ZipRecruiter

Log In

1

Vendor Risk Jobs in North Carolina (NOW HIRING)

RedStream Technology

Risk Advisor

Charlotte, NC

The Risk Advisor also supports and helps drive our client's third-party risk management (TPRM) program, contributing to vendor risk assessments, escalations, and remediation across the vendor ...

NTT DATA, Inc.

Cyber Risk Consultant

Charlotte, NC · On-site

  • Medical

  • Dental

  • Vision

  • Life

  • Retirement

  • PTO

Assess third-party and vendor cybersecurity risks. * Identify security control requirements for external technology providers and recommend appropriate risk mitigation measures. Reporting ...

NTT DATA Services

Cyber Risk Consultant

Charlotte, NC

  • Medical

  • Dental

  • Vision

  • Life

  • Retirement

  • PTO

Assess third-party and vendor cybersecurity risks. * Identify security control requirements for external technology providers and recommend appropriate risk mitigation measures. Reporting ...

NTT DATA Services

Cyber Risk Consultant

Charlotte, NC

  • Medical

  • Dental

  • Vision

  • Life

  • Retirement

  • PTO

Assess third-party and vendor cybersecurity risks. * Identify security control requirements for external technology providers and recommend appropriate risk mitigation measures. Reporting ...

NTT DATA Services

Cyber Risk Consultant

Charlotte, NC · On-site

  • Medical

  • Dental

  • Vision

  • Life

  • Retirement

  • PTO

Assess third-party and vendor cybersecurity risks. * Identify security control requirements for external technology providers and recommend appropriate risk mitigation measures. Reporting ...

next page

Showing results 1-20

All JobsVendor Risk JobsVendor Risk Jobs in North Carolina

Vendor Risk information

What is the difference between Vendor Risk vs Vendor Compliance?

AspectVendor RiskVendor Compliance
FocusIdentifying and mitigating risks associated with vendorsEnsuring vendors meet regulatory and contractual requirements
CertificationsRisk management certifications (e.g., CRISC, FAIR)Compliance certifications (e.g., ISO 27001, SOC 2)
Work EnvironmentRisk assessment teams, procurement, security departmentsLegal, compliance, audit teams
Industry UsageFinancial, healthcare, technology sectorsFinancial services, healthcare, regulated industries

Vendor Risk and Vendor Compliance roles often overlap but serve different purposes. Vendor Risk focuses on identifying and mitigating potential risks posed by vendors, while Vendor Compliance ensures vendors adhere to legal and contractual standards. Both are essential for managing vendor relationships effectively and maintaining organizational security and compliance.

What are the most commonly searched types of Vendor Risk jobs in North Carolina?

The most popular types of Vendor Risk jobs in North Carolina are:

What cities in North Carolina are hiring for Vendor Risk jobs?

Cities in North Carolina with the most Vendor Risk job openings:

Vendor Risk jobs near you
Infographic showing various Vendor Risk job openings in North Carolina as of August 2026, with employment types broken down into 1% As Needed, 84% Full Time, 6% Part Time, 7% Temporary, and 2% Contract. Highlights an 87% Physical, 5% Hybrid, and 8% Remote job distribution.

Risk Advisor

RedStream Technology

Charlotte, NC

Full-time

Posted 21 days ago

Job description

Job Description Risk Advisor Hybrid, 3-days onsite (NYC or Charlotte office) Contract role Our client's Technology Governance, Risk & Compliance (GRC) organization is seeking a Risk Advisor to advise leadership on risk posture and tradeoffs and to lead enterprise risk assessments and treatment decisions across their business and technology functions. The Risk Advisor also supports and helps drive our client's third-party risk management (TPRM) program, contributing to vendor risk assessments, escalations, and remediation across the vendor lifecycle. Responsibilities: Advise leadership on enterprise risk posture, tradeoffs, and risk acceptance, with clear recommendations.

Identify systemic and emerging risks and influence prioritization and investment decisions. Lead risk assessments and gap assessments across business processes and technologies, from initiation through treatment planning. Own escalation of material risks, with recommendations for treatment or acceptance.

Maintain the enterprise risk register, keeping risks and response plans current. Track remediation and follow up to closure and SLA adherence. Integrate risk data into recurring reporting and metrics for leadership and risk-focused governance forums.

Support and help drive the third-party risk management program, contributing to vendor risk assessments across onboarding, reassessment, and renewal. Advise business owners and procurement on third-party risk decisions, and support escalation and remediation tracking for vendor risks. Contribute to TPRM process improvements and program maturity.

Requirements: Bachelor's degree in Information Technology, Computer Science, Information Systems, Cybersecurity, Business Administration, or a related discipline. (Equivalent experience may be considered in lieu of formal education) 7+ years in risk management, including risk leadership or advisory experience. Advanced understanding of enterprise risk management, with experience advising leadership on risk posture, tradeoffs, and acceptance.

Demonstrated experience with third-party/vendor risk assessments across the vendor lifecycle, and the ability to support and help drive a TPRM program. Strong executive communication skills, including clear risk documentation and reporting to leadership and governance forums. Working knowledge of security and risk frameworks such as NIST CSF, NIST 800-53, PCI-DSS, HIPAA, or SOC 2, applied to enterprise and third-party risk.

Familiarity with GRC and vendor risk platforms such as TruOps, Prevalent, OneTrust, ProcessUnity, or ServiceNow. Strong stakeholder management, with the ability to influence risk decisions without centralized authority. Identify opportunities to improve risk management scalability through analytics, automation, and AI.

(Preferred) CRISC, CISA, or PMI-RMP; CTPRP, CTPRA, CISM, or CISSP a plus. Experience building or maturing a third-party risk management program. Experience operating in federated, matrixed, or multi-business enterprise environments.

Familiarity with AI governance or emerging technology risk Experience supporting risk-focused governance forums or steering committees.

Apply