third-party vendor risk assessments and internal risk evaluations; identify, document, and ... Bachelor's degree in information security assurance, business management, or a related field * 3+ ...

Filevine

Security Compliance Analyst

Salt Lake City, UT · On-site

Complete Third-party vendor risk management and security questionnaires for Filevine. * Provided annual Internal audit and risk assessment functions. * Facilitate and lead annual penetration testing ...

cosm

Sr. Program Manager, IT

Salt Lake City, UT · On-site

$112K - $112K/yr

Vendor & Partner Management * Own delivery oversight for external vendors, integrators, and ... Manage vendor risk, cost, and performance with transparency. Executive & Stakeholder Engagement

cosm

Sr. Program Manager, IT

Salt Lake City, UT · On-site

$112K - $112K/yr

Vendor & Partner Management * Own delivery oversight for external vendors, integrators, and ... Manage vendor risk, cost, and performance with transparency. Executive & Stakeholder Engagement

Adobe

Procurement Manager - Marketing Services

Lehi, UT · On-site

... vendor concentration risk, particularly relevant to AI tools and content ownership. Partnership ... Excellent collaborator management skills, with the ability to influence without direct authority.

previous page

Showing results 41-60

All JobsVendor Risk Management JobsVendor Risk Management Jobs in Utah

Vendor Risk Management information

See Utah salary details

$39.6K

$94.4K

$152.5K

How much do vendor risk management jobs pay per year?

As of Sep 14, 2026, the average yearly pay for vendor risk management in Utah is $94,409.00, according to ZipRecruiter salary data. Most workers in this role earn between $66,000.00 and $120,200.00 per year, depending on experience, location, and employer.

What is vendor risk management?

A Vendor Risk Management (VRM) job involves assessing, monitoring, and mitigating risks associated with third-party vendors and suppliers. Professionals in this role evaluate vendor security, compliance, and operational risks to protect their organization from potential disruptions, data breaches, or regulatory violations. They work closely with procurement, legal, and IT teams to establish risk management frameworks and ensure vendors meet contractual and security standards. Their responsibilities often include conducting risk assessments, reviewing vendor contracts, and developing risk mitigation strategies. Effective VRM helps organizations reduce exposure to risks while maintaining productive vendor relationships.

What are some common challenges faced in vendor risk management?

Professionals in Vendor Risk Management often encounter the challenge of assessing and monitoring a wide range of vendors, each with unique risk profiles and compliance requirements. Balancing multiple projects, managing deadlines, and ensuring clear communication between internal stakeholders and vendors can also be demanding. Staying updated on evolving regulatory standards and quickly adapting to new risks is essential in this role. Overcoming these challenges requires strong organizational skills, continual learning, and proactive relationship management.

What are the key skills and qualifications needed to thrive in vendor risk management?

To thrive in Vendor Risk Management, you need a solid background in risk assessment, contract analysis, and supply chain management, often supported by a degree in business, finance, or a related field. Familiarity with risk management software, vendor management systems, and relevant certifications such as Certified Third Party Risk Professional (CTPRP) are highly valued. Strong attention to detail, excellent communication, and negotiation skills help build effective vendor relationships and navigate complex scenarios. These capabilities are crucial for ensuring organizational compliance, minimizing third-party risks, and maintaining strong supplier performance.

How to do vendor risk management?

Vendor risk management involves identifying, assessing, and mitigating risks associated with third-party vendors to ensure they meet security, compliance, and performance standards. It typically includes conducting due diligence, evaluating vendor controls, and monitoring ongoing performance using tools like risk assessment frameworks and audits. Strong communication and documentation are essential for effective management.

What does a vendor risk management do?

A vendor risk management professional assesses and monitors the risks associated with third-party vendors to ensure compliance, security, and operational integrity. They evaluate vendor security practices, contractual obligations, and potential vulnerabilities, often using risk assessment tools and frameworks to mitigate potential threats to the organization.

What are the most commonly searched types of Vendor Risk Management jobs in Utah?

The most popular types of Vendor Risk Management jobs in Utah are:

What are popular job titles related to Vendor Risk Management jobs in Utah?

For Vendor Risk Management jobs in Utah, the most frequently searched job titles are:

What job categories do people searching Vendor Risk Management jobs in Utah look for?

The top searched job categories for Vendor Risk Management jobs in Utah are:

Vendor Risk Management jobs near you
Infographic showing various Vendor Risk Management job openings in Utah as of August 2026, with employment types broken down into 1% As Needed, 81% Full Time, 16% Part Time, and 2% Contract. Highlights an 82% Physical, 3% Hybrid, and 15% Remote job distribution, with an average salary of $94,409 per year, or $45.4 per hour.

Security Analyst

Salt Lake City, UT • On-site

Lucid Software
1 - 5K employees
Learn more about Lucid Softwareexternal

Full-time

Re-posted 16 hours ago

Job description

Lucid Software is the leader in visual collaboration and work acceleration, helping teams see and build the future by turning ideas into reality. Our products, business, and workplace culture have received numerous awards, such as being named to the Forbes Cloud 100 and a Fortune Best Workplace in Technology. Lucid is a hybrid workplace, allowing employees to work remotely, from one of our offices, or a combination of the two depending on the needs of the role and team. At Lucid, we hold true to our core values of teamwork over ego, innovation in everything we do, individual empowerment, initiative, and ownership, and passion and excellence in every area. We value diverse perspectives and are dedicated to creating an environment that is respectful and inclusive for everyone.
As a Security Analyst at Lucid Software, you will protect our corporate assets, world-class web applications, and employees. You will focus on the execution of day-to-day GRC (Governance, Risk, and Compliance) operations, third-party risk assessments, and championing customer trust. Lucid Software's security team fosters an environment where business and development can quickly adapt and innovate. We stay abreast of evolving security, legal, and business requirements through a risk and compliance mindset. Our mission is to protect and support the objectives of the business.
Responsibilities:
  • Conduct third-party vendor risk assessments and internal risk evaluations; identify, document, and report on potential vulnerabilities and control gaps.
  • Respond directly to standard vendor security questionnaires and support internal teams (i.e. Sales, Customer Success, etc.) in answering security-related questions from prospects.
  • Track and collect evidence for ongoing SOC 2 and ISO 27001 compliance audits.
  • Proactively identify emerging threats and associated risks to existing business processes and corporate assets, and collaborate with senior team members to develop practical security solutions.
  • Coordinate and deliver security awareness training programs to employees to foster a strong security culture.
  • Assure compliance to outside regulations affecting the Company
  • Collect and maintain impactful security and compliance metrics for team dashboards.
  • Partner with Legal, Engineering, IT, Finance, and HR to ensure corporate security policies are understood and followed.
  • Identify operational inefficiencies and areas for improvement in our existing security controls, and help design smoother workflows.

Requirements:
  • Bachelor's degree in information security assurance, business management, or a related field
  • 3+ years of experience with third party risk management, GRC, customer due diligence, etc.
  • Understanding of common security frameworks and principles (e.g. NIST 800-53, ISO 27001, SOC 2, etc). Strong organizational skills with the ability to manage tasks independently and meet deadlines with minimal oversight on daily routines.
  • Excellent verbal and written skills; comfortable translating security concepts into clear documentation.
  • Strong interpersonal skills with a track record of building positive relationships across non-technical teams (like Legal, HR, Finance) and technical teams (like IT and Engineering) to resolve security risks collaboratively.

Preferred Qualifications:
  • Prior experience working within a modern SaaS environment or cloud-first technology company, with a basic familiarity of how cloud applications operate.
  • Prior knowledge of and skill in applying risk management principles and practices
  • One or more preferred Certification(s): CRISC, CISSP, CISA, SSCP, CC, Security+, CySA+, etc.
  • Strong understanding of cloud environments (AWS, GCP, or Azure).
  • Experience with process improvement, efficiency enhancements, and automation of GRC and Security Assurance functions. Ability to use AI tools to enhance and enable work flows and automation.

#LI_DA1

Apply