ZipRecruiter

Log In

1

Vendor Risk Manager Jobs in Pennsylvania (NOW HIRING)

County of Delaware, PA

Risk Manager

Media, PA · On-site

$75K - $98K/yr

The Risk Manager ensures compliance with applicable federal, Commonwealth of Pennsylvania, and ... Strong vendor management skills. * Ability to review and interpret legal contracts and insurance ...

County of Delaware

Risk Manager

Media, PA

$75K - $98K/yr

The Risk Manager ensures compliance with applicable federal, Commonwealth of Pennsylvania, and ... Strong vendor management skills. Ability to review and interpret legal contracts and insurance ...

Alcoa

Cyber Security Risk Analyst

New Kensington, PA

Experience withthird-party/vendor risk management, regulatory compliance assessments, and security awareness programs. * Experience supporting global environments and contributing to enterprise-wide ...

Alcoa

Cyber Security Risk Analyst

Pittsburgh, PA

Experience withthird-party/vendor risk management, regulatory compliance assessments, and security awareness programs. * Experience supporting global environments and contributing to enterprise-wide ...

next page

Showing results 1-20

All JobsVendor Risk JobsVendor Risk Manager JobsVendor Risk Manager Jobs in Pennsylvania

Vendor Risk Manager information

See Pennsylvania salary details

$51.6K

$111.8K

$170.4K

How much do vendor risk manager jobs pay per year?

As of Jul 29, 2026, the average yearly pay for vendor risk manager in Pennsylvania is $111,824.00, according to ZipRecruiter salary data. Most workers in this role earn between $90,200.00 and $129,300.00 per year, depending on experience, location, and employer.

What is the difference between Vendor Risk Manager vs Vendor Compliance Analyst?

AspectVendor Risk ManagerVendor Compliance Analyst
CertificationsCertified Third Party Risk Professional (CTPRP), Certified Information Systems Auditor (CISA)Certified Compliance & Ethics Professional (CCEP), Certified Regulatory Compliance Manager (CRCM)
Work EnvironmentRisk management teams, procurement, legal departmentsCompliance departments, audit teams, legal units
Industry UsageFinance, healthcare, technology, retailFinance, healthcare, manufacturing, technology
Primary FocusIdentifying, assessing, and mitigating vendor risksEnsuring vendor adherence to compliance standards and policies

The Vendor Risk Manager focuses on evaluating and mitigating risks associated with vendors, while the Vendor Compliance Analyst concentrates on ensuring vendors meet regulatory and internal compliance standards. Both roles are essential in managing vendor relationships but differ in their core responsibilities and focus areas.

How does a Vendor Risk Manager typically collaborate with other departments within an organization?

A Vendor Risk Manager works closely with departments like procurement, legal, IT, and compliance to ensure that vendors meet the organization's security and regulatory standards. This collaboration often involves reviewing contracts, assessing potential risks, and implementing mitigation strategies. Regular communication with stakeholders is essential to keep everyone informed about vendor performance and risk status, making cross-functional teamwork a key aspect of the role. Effective collaboration helps streamline risk assessments and supports informed decision-making across the business.

What are the key skills and qualifications needed to thrive as a Vendor Risk Manager, and why are they important?

To thrive as a Vendor Risk Manager, you need expertise in risk assessment, third-party management, and compliance, often backed by a degree in business, finance, or a related field. Familiarity with risk management platforms, contract management tools, and certifications like Certified Third Party Risk Professional (CTPRP) are highly valuable. Strong analytical thinking, negotiation, and clear communication skills help you collaborate with vendors and internal stakeholders effectively. These skills ensure organizations can identify, mitigate, and manage risks arising from third-party relationships, safeguarding business continuity and compliance.

What are Vendor Risk Managers?

Vendor Risk Managers are professionals responsible for identifying, assessing, and mitigating risks associated with third-party vendors that provide goods or services to an organization. They evaluate vendors’ security, compliance, and operational practices to ensure they meet the company’s standards and regulatory requirements. These managers implement frameworks to monitor vendor performance, manage contracts, and respond to potential risks or incidents. Their role is crucial in protecting the organization from financial, reputational, and regulatory harm that can arise from third-party relationships.
What cities in Pennsylvania are hiring for Vendor Risk Manager jobs? Cities in Pennsylvania with the most Vendor Risk Manager job openings:
Vendor Risk Manager jobs near you
Infographic showing various Vendor Risk Manager job openings in Pennsylvania as of July 2026, with employment types broken down into 96% Full Time, 2% Part Time, and 2% Contract. Highlights an 82% In-person, 9% Hybrid, and 9% Remote job distribution, with an average salary of $111,824 per year, or $53.8 per hour.
Vendor Governance Analyst (Third-Party Risk Management)

Vendor Governance Analyst (Third-Party Risk Management)

The Institutes

Malvern, PA • On-site

Full-time

Medical, Dental, Vision, Retirement, PTO

Posted 3 days ago

Job description

About The Institutes
Located in beautiful Malvern, Pennsylvania, The Institutes® are a not-for-profit comprised of diverse affiliates that educate, elevate, and connect people in the essential disciplines of risk management and insurance. Through products and services offered by our nearly 20 affiliated business units, people and organizations are empowered to help those in need with a focus on understanding, predicting, and preventing losses to create a more resilient world.
Additionally, we understand the importance of work-life balance-in 2025 Philly.com named us a Top Workplace for the tenth year and USA Today named us a USA Top Workplace for the fourth year. We provide excellent benefits and a friendly, team-focused work environment to drive employee engagement.
Vendor Governance AnalystThe Vendor Governance Analyst supports The Institutes' vendor governance and third-party risk management (TPRM) program day to day. This role handles vendor lifecycle administration, third-party and AI-related risk intake and assessment, contract and renewal tracking, and SaaS/portfolio data, applying the frameworks, scoring criteria, and standards set by IT leadership. The role makes heavy use of AI and LLM tools to research vendors, analyze risk and spend, and prepare clear, well-organized reporting. It partners with Security, Legal, Procurement, IT, and Application Development to keep vendor and AI risk visible, documented, and current.
What You'll Do:
Vendor Governance & Lifecycle Administration
  • Maintain the contract repository and renewal calendar.
  • Coordinate renewals with Legal and Procurement.
  • Maintain vendor tier classifications and risk profiles using the established tiering framework.
  • Track remediation items and follow up with vendors.
  • Distribute, collect, and organize security questionnaires.
  • Collect and review SOC reports, cyber insurance documentation, and compliance artifacts.
  • Research vendor markets for trends, risks, and current events, and raise risks as needed.
  • Identify continuous-improvement opportunities and flag them.

AI & Third-Party Risk Analysis
  • Conduct AI-focused vendor risk assessments - covering model usage, training-data sources, and data-retention practices - using the established assessment criteria.
  • Apply the AI risk-scoring methodology to evaluate vendor AI posture and document findings.
  • Assess AI model risk exposure (bias, explainability, and regulatory considerations) and record results.
  • Support Security in identifying and flagging Shadow AI usage across the organization.
  • Track vendor data-exposure risk and data-sharing pathways.
  • Maintain vendor and AI-governance records in OneTrust (or equivalent TPRM platform).

Contract & Data Governance Support
  • Review AI- and data-related contract clauses and flag items for Legal, including data ownership, data residency, model-training rights, subprocessor disclosures, and AI indemnification/liability language.
  • Support Legal in applying AI and data-protection contractual standards.
  • Support contractual reviews of AI/data usage during vendor onboarding and renewals.

Technology Portfolio & SaaS Tracking
  • Maintain the enterprise SaaS inventory and technology portfolio map.
  • Analyze license utilization and identify consolidation opportunities.
  • Surface redundant platforms and overlapping AI tool capabilities to the Manager.
  • Prepare cost-and-risk optimization options for the Manager's review.

Reporting & Analytics
  • Maintain vendor risk dashboards and AI-posture reporting.
  • Prepare reporting for the Manager and stakeholders on AI vendor exposure, data-risk trends, model-risk concentration, and SaaS redundancy and cost.
  • Flag recurring risk patterns across vendor categories.

What We're Looking For:
Required
  • 3+ years of experience in vendor management, third-party risk, IT governance, compliance, procurement, or operations.
  • Comfortable using AI/LLM tools (e.g., Claude, Microsoft Copilot) as a daily part of research, analysis, and documentation.
  • Able to use AI tools effectively to manage the volume of vendor research and analysis the role requires.
  • Experience reviewing vendor contracts and tracking renewals.
  • Exposure to third-party risk assessments and security-questionnaire processes.
  • Strong analytical and documentation skills.
  • Highly curious, with a drive to improve the customer experience and risk-management processes.
  • Experience maintaining SaaS inventories or technology portfolios.
  • Proficiency in Excel and vendor management platforms.

Preferred
  • Experience supporting SOC 2, ISO 27001, or similar audits.
  • Familiarity with OneTrust or TPRM platforms.
  • Exposure to AI governance, data risk management, or emerging technology risk.
  • Understanding of AI model risk principles (bias, explainability, regulatory impact).

Ability to be on-site 5 days a week is a must. The need for extended hours may be required to support meetings/events.
Required Competencies
  • Analytical, risk-based thinking
  • Strong organization and follow-through
  • AI and data-governance awareness
  • Effective use of AI/LLM tools for research, analysis, and documentation
  • Cross-functional collaboration
  • Process-improvement mindset
  • Clear, well-organized reporting
  • Commitment to The Institutes' cultural values: Put the Customer First, Do What You Say, Work Together, Be Innovative, and Do the Right Thing.

The Best Part? The Benefits!
To enforce the importance of work-life balance, employees enjoy excellent benefits, including:
  • 401(k) plan with company contribution up to 16%
  • Generous time off package that includes paid vacation, personal, sick, and holidays
  • Paid maternity and parental leave
  • Tuition reimbursement
  • Medical, dental, vision, and prescription coverage
  • On our Malvern campus: Free lunch every day when working on campus, onsite fitness center, and a beautiful 1.25-mile walking path!

Equal Opportunity Employer
This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.

Apply