1

Vendor Risk Manager Jobs in Houston, TX (NOW HIRING)

Manage third-party/vendor risk and ensure strong external security practices Expertise & Leadership Capabilities * Deep knowledge of healthcare regulations (HIPAA, HITECH) and security frameworks ...

... risk. Vendor Relationship Management * Familiarity with post-contract management practices to ... enforce terms and monitor vendor performance. * Develop and maintain a best in class global ...

Risk Coordinator

Sugar Land, TX · On-site

$40K - $55K/yr

... in risk management, insurance, or claims. Key Responsibilities - Support claims intake ... vendor - Reconcile driver eligibility lists and maintain compliance tracking Qualifications ...

Showing results 41-60

Vendor Risk Manager information

See Houston, TX salary details

$49.2K

$106.5K

$162.3K

How much do vendor risk manager jobs pay per year?

As of Aug 10, 2026, the average yearly pay for vendor risk manager in Houston, TX is $106,483.00, according to ZipRecruiter salary data. Most workers in this role earn between $85,900.00 and $123,100.00 per year, depending on experience, location, and employer.

What is the difference between Vendor Risk Manager vs Vendor Compliance Analyst?

AspectVendor Risk ManagerVendor Compliance Analyst
CertificationsCertified Third Party Risk Professional (CTPRP), Certified Information Systems Auditor (CISA)Certified Compliance & Ethics Professional (CCEP), Certified Regulatory Compliance Manager (CRCM)
Work EnvironmentRisk management teams, procurement, legal departmentsCompliance departments, audit teams, legal units
Industry UsageFinance, healthcare, technology, retailFinance, healthcare, manufacturing, technology
Primary FocusIdentifying, assessing, and mitigating vendor risksEnsuring vendor adherence to compliance standards and policies

The Vendor Risk Manager focuses on evaluating and mitigating risks associated with vendors, while the Vendor Compliance Analyst concentrates on ensuring vendors meet regulatory and internal compliance standards. Both roles are essential in managing vendor relationships but differ in their core responsibilities and focus areas.

How does a vendor risk manager typically collaborate with other departments within an organization?

A Vendor Risk Manager works closely with departments like procurement, legal, IT, and compliance to ensure that vendors meet the organization's security and regulatory standards. This collaboration often involves reviewing contracts, assessing potential risks, and implementing mitigation strategies. Regular communication with stakeholders is essential to keep everyone informed about vendor performance and risk status, making cross-functional teamwork a key aspect of the role. Effective collaboration helps streamline risk assessments and supports informed decision-making across the business.

What are the key skills and qualifications needed to thrive as a vendor risk manager?

To thrive as a Vendor Risk Manager, you need expertise in risk assessment, third-party management, and compliance, often backed by a degree in business, finance, or a related field. Familiarity with risk management platforms, contract management tools, and certifications like Certified Third Party Risk Professional (CTPRP) are highly valuable. Strong analytical thinking, negotiation, and clear communication skills help you collaborate with vendors and internal stakeholders effectively. These skills ensure organizations can identify, mitigate, and manage risks arising from third-party relationships, safeguarding business continuity and compliance.

What is a vendor risk manager?

Vendor Risk Managers are professionals responsible for identifying, assessing, and mitigating risks associated with third-party vendors that provide goods or services to an organization. They evaluate vendors’ security, compliance, and operational practices to ensure they meet the company’s standards and regulatory requirements. These managers implement frameworks to monitor vendor performance, manage contracts, and respond to potential risks or incidents. Their role is crucial in protecting the organization from financial, reputational, and regulatory harm that can arise from third-party relationships.
What cities near Houston, TX are hiring for Vendor Risk Manager jobs? Cities near Houston, TX with the most Vendor Risk Manager job openings:
Infographic showing various Vendor Risk Manager job openings in Houston, TX as of August 2026, with employment types broken down into 100% Full Time. Highlights an 100% In-person job distribution, with an average salary of $106,483 per year, or $51.2 per hour.

Chief Information Security Officer

Socket.dev

Houston, TX • On-site

$150 - $200/hr

Other

Posted 7 days ago


Job description

Chief Information Security Officer

At Texas Children's Hospital, our mission starts with our people. Guided by our HEART values Humility, Excellence, Accountability, Respect, and Trust we strive to create a workplace where teammates feel valued, supported, and empowered to do their best work every day.

The Chief Information Security Officer is a strategic leader responsible for designing, implementing, and advancing a comprehensive cybersecurity program that safeguards sensitive health information and critical systems across the Texas Children's enterprise. This role partners closely with executive leadership to align security initiatives with organizational priorities, ensuring regulatory compliance, strengthening risk management, and fostering a culture of security awareness in support of delivering exceptional care.

What You'll Do:

Lead Enterprise Security Strategy

  • Define and execute a forward-looking information security strategy aligned with organizational and clinical priorities
  • Establish scalable, enterprise-wide security frameworks, policies, and standards
  • Partner with executive leadership to integrate cybersecurity into broader business and technology strategies

Protect Critical Systems & Data

  • Safeguard the confidentiality, integrity, and availability of ePHI and other sensitive data across the organization
  • Identify, assess, and mitigate cybersecurity risks in a complex healthcare environment
  • Strengthen defenses against evolving threats through proactive monitoring and continuous improvement

Drive Compliance & Governance

  • Ensure compliance with HIPAA, HITECH, and applicable federal and state regulations
  • Align security practices with industry standards such as NIST and ISO frameworks
  • Lead audit readiness efforts and support regulatory and accreditation requirements, including Joint Commission standards

Lead Incident Response & Risk Management

  • Oversee incident response capabilities, including detection, investigation, containment, and recovery
  • Develop and maintain robust risk management and remediation strategies
  • Provide clear, timely communication and reporting during security events

Advance Security Through Technology & Innovation

  • Partner with IT to embed security across infrastructure, applications, and digital health technologies
  • Oversee security practices related to cloud environments, identity and access management, and data protection
  • Ensure secure integration of EHR systems and medical devices

Build a Culture of Security Awareness

  • Champion security awareness and training programs for teammates and clinical staff
  • Promote a culture of accountability and shared responsibility for protecting patient and organizational data

Lead & Develop High-Performing Teams

  • Build, mentor, and lead a high-performing information security team
  • Establish clear goals, performance expectations, and professional development pathways
  • Foster collaboration across teams to drive security maturity and operational excellence

Provide Strategic Insight to Leadership

  • Deliver regular security updates, risk assessments, and actionable insights to executive leadership and the board
  • Translate complex technical risks into clear business impact and strategic recommendations

Strengthen Enterprise Partnerships

  • Collaborate with IT, Compliance, Legal, Risk, and operational leaders to embed security across all functions
  • Manage third-party/vendor risk and ensure strong external security practices

Expertise & Leadership Capabilities

  • Deep knowledge of healthcare regulations (HIPAA, HITECH) and security frameworks (NIST, ISO/IEC 27001)
  • Experience in risk assessment, incident response, and security operations in complex environments
  • Strong understanding of EHR systems, medical device security, and healthcare technologies
  • Expertise in cloud security, identity & access management, and data protection strategies
  • Experience managing third-party/vendor security risk

What You'll Bring:

Qualifications:

  • 10+ years of progressive experience in information security (Required)
  • 5+ years of leadership or management experience (Required)
  • 3+ years of experience in a healthcare environment (Preferred)

Education

  • Bachelor's degree in information security, Computer Science, Information Technology, or related field (required)
  • Master's degree (preferred)

Preferred Certifications

  • CISSP Certified Information Systems Security Professional
  • CISM Certified Information Security Manager
  • HCISPP Healthcare Information Security and Privacy Practitioner
#J-18808-Ljbffr