... Risk Review teams ... Key responsibilities include managing a portfolio of technology vendors, software platforms, and ...
... Risk Review teams ... Key responsibilities include managing a portfolio of technology vendors, software platforms, and ...
IT Risk Technical Lead
Mclean, VA · On-site
$136 - $204/hr
Coordinate and manage third‑party vendor risk governance activities, including vendor SOC and Enhanced Information Risk Review * Lead AI Clearinghouse operations and strategic initiatives ...
IT Risk Technical Lead
Mclean, VA · On-site
$136 - $204/hr
Coordinate and manage third‑party vendor risk governance activities, including vendor SOC and Enhanced Information Risk Review * Lead AI Clearinghouse operations and strategic initiatives ...
Senior Associate, Claims & Risk Management
Falls Church, VA · On-site
$77K - $112K/yr
Senior Associate, Claims & Risk Management The Senior Associate, Claims & Risk Management, is ... Participate in interviews with prospective attorneys and vendors; update and maintain list of ...
Senior Associate, Claims & Risk Management
Falls Church, VA · On-site
$77K - $112K/yr
Senior Associate, Claims & Risk Management The Senior Associate, Claims & Risk Management, is ... Participate in interviews with prospective attorneys and vendors; update and maintain list of ...
Senior Associate, Claims & Risk Management
Falls Church, VA · On-site
$77K - $112K/yr
Senior Associate, Claims & Risk Management The Senior Associate, Claims & Risk Management, is ... vendors; update and maintain list of approved attorneys and vendors Insurance Claims Program ...
Senior Associate, Claims & Risk Management
Falls Church, VA · On-site
$77K - $112K/yr
Senior Associate, Claims & Risk Management The Senior Associate, Claims & Risk Management, is ... vendors; update and maintain list of approved attorneys and vendors Insurance Claims Program ...
Senior Associate, Claims & Risk Management
Falls Church, VA · On-site
$77K - $112K/yr
Senior Associate, Claims & Risk Management The Senior Associate, Claims & Risk Management, is ... Participate in interviews with prospective attorneys and vendors; update and maintain list of ...
Senior Associate, Claims & Risk Management
Falls Church, VA · On-site
$77K - $112K/yr
Senior Associate, Claims & Risk Management The Senior Associate, Claims & Risk Management, is ... Participate in interviews with prospective attorneys and vendors; update and maintain list of ...
Coordinate and manage third-party vendor risk governance activities, including vendor SOC and Enhanced Information Risk Review * Lead AI Clearinghouse operations and strategic initiatives, including ...
Coordinate and manage third-party vendor risk governance activities, including vendor SOC and Enhanced Information Risk Review * Lead AI Clearinghouse operations and strategic initiatives, including ...
Immediate Position Overview We are seeking a detail-oriented Supplier Risk Management (SRM) Assessor to evaluate and manage risks associated with third-party suppliers and vendors. The successful ...
Immediate Position Overview We are seeking a detail-oriented Supplier Risk Management (SRM) Assessor to evaluate and manage risks associated with third-party suppliers and vendors. The successful ...
IT Risk Technical Lead
Mclean, VA · On-site
Coordinate and manage third-party vendor risk governance activities, including vendor SOC and Enhanced Information Risk Review * Lead AI Clearinghouse operations and strategic initiatives, including ...
IT Risk Technical Lead
Mclean, VA · On-site
Coordinate and manage third-party vendor risk governance activities, including vendor SOC and Enhanced Information Risk Review * Lead AI Clearinghouse operations and strategic initiatives, including ...
Senior Consultant - IT Governance, Risk & Compliance (GRC)
Ashburn, VA · On-site
$90 - $139/hr
In this role, you will apply your expertise in IT governance, risk management, and compliance to ... Develop and maintain risk registers, risk heat maps, and third‑party/vendor risk assessment ...
Senior Consultant - IT Governance, Risk & Compliance (GRC)
Ashburn, VA · On-site
$90 - $139/hr
In this role, you will apply your expertise in IT governance, risk management, and compliance to ... Develop and maintain risk registers, risk heat maps, and third‑party/vendor risk assessment ...
Senior Consultant - IT Governance, Risk & Compliance (GRC)
Ashburn, VA · On-site
$90K - $139K/yr
In this role, you will apply your expertise in IT governance, risk management, and compliance to ... Develop and maintain risk registers, risk heat maps, and third-party/vendor risk assessment ...
Senior Consultant - IT Governance, Risk & Compliance (GRC)
Ashburn, VA · On-site
$90K - $139K/yr
In this role, you will apply your expertise in IT governance, risk management, and compliance to ... Develop and maintain risk registers, risk heat maps, and third-party/vendor risk assessment ...
Manage the Information Technology Compliance Department, to include training and cross-training, policies and procedures, cybersecurity, third-party vendor risk management, incident response ...
Manage the Information Technology Compliance Department, to include training and cross-training, policies and procedures, cybersecurity, third-party vendor risk management, incident response ...
Senior Consultant - IT Governance, Risk & Compliance (GRC)
Ashburn, VA · On-site
$90K - $139K/yr
In this role, you will apply your expertise in IT governance, risk management, and compliance to ... Develop and maintain risk registers, risk heat maps, and third-party/vendor risk assessment ...
Quick apply
Senior Consultant - IT Governance, Risk & Compliance (GRC)
Ashburn, VA · On-site
$90K - $139K/yr
In this role, you will apply your expertise in IT governance, risk management, and compliance to ... Develop and maintain risk registers, risk heat maps, and third-party/vendor risk assessment ...
Risk Management Coordinator
$59K - $93K/yr
Risk Management Coordinator Apply now Job no: 40000431 Work type: Full Time Location: Williamsburg ... vendors, and other stakeholders; communicate with tact, diplomacy, and understanding when ...
New
Risk Management Coordinator
$59K - $93K/yr
Risk Management Coordinator Apply now Job no: 40000431 Work type: Full Time Location: Williamsburg ... vendors, and other stakeholders; communicate with tact, diplomacy, and understanding when ...
New
Senior IT Security Engineer
Chesapeake, VA · On-site
$125 - $150/hr
Lead third-party vendor security risk management, directing vendor risk assessments, critical vendor classification, and ongoing monitoring of vendor compliance obligations. * Direct the security ...
Senior IT Security Engineer
Chesapeake, VA · On-site
$125 - $150/hr
Lead third-party vendor security risk management, directing vendor risk assessments, critical vendor classification, and ongoing monitoring of vendor compliance obligations. * Direct the security ...
Director, Resident Screening & Risk Strategy (Multifamily)
Norfolk, VA · On-site
$140K - $165K/yr
... Management, Marketing, Legal, and external vendors to ensure screening practices optimize both ... Develop enterprise-level risk mitigation strategies and collaborate with Legal as needed. 3. Cross ...
Director, Resident Screening & Risk Strategy (Multifamily)
Norfolk, VA · On-site
$140K - $165K/yr
... Management, Marketing, Legal, and external vendors to ensure screening practices optimize both ... Develop enterprise-level risk mitigation strategies and collaborate with Legal as needed. 3. Cross ...
Senior IT Security Engineer
Chesapeake, VA · On-site
$92K - $126K/yr
... vendor security risk management, directing vendor risk assessments, critical vendor classification, and ongoing monitoring of vendor compliance obligations. • Direct the security awareness and ...
Senior IT Security Engineer
Chesapeake, VA · On-site
$92K - $126K/yr
... vendor security risk management, directing vendor risk assessments, critical vendor classification, and ongoing monitoring of vendor compliance obligations. • Direct the security awareness and ...
Senior IT Security Engineer
Chesapeake, VA · On-site
$92K - $126K/yr
... vendor security risk management, directing vendor risk assessments, critical vendor classification, and ongoing monitoring of vendor compliance obligations. • Direct the security awareness and ...
Senior IT Security Engineer
Chesapeake, VA · On-site
$92K - $126K/yr
... vendor security risk management, directing vendor risk assessments, critical vendor classification, and ongoing monitoring of vendor compliance obligations. • Direct the security awareness and ...
Own the third-party risk framework and partner across Procurement, Finance, Legal, Cyber, Risk, and Technology to strengthen vendor governance, manage risk, and inform long-term investment decisions.
Own the third-party risk framework and partner across Procurement, Finance, Legal, Cyber, Risk, and Technology to strengthen vendor governance, manage risk, and inform long-term investment decisions.
Operational Risk Manager
Mclean, VA · On-site
... vendors, consultants, and service providers * Knowledge of property loss prevention principles, fire protection systems, business continuity planning, and risk management practices * Strong ...
Operational Risk Manager
Mclean, VA · On-site
... vendors, consultants, and service providers * Knowledge of property loss prevention principles, fire protection systems, business continuity planning, and risk management practices * Strong ...
Operational Risk Manager
Mclean, VA · On-site
... vendors, consultants, and service providers * Knowledge of property loss prevention principles, fire protection systems, business continuity planning, and risk management practices * Strong ...
Operational Risk Manager
Mclean, VA · On-site
... vendors, consultants, and service providers * Knowledge of property loss prevention principles, fire protection systems, business continuity planning, and risk management practices * Strong ...
Vendor Risk Management information
See Virginia salary details
$43.1K - $54.3K
8% of jobs
$54.3K - $65.5K
14% of jobs
$70.6K is the 25th percentile. Wages below this are outliers.
$65.5K - $76.7K
6% of jobs
$76.7K - $87.8K
8% of jobs
$87.8K - $99K
11% of jobs
The median wage is $101.3K / yr.
$99K - $110.2K
13% of jobs
$110.2K - $121.4K
11% of jobs
$124.8K is the 75th percentile. Wages above this are outliers.
$121.4K - $132.5K
15% of jobs
$132.5K - $143.7K
8% of jobs
$143.7K - $154.9K
4% of jobs
$154.9K - $166.1K
2% of jobs
$43.1K
$102.8K
$166.1K
How much do vendor risk management jobs pay per year?
What is vendor risk management?
A Vendor Risk Management (VRM) job involves assessing, monitoring, and mitigating risks associated with third-party vendors and suppliers. Professionals in this role evaluate vendor security, compliance, and operational risks to protect their organization from potential disruptions, data breaches, or regulatory violations. They work closely with procurement, legal, and IT teams to establish risk management frameworks and ensure vendors meet contractual and security standards. Their responsibilities often include conducting risk assessments, reviewing vendor contracts, and developing risk mitigation strategies. Effective VRM helps organizations reduce exposure to risks while maintaining productive vendor relationships.
What are some common challenges faced in vendor risk management?
Professionals in Vendor Risk Management often encounter the challenge of assessing and monitoring a wide range of vendors, each with unique risk profiles and compliance requirements. Balancing multiple projects, managing deadlines, and ensuring clear communication between internal stakeholders and vendors can also be demanding. Staying updated on evolving regulatory standards and quickly adapting to new risks is essential in this role. Overcoming these challenges requires strong organizational skills, continual learning, and proactive relationship management.
What are the key skills and qualifications needed to thrive in vendor risk management?
To thrive in Vendor Risk Management, you need a solid background in risk assessment, contract analysis, and supply chain management, often supported by a degree in business, finance, or a related field. Familiarity with risk management software, vendor management systems, and relevant certifications such as Certified Third Party Risk Professional (CTPRP) are highly valued. Strong attention to detail, excellent communication, and negotiation skills help build effective vendor relationships and navigate complex scenarios. These capabilities are crucial for ensuring organizational compliance, minimizing third-party risks, and maintaining strong supplier performance.
How to do vendor risk management?
What does a vendor risk management do?
What are the most commonly searched types of Vendor Risk Management jobs in Virginia?
The most popular types of Vendor Risk Management jobs in Virginia are:
What are popular job titles related to Vendor Risk Management jobs in Virginia?
For Vendor Risk Management jobs in Virginia, the most frequently searched job titles are:
What job categories do people searching Vendor Risk Management jobs in Virginia look for?
The top searched job categories for Vendor Risk Management jobs in Virginia are:
What cities in Virginia are hiring for Vendor Risk Management jobs?
Cities in Virginia with the most Vendor Risk Management job openings:

Full-time
Re-posted 4 days ago
Deloitte rating
8.2
Based on 93 frontline employees who took The Breakroom Quiz
45th of 151 rated financial services
Job description
The Deloitte Tax LLP's (Deloitte Tax) Tax Transformation Office (TTO) is pivotal to supporting Deloitte Tax client service delivery by optimizing end-to-end business processes and utilizing technology across all Tax offerings. This methodology improves efficiency in service delivery and encourages growth. The Senior Consultant - Technology Third Party Risk Management (TPRM) role offers an opportunity to be part of an innovative team within Deloitte Tax, focused on delivering value consistent with the Deloitte brand.
At Deloitte, we guide clients through the complex and evolving field of tax transformation. Through a broad suite of integrated tax services, we generate greater impact for clients. Our approach merges advanced technology and tax expertise to provide insights and smarter solutions, supporting clients to navigate a rapidly changing global environment.
Recruiting for this role ends on May 31, 2027
Work you'll doThe Senior Consultant - Technology Third Party Risk Management role in the Tax Transformation Office (TTO) requires hands-on understanding of professional services, models for third-party relationships, and relevant technologies. In this position, you will collaborate across different tax offerings, engaging with Business Leaders and professionals from multiple Risk Review teams. Key responsibilities include managing a portfolio of technology vendors, software platforms, and strategic alliance partners by supporting the creation of new third-party relationships as Deloitte Tax pursues strategic growth initiatives.
Responsibilities include:
- Leading end-to-end TPRM reviews - coordinating intake, managing due diligence documentation (such as security questionnaires and SOC reports), for both new and renewing vendors.
- Maintaining the vendor risk register and tracking dashboards - providing leadership with timely and accurate updates on current reviews, escalations, and remediation actions.
- Establishing a reputation as a primary point of contact for TPRM process questions - offering subject matter guidance to business sponsors, vendor managers, and other stakeholders throughout the review lifecycle.
- Partnering with Independence, Risk, Legal (OGC), Vendor Cyber, Confidentiality & Privacy, and Procurement teams - ensuring alignment on compliance requirements, identifying and resolving obstacles, and maintaining consistent application of policies and practices.
- Identifying process improvement opportunities within the TPRM lifecycle - driving efficiency gains through enhanced tooling, improved documentation standards, or workflow redesign.
- Supporting broader TTO Strategic Technology Services initiatives - contributing to third-party relationship strategy, vendor portfolio governance, and alliance program operations.
A successful candidate would possess these skills:
- Strong communicator with the ability to tailor messages for technical and non-technical audiences.
- Collaborative relationship builder who works effectively across functions and levels to drive alignment.
- Adaptable, self-directed problem solver who can manage shifting priorities and multiple workstreams.
- Confident facilitator who influences without authority and helps move issues to resolution.
The Team
Deloitte Tax LLP's Tax Transformation Office (TTO) is responsible for the design, development, and deployment of innovative, enterprise technology, tools, and standard processes to support the delivery of tax services. The TTO team focuses on enhancing Deloitte Tax LLP's ability to deliver comprehensive, value-added, and efficient tax services to our clients. The TTO Strategic Technology Services team is responsible for the enablement of standard technology to support Tax service delivery and developing technology to facilitate these services. TTO is focused on expanding Deloitte Tax capacity to deliver efficient, value-added Tax services to clients.
Qualifications
Required:
- Ability to perform job responsibilities within a hybrid work model that requires US Tax professionals to co-locate in person 2 - 3 days per week
- Bachelor's degree in Business Administration, Information Systems, Computer Science or other relevant discipline
- 3+ years' experience in transformation, consulting, strategic program delivery, or vendor/third-party management.
- Hands-on experience managing the TPRM or equivalent vendor risk lifecycle end-to-end - including due diligence, risk assessment, and stakeholder alignment.
- Demonstrated familiarity with risk and compliance frameworks - TPRM, SOC 2, or similar.
- Limited immigration sponsorship may be available.
- Ability to travel up to 10%, on average, based on the work you do and the clients and industries/sectors you serve
- One of the following active accreditations obtained:
- Licensed CPA in state of practice/primary office if eligible to sit for the CPA
- If not CPA eligible:
- Licensed Attorney
- Enrolled Agent
- CBAP - Certified Business Analysis Professional
- Certified in Risk and Information System Controls (CRISC)
- Microsoft Azure
- Project Management Professional (PMP)
Preferred:
- Experience in a tax, financial services, or professional services environment, with exposure to third-party risk, vendor management, or related compliance processes.
- Strong verbal and written communication skills, with the ability to tailor messages for both technical and non-technical audiences.
- Proven stakeholder management, listening, and facilitation skills, including the ability to build alignment across diverse teams and levels.
- Broad awareness of technology tools, platforms, and emerging capabilities, with the ability to assess practical fit to business needs.
- Experience supporting business process improvement, transformation, or technology-enabled change initiatives.
- Prior consulting or professional services experience, and/or relevant certifications such as PMP, CTPRM, or similar.
The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $93,000 to $191,000.
You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.The Deloitte Tax LLP's (Deloitte Tax) Tax Transformation Office (TTO) is pivotal to supporting Deloitte Tax client service delivery by optimizing end-to-end business processes and utilizing technology across all Tax offerings. This methodology improves efficiency in service delivery and encourages growth. The Senior Consultant - Technology Third Party Risk Management (TPRM) role offers an opportunity to be part of an innovative team within Deloitte Tax, focused on delivering value consistent with the Deloitte brand.
At Deloitte, we guide clients through the complex and evolving field of tax transformation. Through a broad suite of integrated tax services, we generate greater impact for clients. Our approach merges advanced technology and tax expertise to provide insights and smarter solutions, supporting clients to navigate a rapidly changing global environment.
Recruiting for this role ends on May 31, 2027
Work you'll doThe Senior Consultant - Technology Third Party Risk Management role in the Tax Transformation Office (TTO) requires hands-on understanding of professional services, models for third-party relationships, and relevant technologies. In this position, you will collaborate across different tax offerings, engaging with Business Leaders and professionals from multiple Risk Review teams. Key responsibilities include managing a portfolio of technology vendors, software platforms, and strategic alliance partners by supporting the creation of new third-party relationships as Deloitte Tax pursues strategic growth initiatives.
Responsibilities include:
- Leading end-to-end TPRM reviews - coordinating intake, managing due diligence documentation (such as security questionnaires and SOC reports), for both new and renewing vendors.
- Maintaining the vendor risk register and tracking dashboards - providing leadership with timely and accurate updates on current reviews, escalations, and remediation actions.
- Establishing a reputation as a primary point of contact for TPRM process questions - offering subject matter guidance to business sponsors, vendor managers, and other stakeholders throughout the review lifecycle.
- Partnering with Independence, Risk, Legal (OGC), Vendor Cyber, Confidentiality & Privacy, and Procurement teams - ensuring alignment on compliance requirements, identifying and resolving obstacles, and maintaining consistent application of policies and practices.
- Identifying process improvement opportunities within the TPRM lifecycle - driving efficiency gains through enhanced tooling, improved documentation standards, or workflow redesign.
- Supporting broader TTO Strategic Technology Services initiatives - contributing to third-party relationship strategy, vendor portfolio governance, and alliance program operations.
A successful candidate would possess these skills:
- Strong communicator with the ability to tailor messages for technical and non-technical audiences.
- Collaborative relationship builder who works effectively across functions and levels to drive alignment.
- Adaptable, self-directed problem solver who can manage shifting priorities and multiple workstreams.
- Confident facilitator who influences without authority and helps move issues to resolution.
The Team
Deloitte Tax LLP's Tax Transformation Office (TTO) is responsible for the design, development, and deployment of innovative, enterprise technology, tools, and standard processes to support the delivery of tax services. The TTO team focuses on enhancing Deloitte Tax LLP's ability to deliver comprehensive, value-added, and efficient tax services to our clients. The TTO Strategic Technology Services team is responsible for the enablement of standard technology to support Tax service delivery and developing technology to facilitate these services. TTO is focused on expanding Deloitte Tax capacity to deliver efficient, value-added Tax services to clients.
Qualifications
Required:
- Ability to perform job responsibilities within a hybrid work model that requires US Tax professionals to co-locate in person 2 - 3 days per week
- Bachelor's degree in Business Administration, Information Systems, Computer Science or other relevant discipline
- 3+ years' experience in transformation, consulting, strategic program delivery, or vendor/third-party management.
- Hands-on experience managing the TPRM or equivalent vendor risk lifecycle end-to-end - including due diligence, risk assessment, and stakeholder alignment.
- Demonstrated familiarity with risk and compliance frameworks - TPRM, SOC 2, or similar.
- Limited immigration sponsorship may be available.
- Ability to travel up to 10%, on average, based on the work you do and the clients and industries/sectors you serve
- One of the following active accreditations obtained:
- Licensed CPA in state of practice/primary office if eligible to sit for the CPA
- If not CPA eligible:
- Licensed Attorney
- Enrolled Agent
- CBAP - Certified Business Analysis Professional
- Certified in Risk and Information System Controls (CRISC)
- Microsoft Azure
- Project Management Professional (PMP)
Preferred:
- Experience in a tax, financial services, or professional services environment, with exposure to third-party risk, vendor management, or related compliance processes.
- Strong verbal and written communication skills, with the ability to tailor messages for both technical and non-technical audiences.
- Proven stakeholder management, listening, and facilitation skills, including the ability to build alignment across diverse teams and levels.
- Broad awareness of technology tools, platforms, and emerging capabilities, with the ability to assess practical fit to business needs.
- Experience supporting business process improvement, transformation, or technology-enabled change initiatives.
- Prior consulting or professional services experience, and/or relevant certifications such as PMP, CTPRM, or similar.
The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $93,000 to $191,000.
You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.About Deloitte
Sourced by ZipRecruiter
Industry
Finance and insurance and business management consulting
Company size
10,000+ Employees
Headquarters location
Orlando, FL, US