The mission of Quality and Risk Management (QRM) is to manage the risk in our growing and ... Experience in negotiating and managing vendor contracts (buy-side) for third-party software ...
The mission of Quality and Risk Management (QRM) is to manage the risk in our growing and ... Experience in negotiating and managing vendor contracts (buy-side) for third-party software ...
IT Vendor Financials & Contract Manager
Houston, TX · On-site +1
Third-Party Risk Management (TPRM) * Service Level Management (SLM) * Contract Management Pro ... Experience managing vendor SLA compliance and SLO frameworks * Experience establishing or ...
IT Vendor Financials & Contract Manager
Houston, TX · On-site +1
Third-Party Risk Management (TPRM) * Service Level Management (SLM) * Contract Management Pro ... Experience managing vendor SLA compliance and SLO frameworks * Experience establishing or ...
... audit findings, vendor risk, and resilience needs, then connecting those priorities to RSM ... Forecast and manage the cyber and risk consulting pipeline, including opportunity sizing ...
... audit findings, vendor risk, and resilience needs, then connecting those priorities to RSM ... Forecast and manage the cyber and risk consulting pipeline, including opportunity sizing ...
Cybersecurity Governance Analyst
$43 - $46/hr
Experience conducting vendor risk assessments or third-party security reviews. * Familiarity with cybersecurity, privacy, AI governance, or risk management frameworks. * Experience in government ...
Quick apply
Cybersecurity Governance Analyst
$43 - $46/hr
Experience conducting vendor risk assessments or third-party security reviews. * Familiarity with cybersecurity, privacy, AI governance, or risk management frameworks. * Experience in government ...
Support vendor security assurance and third-party compliance assessments. Stakeholder Management Collaborate with Cybersecurity Architecture, IT, OT, Legal, Procurement, Risk, and business teams to ...
New
Support vendor security assurance and third-party compliance assessments. Stakeholder Management Collaborate with Cybersecurity Architecture, IT, OT, Legal, Procurement, Risk, and business teams to ...
New
Oversee global vendor governance and vendor risk management activities. * Support procurement and contract negotiations related to security services. * Ensure consistent security vendor compliance ...
Oversee global vendor governance and vendor risk management activities. * Support procurement and contract negotiations related to security services. * Ensure consistent security vendor compliance ...
Oversee global vendor governance and vendor risk management activities. * Support procurement and contract negotiations related to security services. * Ensure consistent security vendor compliance ...
Oversee global vendor governance and vendor risk management activities. * Support procurement and contract negotiations related to security services. * Ensure consistent security vendor compliance ...
In this dynamic role, you will lead and inspire a talented team to secure high-value goods and services, shape cost-saving strategies, and manage vendor risk with diligent oversight. Collaborate with ...
New
In this dynamic role, you will lead and inspire a talented team to secure high-value goods and services, shape cost-saving strategies, and manage vendor risk with diligent oversight. Collaborate with ...
New
Senior IT Category Manager
Houston, TX · On-site
Coordinate vendor risk assessments and develop plans to track and address significant risks ... Manage contracts and collaborate effectively with Corporate Compliance, Legal, Audit and Risk ...
Senior IT Category Manager
Houston, TX · On-site
Coordinate vendor risk assessments and develop plans to track and address significant risks ... Manage contracts and collaborate effectively with Corporate Compliance, Legal, Audit and Risk ...
Vendor Audit Specialist
Houston, TX · On-site
$55K - $75K/yr
Certified Risk Management Professional (CRMP) - Helps develop expertise in identifying, assessing, and mitigating risks, particularly in vendor management. * OSHA or Environmental Health & Safety ...
Quick apply
Vendor Audit Specialist
Houston, TX · On-site
$55K - $75K/yr
Certified Risk Management Professional (CRMP) - Helps develop expertise in identifying, assessing, and mitigating risks, particularly in vendor management. * OSHA or Environmental Health & Safety ...
Knowledge of vendor risk management practices and compliance frameworks Our Benefits: At Frost, we care about your health, your family, and your future and strive to have our benefits reflect that.
Knowledge of vendor risk management practices and compliance frameworks Our Benefits: At Frost, we care about your health, your family, and your future and strive to have our benefits reflect that.
Principal IT Vendor Manager
Houston, TX · On-site
$107K - $172K/yr
Manage the overall vendor relationship and governance for complex or high profile/critical IT ... vendor related risk to prevent operational and organizational disruption. * Facilitate formal ...
Principal IT Vendor Manager
Houston, TX · On-site
$107K - $172K/yr
Manage the overall vendor relationship and governance for complex or high profile/critical IT ... vendor related risk to prevent operational and organizational disruption. * Facilitate formal ...
... patch management governance, IAM hygiene, security monitoring, SaaS and integration security, cyberinsurance and vendor risk reporting, secure SDLC practices, PCI DSS support, and SOC 2 Type 2 ...
... patch management governance, IAM hygiene, security monitoring, SaaS and integration security, cyberinsurance and vendor risk reporting, secure SDLC practices, PCI DSS support, and SOC 2 Type 2 ...
... manage a remediation pipeline in coordination with IT and third-party vendors * Track remediation status, exceptions, and risk acceptance decisions with documented evidence for compliance and audit ...
... manage a remediation pipeline in coordination with IT and third-party vendors * Track remediation status, exceptions, and risk acceptance decisions with documented evidence for compliance and audit ...
... manage a remediation pipeline in coordination with IT and third-party vendors * Track remediation status, exceptions, and risk acceptance decisions with documented evidence for compliance and audit ...
Quick apply
... manage a remediation pipeline in coordination with IT and third-party vendors * Track remediation status, exceptions, and risk acceptance decisions with documented evidence for compliance and audit ...
... manage a remediation pipeline in coordination with IT and third-party vendors * Track remediation status, exceptions, and risk acceptance decisions with documented evidence for compliance and audit ...
... manage a remediation pipeline in coordination with IT and third-party vendors * Track remediation status, exceptions, and risk acceptance decisions with documented evidence for compliance and audit ...
... manage a remediation pipeline in coordination with IT and third-party vendors * Track remediation status, exceptions, and risk acceptance decisions with documented evidence for compliance and audit ...
Quick apply
... manage a remediation pipeline in coordination with IT and third-party vendors * Track remediation status, exceptions, and risk acceptance decisions with documented evidence for compliance and audit ...
Director of Risk Management Department: Risk Management Location: Houston or Dallas (Hybrid ... vendors, and operational leaders to ensure effective communication, timely claim progression, and ...
Director of Risk Management Department: Risk Management Location: Houston or Dallas (Hybrid ... vendors, and operational leaders to ensure effective communication, timely claim progression, and ...
Director of Risk Management
Seabrook, TX · On-site
Director of Risk Management Department: Risk Management Location: Houston or Dallas (Hybrid ... vendors, and operational leaders to ensure effective communication, timely claim progression, and ...
Director of Risk Management
Seabrook, TX · On-site
Director of Risk Management Department: Risk Management Location: Houston or Dallas (Hybrid ... vendors, and operational leaders to ensure effective communication, timely claim progression, and ...
Patient Enrollment Vendor Manager The Patient Enrollment Vendor Manager is the relationship manager ... ongoing risk management perspective Credentials: * N/A Knowledge and Skills: * Demonstrated ...
Patient Enrollment Vendor Manager The Patient Enrollment Vendor Manager is the relationship manager ... ongoing risk management perspective Credentials: * N/A Knowledge and Skills: * Demonstrated ...
Vendor Risk Manager information
See Houston, TX salary details
$49.2K - $59.4K
4% of jobs
$59.4K - $69.7K
6% of jobs
$69.7K - $80K
11% of jobs
$83.9K is the 25th percentile. Wages below this are outliers.
$80K - $90.3K
11% of jobs
The median wage is $98.5K / yr.
$90.3K - $100.6K
23% of jobs
$100.6K - $110.9K
13% of jobs
$117.6K is the 75th percentile. Wages above this are outliers.
$110.9K - $121.1K
12% of jobs
$121.1K - $131.4K
8% of jobs
$131.4K - $141.7K
6% of jobs
$141.7K - $152K
4% of jobs
$152K - $162.3K
2% of jobs
$49.2K
$106.5K
$162.3K
How much do vendor risk manager jobs pay per year?
As of Aug 9, 2026, the average yearly pay for vendor risk manager in Houston, TX is $106,483.00, according to ZipRecruiter salary data. Most workers in this role earn between $85,900.00 and $123,100.00 per year, depending on experience, location, and employer.
What is the difference between Vendor Risk Manager vs Vendor Compliance Analyst?
| Aspect | Vendor Risk Manager | Vendor Compliance Analyst |
|---|---|---|
| Certifications | Certified Third Party Risk Professional (CTPRP), Certified Information Systems Auditor (CISA) | Certified Compliance & Ethics Professional (CCEP), Certified Regulatory Compliance Manager (CRCM) |
| Work Environment | Risk management teams, procurement, legal departments | Compliance departments, audit teams, legal units |
| Industry Usage | Finance, healthcare, technology, retail | Finance, healthcare, manufacturing, technology |
| Primary Focus | Identifying, assessing, and mitigating vendor risks | Ensuring vendor adherence to compliance standards and policies |
The Vendor Risk Manager focuses on evaluating and mitigating risks associated with vendors, while the Vendor Compliance Analyst concentrates on ensuring vendors meet regulatory and internal compliance standards. Both roles are essential in managing vendor relationships but differ in their core responsibilities and focus areas.
How does a vendor risk manager typically collaborate with other departments within an organization?
A Vendor Risk Manager works closely with departments like procurement, legal, IT, and compliance to ensure that vendors meet the organization's security and regulatory standards. This collaboration often involves reviewing contracts, assessing potential risks, and implementing mitigation strategies. Regular communication with stakeholders is essential to keep everyone informed about vendor performance and risk status, making cross-functional teamwork a key aspect of the role. Effective collaboration helps streamline risk assessments and supports informed decision-making across the business.
What are the key skills and qualifications needed to thrive as a vendor risk manager?
To thrive as a Vendor Risk Manager, you need expertise in risk assessment, third-party management, and compliance, often backed by a degree in business, finance, or a related field. Familiarity with risk management platforms, contract management tools, and certifications like Certified Third Party Risk Professional (CTPRP) are highly valuable. Strong analytical thinking, negotiation, and clear communication skills help you collaborate with vendors and internal stakeholders effectively. These skills ensure organizations can identify, mitigate, and manage risks arising from third-party relationships, safeguarding business continuity and compliance.
What is a vendor risk manager?
Vendor Risk Managers are professionals responsible for identifying, assessing, and mitigating risks associated with third-party vendors that provide goods or services to an organization. They evaluate vendors’ security, compliance, and operational practices to ensure they meet the company’s standards and regulatory requirements. These managers implement frameworks to monitor vendor performance, manage contracts, and respond to potential risks or incidents. Their role is crucial in protecting the organization from financial, reputational, and regulatory harm that can arise from third-party relationships.
What cities near Houston, TX are hiring for Vendor Risk Manager jobs? Cities near Houston, TX with the most Vendor Risk Manager job openings:
Full-time
Posted 18 days ago
Deloitte rating
8.2
Based on 92 frontline employees who took The Breakroom Quiz
45th of 150 rated financial services
Job description
The Team: The mission of Quality and Risk Management (QRM) is to manage the risk in our growing and increasingly complex business to improve financial performance and protect the firm's assets and reputation.
Work you'll do
Deloitte's Cyber QRM team is seeking a Quality & Risk Manager who will be responsible for supporting Cyber quality and risk management activities across the Cyber Offering Portfolio and Market Offerings. Candidates must have extensive experience in delivering and/or contracting for consulting services and related agreements.
Recruiting for this role ends on 08/28/2026.
Key job responsibilities include:
Guidance and Support to Senior Business Leaders within the Firm
- Serves as liaison between firm leadership and the Office of General Counsel and others (National Risk, National Office of Independence, etc.).
- Is responsible for advising practice leadership on potential quality and risk management issues within the Cyber Offering Portfolio that includes Cyber Strategy & Transformation, Cyber Defense & Resilience, Digital Trust & Privacy, Enterprise Security, and Cyber Operate services.
- Provides guidance to engagement leaders and teams on risk mitigation strategies, contract formation, contract terms, and contract management for Cyber services.
- Facilitates internal compliance with contract terms, risk management policies and procedures, and management directives for Cyber services.
- Comfortable in facilitating risk management training to business leaders / business teams when called upon to do so for Cyber services.
Proposals for Cyber Services
- Performs proposal reviews for Cyber opportunities.
- Consults with firm Partners, Principals, Managing Directors, and engagement teams on Requests for Proposals (RFPs), Teaming Agreements, and Non-Disclosure Agreements.
- Conducts Risk Consultations as needed.
- Helps interpret contract requirements and obligations and provides guidance to engagement teams.
- Facilitates early coordination with Office of General Counsel on RFPs where applicable.
Contract Negotiation for Cyber Services
- Involved in the negotiation of professional services contracts with a primary focus on reducing and mitigating delivery and contractual risks associated with the services being provided.
- Facilitates the coordination of Office of General Counsel, the business, and clients (where applicable) on contract negotiations.
- Professional services contracts include Master Services Agreements, Managed Services Agreements, Subscription License Agreements, Statements of Work, Engagement Letters, Change Orders, Subcontractor Agreements, Teaming Agreements, Non-Disclosure Agreements, independence consultations, and other similar or related agreements.
Contract Management for Cyber Services
- Reviews services contracts (in particular Statements of Work, Engagement Letters, and Change Orders) and provides revisions oriented to mitigating and containing risk aligned with Deloitte policies and procedures and management guidance.
- Available to consult and help interpret requirements of the contract as aligned to the Cyber services as well as associated Master Services Agreements and Managed Services Agreements, where applicable.
- Analyzes and assesses potential impacts associated with contract delivery risks aligned to the Cyber services.
- Where applicable, assists business leadership with contract template development and review to help expedite future risk reviews.
- Provides guidance to reduce in flight project risks, adjusts contract requirements to accommodate changing project circumstances, and manages stakeholder expectations to contractual obligations and agreed upon performance standards.
A successful candidate will possess these skills:
- Significant experience in negotiating various consulting agreements as identified above.
- Significant experience in advising business teams on developing agreements and contracts
- Significant experience evaluating and assessing Cyber engagements across the Cyber Market Offerings
- Experience in negotiating and managing vendor contracts (buy-side) for third-party software providers, including reseller agreements
- Understanding of the different types of sensitive data (PII, PHI, etc.), the associated risk profile of handling each type of data, and the appropriate risk mitigation strategies to be employed
- Ability to evaluate risks associated with large professional service engagements
- Experience advising engagement teams on risk matters
- Experience in Request for Proposal analysis, including contract terms and conditions
- Experience and ability to work directly with senior level individuals (internally and externally)
- Strong oral and written communication skills
- Ability to work autonomously and handle a fast paced, multi-task environment
- Experience structuring and negotiating license agreements for a software business
Qualifications
Required:
- Experience: 15+ years of Client Service delivery, direct contract negotiation, and/or relevant management experience
- Education: BBA/BA/BS in related field
- Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.
Preferred:
- Education: Master's Degree is desirable
The wage range for this roletakes into accountthe wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $155,600-306,800.
You may also be eligible toparticipatein a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends onvarious factors, including, without limitation, individual and organizational performance.
Qualifications:The Team: The mission of Quality and Risk Management (QRM) is to manage the risk in our growing and increasingly complex business to improve financial performance and protect the firm's assets and reputation.
Work you'll do
Deloitte's Cyber QRM team is seeking a Quality & Risk Manager who will be responsible for supporting Cyber quality and risk management activities across the Cyber Offering Portfolio and Market Offerings. Candidates must have extensive experience in delivering and/or contracting for consulting services and related agreements.
Recruiting for this role ends on 08/28/2026.
Key job responsibilities include:
Guidance and Support to Senior Business Leaders within the Firm
- Serves as liaison between firm leadership and the Office of General Counsel and others (National Risk, National Office of Independence, etc.).
- Is responsible for advising practice leadership on potential quality and risk management issues within the Cyber Offering Portfolio that includes Cyber Strategy & Transformation, Cyber Defense & Resilience, Digital Trust & Privacy, Enterprise Security, and Cyber Operate services.
- Provides guidance to engagement leaders and teams on risk mitigation strategies, contract formation, contract terms, and contract management for Cyber services.
- Facilitates internal compliance with contract terms, risk management policies and procedures, and management directives for Cyber services.
- Comfortable in facilitating risk management training to business leaders / business teams when called upon to do so for Cyber services.
Proposals for Cyber Services
- Performs proposal reviews for Cyber opportunities.
- Consults with firm Partners, Principals, Managing Directors, and engagement teams on Requests for Proposals (RFPs), Teaming Agreements, and Non-Disclosure Agreements.
- Conducts Risk Consultations as needed.
- Helps interpret contract requirements and obligations and provides guidance to engagement teams.
- Facilitates early coordination with Office of General Counsel on RFPs where applicable.
Contract Negotiation for Cyber Services
- Involved in the negotiation of professional services contracts with a primary focus on reducing and mitigating delivery and contractual risks associated with the services being provided.
- Facilitates the coordination of Office of General Counsel, the business, and clients (where applicable) on contract negotiations.
- Professional services contracts include Master Services Agreements, Managed Services Agreements, Subscription License Agreements, Statements of Work, Engagement Letters, Change Orders, Subcontractor Agreements, Teaming Agreements, Non-Disclosure Agreements, independence consultations, and other similar or related agreements.
Contract Management for Cyber Services
- Reviews services contracts (in particular Statements of Work, Engagement Letters, and Change Orders) and provides revisions oriented to mitigating and containing risk aligned with Deloitte policies and procedures and management guidance.
- Available to consult and help interpret requirements of the contract as aligned to the Cyber services as well as associated Master Services Agreements and Managed Services Agreements, where applicable.
- Analyzes and assesses potential impacts associated with contract delivery risks aligned to the Cyber services.
- Where applicable, assists business leadership with contract template development and review to help expedite future risk reviews.
- Provides guidance to reduce in flight project risks, adjusts contract requirements to accommodate changing project circumstances, and manages stakeholder expectations to contractual obligations and agreed upon performance standards.
A successful candidate will possess these skills:
- Significant experience in negotiating various consulting agreements as identified above.
- Significant experience in advising business teams on developing agreements and contracts
- Significant experience evaluating and assessing Cyber engagements across the Cyber Market Offerings
- Experience in negotiating and managing vendor contracts (buy-side) for third-party software providers, including reseller agreements
- Understanding of the different types of sensitive data (PII, PHI, etc.), the associated risk profile of handling each type of data, and the appropriate risk mitigation strategies to be employed
- Ability to evaluate risks associated with large professional service engagements
- Experience advising engagement teams on risk matters
- Experience in Request for Proposal analysis, including contract terms and conditions
- Experience and ability to work directly with senior level individuals (internally and externally)
- Strong oral and written communication skills
- Ability to work autonomously and handle a fast paced, multi-task environment
- Experience structuring and negotiating license agreements for a software business
Qualifications
Required:
- Experience: 15+ years of Client Service delivery, direct contract negotiation, and/or relevant management experience
- Education: BBA/BA/BS in related field
- Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.
Preferred:
- Education: Master's Degree is desirable
The wage range for this roletakes into accountthe wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $155,600-306,800.
You may also be eligible toparticipatein a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends onvarious factors, including, without limitation, individual and organizational performance.
Education:Bachelor's DegreeEmployment Type: