ZipRecruiter

Log In

1

Vendor Risk Jobs in Vienna, VA (NOW HIRING)

SC&H Group

Risk Senior Manager

Tysons Corner, VA

  • Medical

  • Retirement

  • PTO

Strong understanding of security and IT risk domains (identity and access, change/configuration, secure engineering, vendor risk, cloud controls, incident response, logging/monitoring, data ...

Freddie Mac

IT Risk Technical Lead

Mclean, VA · On-site

$136 - $204/hr

Coordinate and manage third‑party vendor risk governance activities, including vendor SOC and Enhanced Information Risk Review * Lead AI Clearinghouse operations and strategic initiatives ...

Freddie Mac

IT Risk Technical Lead

Mclean, VA

Coordinate and manage third-party vendor risk governance activities, including vendor SOC and Enhanced Information Risk Review * Lead AI Clearinghouse operations and strategic initiatives, including ...

finnegan

Vendor Management Analyst

Washington, DC · Hybrid

$75K - $95K/yr

Risk, Compliance & Governance * Assist with vendor due diligence and risk assessments, including collection and validation of required documentation. * Support compliance with firm policies ...

previous pagenext page

Showing results 21-40

All JobsVendor Risk JobsVendor Risk Jobs in Vienna, VA

Vendor Risk information

See Vienna, VA salary details

$14

$30

$74

How much do vendor risk jobs pay per hour?

As of Aug 19, 2026, the average hourly pay for vendor risk in Vienna, VA is $30.45, according to ZipRecruiter salary data. Most workers in this role earn between $19.52 and $38.85 per hour, depending on experience, location, and employer.

What is the difference between Vendor Risk vs Vendor Compliance?

AspectVendor RiskVendor Compliance
FocusIdentifying and mitigating risks associated with vendorsEnsuring vendors meet regulatory and contractual requirements
CertificationsRisk management certifications (e.g., CRISC, FAIR)Compliance certifications (e.g., ISO 27001, SOC 2)
Work EnvironmentRisk assessment teams, procurement, security departmentsLegal, compliance, audit teams
Industry UsageFinancial, healthcare, technology sectorsFinancial services, healthcare, regulated industries

Vendor Risk and Vendor Compliance roles often overlap but serve different purposes. Vendor Risk focuses on identifying and mitigating potential risks posed by vendors, while Vendor Compliance ensures vendors adhere to legal and contractual standards. Both are essential for managing vendor relationships effectively and maintaining organizational security and compliance.

What cities near Vienna, VA are hiring for Vendor Risk jobs?

Cities near Vienna, VA with the most Vendor Risk job openings:

Vendor Risk jobs near you
Infographic showing various Vendor Risk job openings in Vienna, VA as of August 2026, with employment types broken down into 1% As Needed, 85% Full Time, 11% Part Time, and 3% Contract. Highlights an 86% Physical, 5% Hybrid, and 9% Remote job distribution, with an average salary of $63,333 per year, or $30.4 per hour.

Supply Chain Risk Management (SCRM) Lead

ZTI Solutions, LLC

Falls Church, VA • On-site

$180K - $210K/yr

Full-time

Medical, Dental, Vision, Retirement, PTO

Re-posted yesterday

Job description

Supply Chain Risk Management (SCRM) Lead
Falls Church, Virginia
Full-time
Important Notice: This position is contingent upon contract award.
Summary:
SCRM Leads develop and implement supply chain risk management programs assessing and mitigating risks from third-party vendors, commercial software, and supply chain dependencies. This role coordinates vendor security assessments, establishes SCRM policies, and interfaces with contracting and acquisition teams on security requirements.
Key Responsibilities:
  • Develop comprehensive supply chain risk management program.
  • Manage 30-80 third-party vendor relationships requiring security assessment.
  • Conduct 20-40 vendor security assessments annually.
  • Review 50-150 commercial software products for supply chain risk.
  • Analyze software composition and third-party dependencies.
  • Interface with contracting and acquisition teams on security requirements.
  • Develop 5-15 SCRM policies and procedures.
  • Monitor vendor security posture for changes and incidents.

Performance Metrics:
  • Vendors Managed: 30-80 requiring assessment per network.
  • Annual Assessments: 20-40 vendor security evaluations.
  • Software Reviews: 50-150 commercial products assessed.
  • SCRM Policies: 5-15 procedures developed and maintained.
  • Quarterly Reports: SCRM metrics and risk reporting.

Requirements:
  • Clearance: Secret (NIPR), Top Secret (SIPR), or TS/SCI Eligible (JWICS) based on network assignment.
  • Education: Bachelor's Degree in Information Technology, Cybersecurity, Computer Science, or related field.
  • Experience: 10+ years cybersecurity; 3+ years supply chain risk management or third-party risk.
  • Certifications: CISSP required; CISM, CRISC, or procurement certifications desired.
  • Technical Knowledge: Understanding of supply chain security threats, vendor risk assessment methodologies, Software Composition Analysis, NIST 800-161.

About Advana:
Advana is the Department of Defense Chief Digital and Artificial Intelligence Office's (CDAO) enterprise-wide data, analytics, and AI platform. Advana provides DoD military and civilian decision makers with unprecedented access to enterprise data, tools, and capabilities in a secure environment. The platform hosts hundreds of curated applications across logistics, financial management, personnel, health, and other domains, accelerating decision advantage through accessible, actionable data and AI capabilities.
This position supports comprehensive cybersecurity operations for the Advana platform across three classified networks (NIPR, SIPR, JWICS).
Important Notes:
Position Status:
  • This position is contingent upon contract award.
  • Start date will be determined upon contract award.
  • We will maintain contact with selected candidates throughout the award process.

Work Requirements:
  • U.S. Citizen required.
  • Clearance varies by network: Secret (NIPR), Top Secret (SIPR), or TS/SCI Eligible (JWICS).
  • On-premises work required at Suffolk Building, Falls Church, VA.
  • No remote work options available.
  • Standard business hours with operational flexibility.

Benefits:
  • 4 Weeks Paid Time Off.
  • All Federal Holiday’s Paid Vacation.
  • Four Percent Matching 401K.
  • Full health/vision/dental benefits for the employee and family paid 100% by ZTI Solutions, LLC.

We thank all applicants for their interest. Only candidates selected for interviews will be contacted.