ZipRecruiter

Log In

1

Vendor Risk Management Jobs in Virginia (NOW HIRING)

Socket.dev

Financial Systems Manager

Arlington, VA · On-site

... Vendor Management, Risk Management. The Business Systems Analyst is a direct report to this position. Role Responsibilities: * Develop and continually refine a multi-year roadmap of future ...

Socket.dev

Senior IT Security Engineer

Chesapeake, VA · On-site

$97K - $132K/yr

Lead third-party vendor security risk management, directing vendor risk assessments, critical vendor classification, and ongoing monitoring of vendor compliance obligations. * Direct the security ...

Hirebridge

Risk Manager

Alexandria, VA · On-site

The right candidate will have 8-10 years of proven experience in construction risk management ... Communicate subcontractor and vendor insurance requirements to the third-party compliance vendor ...

PC Construction Company

Risk Manager

Alexandria, VA · On-site

The right candidate will have 8-10 years of proven experience in construction risk management ... Communicate subcontractor and vendor insurance requirements to the third-party compliance vendor ...

PC Construction Company

Risk Manager

Alexandria, VA · On-site

The right candidate will have 8-10 years of proven experience in construction risk management ... Communicate subcontractor and vendor insurance requirements to the third-party compliance vendor ...

INIT MENA

Senior IT Security Engineer

Chesapeake, VA

$92K - $126K/yr

... vendor security risk management, directing vendor risk assessments, critical vendor classification, and ongoing monitoring of vendor compliance obligations. • Direct the security awareness and ...

INIT MENA

Senior IT Security Engineer

Chesapeake, VA · On-site

$92K - $126K/yr

... vendor security risk management, directing vendor risk assessments, critical vendor classification, and ongoing monitoring of vendor compliance obligations. • Direct the security awareness and ...

previous pagenext page

Showing results 21-40

All JobsVendor Risk Management JobsVendor Risk Management Jobs in Virginia

Vendor Risk Management information

See Virginia salary details

$43.1K

$102.8K

$166.1K

How much do vendor risk management jobs pay per year?

As of Sep 15, 2026, the average yearly pay for vendor risk management in Virginia is $102,814.00, according to ZipRecruiter salary data. Most workers in this role earn between $71,900.00 and $130,900.00 per year, depending on experience, location, and employer.

What is vendor risk management?

A Vendor Risk Management (VRM) job involves assessing, monitoring, and mitigating risks associated with third-party vendors and suppliers. Professionals in this role evaluate vendor security, compliance, and operational risks to protect their organization from potential disruptions, data breaches, or regulatory violations. They work closely with procurement, legal, and IT teams to establish risk management frameworks and ensure vendors meet contractual and security standards. Their responsibilities often include conducting risk assessments, reviewing vendor contracts, and developing risk mitigation strategies. Effective VRM helps organizations reduce exposure to risks while maintaining productive vendor relationships.

What are some common challenges faced in vendor risk management?

Professionals in Vendor Risk Management often encounter the challenge of assessing and monitoring a wide range of vendors, each with unique risk profiles and compliance requirements. Balancing multiple projects, managing deadlines, and ensuring clear communication between internal stakeholders and vendors can also be demanding. Staying updated on evolving regulatory standards and quickly adapting to new risks is essential in this role. Overcoming these challenges requires strong organizational skills, continual learning, and proactive relationship management.

What are the key skills and qualifications needed to thrive in vendor risk management?

To thrive in Vendor Risk Management, you need a solid background in risk assessment, contract analysis, and supply chain management, often supported by a degree in business, finance, or a related field. Familiarity with risk management software, vendor management systems, and relevant certifications such as Certified Third Party Risk Professional (CTPRP) are highly valued. Strong attention to detail, excellent communication, and negotiation skills help build effective vendor relationships and navigate complex scenarios. These capabilities are crucial for ensuring organizational compliance, minimizing third-party risks, and maintaining strong supplier performance.

How to do vendor risk management?

Vendor risk management involves identifying, assessing, and mitigating risks associated with third-party vendors to ensure they meet security, compliance, and performance standards. It typically includes conducting due diligence, evaluating vendor controls, and monitoring ongoing performance using tools like risk assessment frameworks and audits. Strong communication and documentation are essential for effective management.

What does a vendor risk management do?

A vendor risk management professional assesses and monitors the risks associated with third-party vendors to ensure compliance, security, and operational integrity. They evaluate vendor security practices, contractual obligations, and potential vulnerabilities, often using risk assessment tools and frameworks to mitigate potential threats to the organization.

What are the most commonly searched types of Vendor Risk Management jobs in Virginia?

The most popular types of Vendor Risk Management jobs in Virginia are:

What are popular job titles related to Vendor Risk Management jobs in Virginia?

For Vendor Risk Management jobs in Virginia, the most frequently searched job titles are:

What job categories do people searching Vendor Risk Management jobs in Virginia look for?

The top searched job categories for Vendor Risk Management jobs in Virginia are:

What cities in Virginia are hiring for Vendor Risk Management jobs?

Cities in Virginia with the most Vendor Risk Management job openings:

Infographic showing various Vendor Risk Management job openings in Virginia as of September 2026, with employment types broken down into 1% As Needed, 81% Full Time, 14% Part Time, 3% Contract, and 1% Nights. Highlights an 82% Physical, 2% Hybrid, and 16% Remote job distribution, with an average salary of $102,814 per year, or $49.4 per hour.

Compliance Lead / SOC2 / ISO 27001 / hybrid onsite in Herndon, VA

Herndon, VA • Hybrid

Motion Recruitment
Recruiting and Staffing Services • 501 - 1,000 employees
Learn more about Motion Recruitmentexternal

$161K/yr

Full-time

Medical, Dental, Vision, Retirement, PTO

Posted 13 days ago

Key responsibilities

  • Lead and enhance cybersecurity and compliance initiatives.

  • Conduct risk assessments and remediation planning.

  • Manage third-party/vendor risk reviews.

Job description

A global leader in energy storage optimization is seeking a Cybersecurity & Compliance Lead to join its team in Herndon, VA (hybrid, 2-3 days onsite). This is a full-time leadership opportunity focused on building and maturing cybersecurity, compliance, and risk management capabilities across a rapidly growing, mission-driven technology organization.
This is a highly visible, hands-on role for a security professional who enjoys building programs rather than simply maintaining them. The successful candidate will own and evolve the organization's cybersecurity and compliance strategy, drive ISO 27001 and SOC 2 readiness efforts, strengthen vendor risk management processes, and guide incident response and risk assessment activities. With direct influence on business and security decisions, this position offers the opportunity to make a meaningful impact on critical energy infrastructure while helping accelerate the transition toward a more sustainable future. Required Skills & Experience
  • 7+ years of experience in cybersecurity, information security, governance, risk, and compliance (GRC), or related domains
  • Experience leading or managing cybersecurity and compliance programs in a hands-on capacity
  • Strong knowledge of ISO 27001, SOC 2, and security control frameworks
  • Experience conducting risk assessments and developing mitigation strategies
  • Vendor risk management and third-party security assessment experience
  • Expertise creating, implementing, and maintaining information security policies and standards
  • Experience developing and executing incident response processes and plans
  • Knowledge of security monitoring, control validation, and continuous compliance practices
  • Understanding of cloud security principles and modern IT infrastructure
  • Strong stakeholder management and communication skills
  • Ability to balance security requirements with operational and business objectives
  • Experience working in lean or fast-paced environments where ownership and execution are critical
Desired Skills & Experience
  • Experience in energy, utilities, critical infrastructure, industrial technology, or highly regulated environments
  • CISSP, CISM, CRISC, ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, or similar certifications
  • Familiarity with NIST CSF, NIST 800-53, or related security frameworks
  • Experience supporting customer security reviews and audit requests
  • Knowledge of OT/ICS security principles
  • Experience with vulnerability management and security tooling oversight
  • Background supporting SaaS platforms or cloud-native environments
  • Strong program-building and process-improvement experience
What You Will Be Doing Tech Breakdown
  • 35% Security Governance, Risk & Compliance (ISO 27001, SOC 2, Controls)
  • 25% Risk Management & Vendor Security Assessments
  • 15% Incident Response & Security Operations Oversight
  • 15% Policy Development & Security Program Maturation
  • 10% Strategic Security Planning & Stakeholder Engagement
Daily Responsibilities
  • 30% Lead and enhance cybersecurity and compliance initiatives
  • 20% Conduct risk assessments and remediation planning
  • 15% Manage third-party/vendor risk reviews
  • 15% Develop, maintain, and improve security policies and procedures
  • 10% Coordinate incident response readiness and security monitoring activities
  • 10% Partner with internal stakeholders to drive security improvements and compliance objectives
The Offer
  • High-impact leadership role with significant ownership and visibility
  • Opportunity to build and shape a cybersecurity program from the ground up
  • Direct involvement in protecting technology that supports renewable energy and critical infrastructure
  • Comprehensive benefits package including medical, dental, and vision coverage
  • 401(k) with company match
  • Paid vacation and holidays
  • Professional development and certification support
  • Opportunity to work alongside industry experts helping drive the future of sustainable energy and technology

#LI-CK2

Apply