Vendor Risk Management Jobs in USA with Visa Sponsorship
Vendor Risk Management roles qualify for H-1B, L-1, and O-1 visas as specialty occupations requiring a bachelor's degree or higher in finance, business, or risk management. Employers in financial services, consulting, and tech sponsor these positions regularly, making it a viable path for international candidates. For detailed occupation requirements, see the O*NET profile.
See All Vendor Risk Management JobsOverview
Showing 5 of 77+ Vendor Risk Management jobs
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
See all 77+ Vendor Risk Management jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Vendor Risk Management roles.
Get Access To All JobsLocation
New York
Business Area
Legal, Compliance, and Risk
Ref
10049190
Description & Requirements
The energy of a newsroom, the pace of a trading floor, the buzz of a recent tech breakthrough; we work hard, and we work fast - while keeping up the quality and accuracy we're known for. It's what keeps us inventing and reinventing, all the time. Our culture is wide open, just like our spaces. We bring out the best in each other through collaboration. Through our countless volunteer projects, we also help network with the communities around us, too. You can do amazing work here. Work you couldn't do anywhere else. It's up to you to make it happen.
Bloomberg’s Chief Risk Office (CRO) Department plays a critical role in supporting our businesses and operations around the world. We move quickly and thoughtfully to help address the risks that are inherent with being the world’s leading financial news and information company. Our team is made up of talented and hardworking professionals who think creatively and work collaboratively in an open environment to deliver results, drive innovation, and solve difficult problems. Diversity and inclusion are essential to our success, and we strive to maintain an environment where our employees are empowered to make an impact. We also recognize the value of diversity and inclusion in cultivating a supportive workplace and the importance of giving back to our communities.
The CRO team provides coverage of both Bloomberg's regulated entities and products, and Bloomberg's non-regulated products and services. Our focus is to address risks and related issues by providing risk management as a service, focusing on providing and delivering value to help businesses and departments thoughtfully incorporate risk into decision making. Vendor Risk Management (VRM) or third-party risk is part of the Company’s Chief Risk Office (CRO) and responsible for assisting Bloomberg departments and select subsidiaries of Bloomberg LP in the selection, assessment, mitigation, and continuous monitoring of risks introduced by vendors and other third-party service providers.
What’s the Role?
We are seeking a Third Party Risk Oversight Lead to drive the design, implementation, and continuous improvement of Bloomberg’s third-party risk framework. This individual contributor role is critical to ensuring that our vendor risk methodology provides comprehensive coverage across the vendor lifecycle, as well as across risk types, and aligns with Bloomberg’s broader enterprise risk framework. You will help set the standards and processes that our team of vendor risk analysts follow. You will collaborate with cross-functional stakeholders to define assessment standards, translate that into actionable processes, and generally ensure our framework remains responsive to evolving regulatory expectations and business needs. This role requires a strategic mindset, deep subject matter expertise, and the ability to translate complex risk concepts into actionable guidance for our operational teams.
We’ll Trust You To
Framework Design & Governance:
- Lead the development and refinement of Bloomberg’s third-party risk framework, ensuring alignment with enterprise risk management principles.
- Define and maintain risk coverage standards across the vendor lifecycle, including onboarding, due diligence, monitoring, and offboarding.
- Establish thematic risk assessment methodologies to streamline risk identification and reporting across similar vendor types or services.
- Ensure the framework supports consistent evaluation across key risk domains (e.g., Information Security, Privacy, BCP/DR and Exit Planning, Regulatory, Geographic, ESG etc).
Stakeholder Engagement & Advisory:
- Partner with business units, Legal, Compliance, Enterprise Risk, and CISO teams to ensure the framework meets subject matter experts’ needs.
- Serve as a subject matter expert on third-party risk governance, providing guidance on emerging risks and regulatory developments (e.g., DORA, EU AI Act, GDPR).
- Support the development of executive-ready reporting and risk dashboards that reflect framework coverage and effectiveness.
- Represent Vendor Risk in cross-functional working groups, risk committees, and regulatory response initiatives.
Continuous Improvement & Enablement:
- Monitor industry trends and regulatory changes to proactively update framework components and guidance.
- Collaborate with operational VRM teams to ensure consistent application of the framework and identify opportunities for simplification or enhancement.
- Develop training materials and documentation to support adoption and understanding of the framework across the organization.
You’ll Need To Have
- Bachelor’s or Master’s degree in Risk Management, Information Security, Business Administration, or equivalent industry experience.
- Extensive experience in Risk Management, Information Security, Technology Audit, or related fields, with a focus on governance, frameworks, or policy development.
- Strong understanding of third-party risk management principles and lifecycle processes.
- Familiarity with key frameworks (NIST 800-53, ISO/IEC 27001/2, COBIT, HITRUST, PCI DSS, CSA, CIS CSC).
- Deep knowledge of Data Privacy regulations (GDPR, CCPA, HIPAA) and operational resilience regulations (DORA).
- Experience designing or implementing risk frameworks, governance models, or control standards.
- Excellent written and verbal communication skills, including the ability to influence and advise senior stakeholders.
- Industry certifications (CISSP, CISA, CISM, CTPRP, CIPT/CIPP, GIAC, etc.).
- Please note we use years of experience as a guide but we certainly will consider applications from all candidates who are able to demonstrate the skills necessary for the role.
We’d Love To See
- Experience aligning third-party risk frameworks with enterprise risk management programs.
- Familiarity with vendor risk platforms and assessment tools (e.g., SIG, VSAQ).
- Experience responding to regulatory inquiries or audits related to third-party risk.
- Ability to translate complex risk concepts into practical guidance and tools.
Salary Range
185000 - 245000 USD Annually + Benefits + Bonus
The referenced salary range is based on the Company's good faith belief at the time of posting. Actual compensation may vary based on factors such as geographic location, work experience, market conditions, education/training and skill level.
We offer one of the most comprehensive and generous benefits plans available and offer a range of total rewards that may include merit increases, incentive compensation (exempt roles only), paid holidays, paid time off, medical, dental, vision, short and long term disability benefits, 401(k) +match, life insurance, and various wellness programs, among others. The Company does not provide benefits directly to contingent workers/contractors and interns.
Discover what makes Bloomberg unique - watch our for an inside look at our culture, values, and the people behind our success.
Location
New York
Business Area
Legal, Compliance, and Risk
Ref
10049190
Description & Requirements
The energy of a newsroom, the pace of a trading floor, the buzz of a recent tech breakthrough; we work hard, and we work fast - while keeping up the quality and accuracy we're known for. It's what keeps us inventing and reinventing, all the time. Our culture is wide open, just like our spaces. We bring out the best in each other through collaboration. Through our countless volunteer projects, we also help network with the communities around us, too. You can do amazing work here. Work you couldn't do anywhere else. It's up to you to make it happen.
Bloomberg’s Chief Risk Office (CRO) Department plays a critical role in supporting our businesses and operations around the world. We move quickly and thoughtfully to help address the risks that are inherent with being the world’s leading financial news and information company. Our team is made up of talented and hardworking professionals who think creatively and work collaboratively in an open environment to deliver results, drive innovation, and solve difficult problems. Diversity and inclusion are essential to our success, and we strive to maintain an environment where our employees are empowered to make an impact. We also recognize the value of diversity and inclusion in cultivating a supportive workplace and the importance of giving back to our communities.
The CRO team provides coverage of both Bloomberg's regulated entities and products, and Bloomberg's non-regulated products and services. Our focus is to address risks and related issues by providing risk management as a service, focusing on providing and delivering value to help businesses and departments thoughtfully incorporate risk into decision making. Vendor Risk Management (VRM) or third-party risk is part of the Company’s Chief Risk Office (CRO) and responsible for assisting Bloomberg departments and select subsidiaries of Bloomberg LP in the selection, assessment, mitigation, and continuous monitoring of risks introduced by vendors and other third-party service providers.
What’s the Role?
We are seeking a Third Party Risk Oversight Lead to drive the design, implementation, and continuous improvement of Bloomberg’s third-party risk framework. This individual contributor role is critical to ensuring that our vendor risk methodology provides comprehensive coverage across the vendor lifecycle, as well as across risk types, and aligns with Bloomberg’s broader enterprise risk framework. You will help set the standards and processes that our team of vendor risk analysts follow. You will collaborate with cross-functional stakeholders to define assessment standards, translate that into actionable processes, and generally ensure our framework remains responsive to evolving regulatory expectations and business needs. This role requires a strategic mindset, deep subject matter expertise, and the ability to translate complex risk concepts into actionable guidance for our operational teams.
We’ll Trust You To
Framework Design & Governance:
- Lead the development and refinement of Bloomberg’s third-party risk framework, ensuring alignment with enterprise risk management principles.
- Define and maintain risk coverage standards across the vendor lifecycle, including onboarding, due diligence, monitoring, and offboarding.
- Establish thematic risk assessment methodologies to streamline risk identification and reporting across similar vendor types or services.
- Ensure the framework supports consistent evaluation across key risk domains (e.g., Information Security, Privacy, BCP/DR and Exit Planning, Regulatory, Geographic, ESG etc).
Stakeholder Engagement & Advisory:
- Partner with business units, Legal, Compliance, Enterprise Risk, and CISO teams to ensure the framework meets subject matter experts’ needs.
- Serve as a subject matter expert on third-party risk governance, providing guidance on emerging risks and regulatory developments (e.g., DORA, EU AI Act, GDPR).
- Support the development of executive-ready reporting and risk dashboards that reflect framework coverage and effectiveness.
- Represent Vendor Risk in cross-functional working groups, risk committees, and regulatory response initiatives.
Continuous Improvement & Enablement:
- Monitor industry trends and regulatory changes to proactively update framework components and guidance.
- Collaborate with operational VRM teams to ensure consistent application of the framework and identify opportunities for simplification or enhancement.
- Develop training materials and documentation to support adoption and understanding of the framework across the organization.
You’ll Need To Have
- Bachelor’s or Master’s degree in Risk Management, Information Security, Business Administration, or equivalent industry experience.
- Extensive experience in Risk Management, Information Security, Technology Audit, or related fields, with a focus on governance, frameworks, or policy development.
- Strong understanding of third-party risk management principles and lifecycle processes.
- Familiarity with key frameworks (NIST 800-53, ISO/IEC 27001/2, COBIT, HITRUST, PCI DSS, CSA, CIS CSC).
- Deep knowledge of Data Privacy regulations (GDPR, CCPA, HIPAA) and operational resilience regulations (DORA).
- Experience designing or implementing risk frameworks, governance models, or control standards.
- Excellent written and verbal communication skills, including the ability to influence and advise senior stakeholders.
- Industry certifications (CISSP, CISA, CISM, CTPRP, CIPT/CIPP, GIAC, etc.).
- Please note we use years of experience as a guide but we certainly will consider applications from all candidates who are able to demonstrate the skills necessary for the role.
We’d Love To See
- Experience aligning third-party risk frameworks with enterprise risk management programs.
- Familiarity with vendor risk platforms and assessment tools (e.g., SIG, VSAQ).
- Experience responding to regulatory inquiries or audits related to third-party risk.
- Ability to translate complex risk concepts into practical guidance and tools.
Salary Range
185000 - 245000 USD Annually + Benefits + Bonus
The referenced salary range is based on the Company's good faith belief at the time of posting. Actual compensation may vary based on factors such as geographic location, work experience, market conditions, education/training and skill level.
We offer one of the most comprehensive and generous benefits plans available and offer a range of total rewards that may include merit increases, incentive compensation (exempt roles only), paid holidays, paid time off, medical, dental, vision, short and long term disability benefits, 401(k) +match, life insurance, and various wellness programs, among others. The Company does not provide benefits directly to contingent workers/contractors and interns.
Discover what makes Bloomberg unique - watch our for an inside look at our culture, values, and the people behind our success.
How to Get Visa Sponsorship in Vendor Risk Management
Align your degree to the specialty occupation standard
USCIS requires a specific degree field tied to the role. A bachelor's in finance, business administration, supply chain, or information systems typically satisfies the specialty occupation requirement for Vendor Risk Management positions at most employers.
Highlight certifications relevant to risk management
Credentials like CISA, CRISC, or CTPRP strengthen your petition by demonstrating specialized expertise beyond a general degree. USCIS officers treat professional certifications as supporting evidence that the role requires specialized knowledge.
Understand the LCA requirement before your first interview
Your employer must file a Labor Condition Application with the Department of Labor before submitting your H-1B petition. Confirming early that your employer has done this before saves significant time during the hiring process.
Ask employers about their cap-exempt status
Universities, nonprofits affiliated with universities, and certain research institutions are cap-exempt, meaning they can file H-1B petitions year-round without the lottery. Some Vendor Risk roles exist within these organizations, which is worth exploring.
Use Migrate Mate to find sponsorship-ready employers
Not every Vendor Risk Management posting comes with sponsorship, and filtering manually is time-consuming. Migrate Mate surfaces roles where employers have a verified history of sponsoring international candidates in risk and compliance functions.
Vendor Risk Management jobs are hiring across the US. Find yours.
Find Vendor Risk Management JobsSee all 77+ Vendor Risk Management jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Vendor Risk Management roles.
Get Access To All JobsFrequently Asked Questions
Does Vendor Risk Management qualify as a specialty occupation for H-1B purposes?
Yes. Vendor Risk Management qualifies as a specialty occupation because the role theoretically and practically requires at least a bachelor's degree in a specific field such as finance, business, information systems, or risk management. USCIS has approved H-1B petitions for this job title across financial services, technology, and healthcare sectors. Having a degree that directly maps to the duties of the role strengthens the petition considerably.
What visa types are available for Vendor Risk Management professionals beyond the H-1B?
The L-1B visa is available if you're transferring within a multinational company and have specialized knowledge of vendor risk frameworks, third-party systems, or proprietary assessment methodologies. The O-1A is an option for candidates with exceptional recognition in risk management, such as published research or senior advisory roles. TN status applies to Canadian and Mexican nationals in qualifying business analyst or management consultant categories.
How competitive is H-1B sponsorship for Vendor Risk Management roles specifically?
Sponsorship rates vary by employer size and sector. Large financial institutions such as JPMorgan, Citi, and Goldman Sachs, along with consulting firms like Deloitte and KPMG, file LCAs for Vendor Risk roles regularly and have mature immigration programs. Smaller fintech companies may sponsor but less predictably. Browsing Migrate Mate lets you identify employers with an active history of sponsoring international candidates in risk and compliance.
My degree is in a field adjacent to risk management. Will that create problems with my H-1B petition?
It depends on how closely your degree maps to the role's duties. A degree in information security, accounting, or supply chain management can support a Vendor Risk petition if the job description emphasizes those specific competencies. Where a degree is adjacent rather than exact, employers often bolster the petition with a detailed support letter explaining why the specific field of study is relevant to the position's core functions.
Can I work in Vendor Risk Management on OPT while waiting for H-1B sponsorship?
Yes. If you graduated from a U.S. university, standard OPT gives you 12 months of work authorization. STEM OPT extends that by 24 months if your degree is in a qualifying STEM field such as information systems, computer science, or certain business analytics programs. This extension provides enough runway to apply for H-1B sponsorship through your employer, since the lottery and cap-subject petition process typically takes six to twelve months from registration to approval.
What is the prevailing wage requirement for sponsored Vendor Risk Management jobs?
U.S. employers sponsoring a visa must pay at least the prevailing wage, which is what workers in the same role, area, and experience level typically earn. The Department of Labor sets this rate to make sure companies aren't hiring foreign workers simply because they'd accept lower pay than a U.S. worker. It varies by job title, location, and experience. You can look up current prevailing wage rates for any occupation and location using the OFLC Wage Search page.
See which Vendor Risk Management employers are hiring and sponsoring visas right now.
Search Vendor Risk Management Jobs