Vendor Risk Management Jobs
Vendor Risk Management jobs are open across banking, insurance, fintech, healthcare, and enterprise tech, from analyst to director level, with specializations in third-party risk assessment, contract compliance, and vendor due diligence. Find a role that fits from the openings below and apply directly.
Find Vendor Risk Management JobsOverview
Showing 5 of 12+ Vendor Risk Management jobs
About MCU:
At Municipal Credit Union, we believe that an incredible culture helps create a happy and motivated team that works hard to achieve the best results for themselves and their members. For more than 100 years, MCU has provided affordable financial products and convenient services to a membership base that is now comprised of over 600,000 individuals. With each new generation we have the pleasure of interacting with, we maintain the credit union promise of people helping people.
Our Mission:
To help hard-working New Yorkers build better tomorrows
Our Vision:
Be New York's most loved financial institution by helping our members build their best financial futures
Responsibilities:
Specific duties include, but are not limited to, the following:
- Lead the end-to-end Vendor Risk Management Program in alignment with regulatory requirements (e.g., NCUA, NYDFS, FFIEC) and internal policies.
- Manage the vendor due diligence lifecycle including risk assessments, contracting support, ongoing monitoring, and offboarding processes.
- Facilitate periodic reviews of critical and high-risk vendors, including SOC reports, financial health, cybersecurity practices, regulatory compliance, and performance metrics.
- Collaborate with Enterprise Risk, Legal, Information Security, and business units to evaluate and mitigate vendor risks.
- Provides subject-matter expertise to business lines on vendor selection, onboarding, and risk remediation.
- Maintain the Vendor Risk Register and ensure vendor risk ratings are accurate and current.
- Coordinate with internal audit and external examiners on vendor risk management reviews.
- Develop and deliver periodic vendor risk reports to senior management and the Board, including risk exposure, trends, and performance metrics.
- Monitor regulatory changes and industry best practices to ensure continuous improvement of the Vendor Risk Management Program.
- Provide coaching and oversight to staff or cross-functional teams involved in vendor risk activities.
- Perform other related duties as requested and special projects as assigned.
Requirements:
- Bachelor’s degree required, advanced degree preferred.
- Minimum of 5 years of experience in the financial services industry required.
- Minimum of 5 years of risk management experience, with demonstrable knowledge in third-party vendor risk.
- Knowledge of operational risk management, regulatory compliance, general IT risk/IT operations, and financial industry business lines and workflows required.
- Preferred certifications: Certified Third-Party Risk Professional or Certified Regulatory Vendor Program Manager.
- Ability to perform in a high-volume environment and meet deadlines while maintaining exceptional attention to detail.
- Technologically proficient.
Why you'll be a good fit:
Our Core Values are an integral part of who we are and who we hire. By living our Core Values, every day, we continue to attract the best and brightest talent, achieve unsurpassed results and continuously challenge ourselves to be better than yesterday. These values are at the heart of our organization and within every teammate. To be a great fit, you’ll bring the following
Results - We are passionate about winning.
Agility - We proactively anticipate, respond and pivot to ensure MCU wins.
Integrity - We operate with the highest ethical standards and highest degree of honesty.
Belonging - We cultivate a culture of inclusion and teamwork.
Ownership - We take personal responsibility and hold ourselves accountable for the results.
Why You’ll Love Working Here:
The pay range for this position is between $87,500-116,500 annually. Actual base pay offered may vary depending on a number of factors such as job-related knowledge, skills, experience, and location. Employees in this position may also be eligible for a discretionary bonus, 401(k) with an 6% employer match per pay period. Benefits for this position include Medical, vision, dental, life, and disability insurance, flexible paid time off and 11 paid holidays annually.
Municipal Credit Union (MCU) is an Equal Opportunity Employer. Municipal Credit Union provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable federal, state or local laws.
We are committed to hiring, training, cultivating, promoting, and celebrating an environment where we have a welcoming and fulfilling place for all people to call home. Diversity of race, thought, sexual orientation, age, veteran status, religion, and disability will empower us to thrive as individuals, as teams, and as an organization.
About MCU:
At Municipal Credit Union, we believe that an incredible culture helps create a happy and motivated team that works hard to achieve the best results for themselves and their members. For more than 100 years, MCU has provided affordable financial products and convenient services to a membership base that is now comprised of over 600,000 individuals. With each new generation we have the pleasure of interacting with, we maintain the credit union promise of people helping people.
Our Mission:
To help hard-working New Yorkers build better tomorrows
Our Vision:
Be New York's most loved financial institution by helping our members build their best financial futures
Responsibilities:
Specific duties include, but are not limited to, the following:
- Lead the end-to-end Vendor Risk Management Program in alignment with regulatory requirements (e.g., NCUA, NYDFS, FFIEC) and internal policies.
- Manage the vendor due diligence lifecycle including risk assessments, contracting support, ongoing monitoring, and offboarding processes.
- Facilitate periodic reviews of critical and high-risk vendors, including SOC reports, financial health, cybersecurity practices, regulatory compliance, and performance metrics.
- Collaborate with Enterprise Risk, Legal, Information Security, and business units to evaluate and mitigate vendor risks.
- Provides subject-matter expertise to business lines on vendor selection, onboarding, and risk remediation.
- Maintain the Vendor Risk Register and ensure vendor risk ratings are accurate and current.
- Coordinate with internal audit and external examiners on vendor risk management reviews.
- Develop and deliver periodic vendor risk reports to senior management and the Board, including risk exposure, trends, and performance metrics.
- Monitor regulatory changes and industry best practices to ensure continuous improvement of the Vendor Risk Management Program.
- Provide coaching and oversight to staff or cross-functional teams involved in vendor risk activities.
- Perform other related duties as requested and special projects as assigned.
Requirements:
- Bachelor’s degree required, advanced degree preferred.
- Minimum of 5 years of experience in the financial services industry required.
- Minimum of 5 years of risk management experience, with demonstrable knowledge in third-party vendor risk.
- Knowledge of operational risk management, regulatory compliance, general IT risk/IT operations, and financial industry business lines and workflows required.
- Preferred certifications: Certified Third-Party Risk Professional or Certified Regulatory Vendor Program Manager.
- Ability to perform in a high-volume environment and meet deadlines while maintaining exceptional attention to detail.
- Technologically proficient.
Why you'll be a good fit:
Our Core Values are an integral part of who we are and who we hire. By living our Core Values, every day, we continue to attract the best and brightest talent, achieve unsurpassed results and continuously challenge ourselves to be better than yesterday. These values are at the heart of our organization and within every teammate. To be a great fit, you’ll bring the following
Results - We are passionate about winning.
Agility - We proactively anticipate, respond and pivot to ensure MCU wins.
Integrity - We operate with the highest ethical standards and highest degree of honesty.
Belonging - We cultivate a culture of inclusion and teamwork.
Ownership - We take personal responsibility and hold ourselves accountable for the results.
Why You’ll Love Working Here:
The pay range for this position is between $87,500-116,500 annually. Actual base pay offered may vary depending on a number of factors such as job-related knowledge, skills, experience, and location. Employees in this position may also be eligible for a discretionary bonus, 401(k) with an 6% employer match per pay period. Benefits for this position include Medical, vision, dental, life, and disability insurance, flexible paid time off and 11 paid holidays annually.
Municipal Credit Union (MCU) is an Equal Opportunity Employer. Municipal Credit Union provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable federal, state or local laws.
We are committed to hiring, training, cultivating, promoting, and celebrating an environment where we have a welcoming and fulfilling place for all people to call home. Diversity of race, thought, sexual orientation, age, veteran status, religion, and disability will empower us to thrive as individuals, as teams, and as an organization.
Vendor Risk Management Jobs by Experience Level
See All 12 Vendor Risk Management Jobs
Find roles that match your experience and apply in just a few clicks.
Find Vendor Risk Management JobsVendor Risk Management Job Market
Who's Hiring
Top Industries Hiring
- Banking & Financial Services
- Investment & Asset Management
What Employers Look For
The qualifications that appear most often in vendor risk management jobs.
- 3-5 years of experience in third-party or vendor risk management
- Proficiency with GRC platforms such as Archer, ServiceNow, or OneTrust
- Working knowledge of risk frameworks including NIST CSF, ISO 27001, or SOC 2
- Bachelor's degree in business, information systems, finance, or a related field
- Relevant certification such as CTPRP, CISA, CRISC, or CISM preferred
- Experience conducting vendor due diligence, risk assessments, and contract reviews
Tips for Your Vendor Risk Management Job Search
Tailor your resume to risk frameworks
Call out the specific frameworks you've worked with, such as NIST, ISO 27001, or SOC 2, directly in your resume summary and job descriptions. Hiring managers scan for these terms first, and generic risk language won't get you past an ATS screen.
Certify before competing for senior roles
A CTPRP, CISA, or CRISC credential signals that you can own a vendor risk program, not just support one. If you're targeting manager or director roles, list active certifications above your education section so they appear early.
Apply early to roles that fit
Migrate Mate lists vendor risk management openings from across the United States in one place, so you can find roles that match and apply directly to each listing.
Filter by industry vertical when searching
Vendor risk management looks different in financial services than in healthcare or manufacturing. Search by industry so your niche experience in, say, HIPAA-covered vendor oversight stands out rather than getting buried in general risk postings.
Prepare a case study for your interview
Interviewers for vendor risk roles almost always ask you to walk through a real remediation you led or a vendor you offboarded. Prepare a two-minute story with a clear problem, what you assessed, what you recommended, and the outcome.
Negotiate scope, not just salary
When you receive an offer, ask about the vendor inventory size, the tools in place, and whether the role owns policy or just executes it. These details define whether you'll be building a program or maintaining a checklist, which affects your long-term growth.
Vendor Risk Management Jobs: Frequently Asked Questions
Which companies are hiring the most vendor risk managements?
The companies hiring the most vendor risk managements right now include FM, BRMi, and Citi, with the largest share of openings in Florida, New York, and Texas, based on current listings on Migrate Mate as of August 2026. Financial services firms and large health systems consistently make up the bulk of active postings.
How many vendor risk management jobs are remote?
About 83% of vendor risk management openings are fully remote or hybrid as of August 2026, reflecting the desk-based and document-heavy nature of the work. Sub-areas like vendor questionnaire reviews, risk scoring, and policy writing tend to be the most remote-eligible, while roles requiring onsite vendor audits or executive stakeholder meetings lean toward hybrid arrangements.
How do you become a vendor risk management?
Start with a degree in business, information systems, finance, or cybersecurity, then build foundational experience in procurement, compliance, or IT audit where you interact with external vendors. Earn a recognized certification such as CTPRP or CISA to formalize your credentials, then target junior analyst roles focused on vendor due diligence or third-party assessments to build a portfolio of real assessments before moving up.
Can you get a vendor risk management job with little experience?
Yes, entry-level vendor risk analyst roles exist and typically look for candidates with a risk-adjacent background in audit, compliance, procurement, or IT support rather than dedicated vendor risk experience. Demonstrating familiarity with a common framework like NIST or SOC 2, even through coursework or self-study, and showing you can read and interpret contracts or vendor questionnaires will strengthen an application with a thin work history.
What does the vendor risk management interview process look like?
Most interviews run two to three rounds, starting with a recruiter screen focused on your background and framework knowledge, followed by a technical or panel interview where you walk through a past risk assessment or respond to a scenario about onboarding or offboarding a vendor. Senior roles often include a final round with the CISO, CFO, or a compliance committee, and some employers ask you to complete a brief written case study or risk scoring exercise before that stage.
Where can I find and apply to vendor risk management jobs?
You can find and apply to vendor risk management jobs on Migrate Mate, which lists current openings from employers across the United States. Search the listings for roles that match your experience level and industry focus, then apply directly to each one that fits.
See All 12 Vendor Risk Management Jobs
Find roles that match your experience and apply in just a few clicks.
Find Vendor Risk Management Jobs