Vendor Risk Management Jobs in USA with Visa Sponsorship
Vendor Risk Management roles qualify for H-1B visa, L-1 visa, and O-1 visas as specialty occupations requiring a bachelor's degree or higher in finance, business, or risk management. Employers in financial services, consulting, and tech sponsor these positions regularly, making it a viable path for international candidates. For detailed occupation requirements, see the O*NET profile.
Find Vendor Risk Management JobsOverview
Showing 5 of 1,049+ Vendor Risk Management jobs
See all 1,049+ Vendor Risk Management Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Vendor Risk Management roles.
Get Access To All JobsCompany Description
About AbbVie
AbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people's lives across several key therapeutic areas including immunology, oncology and neuroscience - and products and services in our Allergan Aesthetics portfolio. For more information about AbbVie, please visit us at www.abbvie.com. Follow @abbvie on LinkedIn, Facebook, Instagram, X and YouTube.
Job Description
Purpose:
The Director, Risk, Audit & Compliance Strategy plays a critical role in strengthening procurement processes through strategic risk management, compliance adherence, and comprehensive audit strategies. The Director, Risk, Audit & Compliance is responsible for ensuring the deployment of strategies within the Risk & Compliance teams in addition to leading and coaching a team, ensuring their professional development aligns with organizational goals. This role demands a candidate with a robust background in enterprise risk management, including areas like IT security, procurement, cybersecurity, business continuity, quality, supplier management, and/or legal.
Responsibilities:
- Lead the enterprise procurement risk, audit, and compliance strategy, translating priorities into effective governance, controls, and assurance plans.
- Establish a procurement risk-management framework covering identification, assessment, mitigation, monitoring, escalation, and reporting.
- Lead the integration of Future-State AI tools (AI Risk Intelligence, Predictive Models, Monitoring Agents, and Copilot-Enabled Insights) to automate and optimize risk and compliance functions.
- Drive the PRAC 2026-2028 capability roadmap, shifting functional maturity from foundational monitoring to an “Anticipate & Orchestrate” (Risk), “Automate & Optimize” (Audit), and “Predict & Prevent” (Compliance) state.
- Implement continuous AI-led monitoring to shift compliance controls from detective to preventive, reducing recurring issues and enabling early identification of compliance weaknesses.
- Advance AI strategies to automate routine audit requests, exception tracking, and risk routing, enabling dynamic prioritization and proactive crisis response based on real-time data and predictive analytics.
- Design and oversee a risk-based audit program for procurement processes, supplier management, sourcing, contracting, purchasing, and payment controls; track corrective actions through closure.
- Ensure adherence to applicable laws, regulations, internal policies, ethical sourcing requirements, delegated authorities, and contractual obligations.
- Partner with Legal, Finance, Internal Audit, IT Security, Cybersecurity, Quality, and Business Continuity teams on cross-functional risks and controls.
- Oversee supplier and third-party risk management, including due diligence, risk segmentation, monitoring, remediation, and business-continuity considerations.
- Define compliance metrics, dashboards, and leadership reporting on material risks, audit findings, and control effectiveness.
- Lead investigations and remediation related to procurement compliance concerns, control failures, and audit findings.
- Develop policies, standards, training, and communications that reinforce compliant, ethical, and resilient procurement practices.
- Lead, coach, and develop the Risk & Compliance team in alignment with organizational goals.
Qualifications
- Bachelor’s degree in business, supply chain, finance, accounting, law, risk management, or a related field; advanced degree preferred.
- 10+ years of progressive experience in procurement, enterprise risk management, audit, compliance, internal controls, or related disciplines, including leadership experience.
- Demonstrated experience designing and implementing risk-based compliance and audit strategies in a complex, regulated, or global organization.
- Strong knowledge of procurement lifecycle controls, strategic sourcing, contracting, supplier management, third-party risk, and purchase-to-pay processes.
- Broad enterprise risk-management experience spanning IT security, procurement, cybersecurity, business continuity, quality, supplier management, and/or legal.
- Knowledge of relevant compliance, governance, and control frameworks; CPA, CIA, CISA, CRMP, CCEP, or equivalent certification preferred.
Additional Information
Applicable only to applicants applying to a position in any location with pay disclosure requirements under state or local law:
- The compensation range described below is the range of possible base pay compensation that the Company believes in good faith it will pay for this role at the time of this posting based on the job grade for this position. Individual compensation paid within this range will depend on many factors including geographic location, and we may ultimately pay more or less than the posted range. This range may be modified in the future.
- We offer a comprehensive package of benefits including paid time off (vacation, holidays, sick), medical/dental/vision insurance and 401(k) to eligible employees.
- This job is eligible to participate in our long-term incentive programs.
Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, incentive, benefits, or any other form of compensation and benefits that are allocable to a particular employee remains in the Company's sole and absolute discretion unless and until paid and may be modified at the Company’s sole and absolute discretion, consistent with applicable law.
AbbVie is an equal opportunity employer and is committed to operating with integrity, driving innovation, transforming lives and serving our community. Equal Opportunity Employer/Veterans/Disabled.
US & Puerto Rico only - to learn more, visit https://www.abbvie.com/join-us/equal-employment-opportunity-employer.html
US & Puerto Rico applicants seeking a reasonable accommodation, click here to learn more:
https://www.abbvie.com/join-us/reasonable-accommodations.html
Company Description
About AbbVie
AbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people's lives across several key therapeutic areas including immunology, oncology and neuroscience - and products and services in our Allergan Aesthetics portfolio. For more information about AbbVie, please visit us at www.abbvie.com. Follow @abbvie on LinkedIn, Facebook, Instagram, X and YouTube.
Job Description
Purpose:
The Director, Risk, Audit & Compliance Strategy plays a critical role in strengthening procurement processes through strategic risk management, compliance adherence, and comprehensive audit strategies. The Director, Risk, Audit & Compliance is responsible for ensuring the deployment of strategies within the Risk & Compliance teams in addition to leading and coaching a team, ensuring their professional development aligns with organizational goals. This role demands a candidate with a robust background in enterprise risk management, including areas like IT security, procurement, cybersecurity, business continuity, quality, supplier management, and/or legal.
Responsibilities:
- Lead the enterprise procurement risk, audit, and compliance strategy, translating priorities into effective governance, controls, and assurance plans.
- Establish a procurement risk-management framework covering identification, assessment, mitigation, monitoring, escalation, and reporting.
- Lead the integration of Future-State AI tools (AI Risk Intelligence, Predictive Models, Monitoring Agents, and Copilot-Enabled Insights) to automate and optimize risk and compliance functions.
- Drive the PRAC 2026-2028 capability roadmap, shifting functional maturity from foundational monitoring to an “Anticipate & Orchestrate” (Risk), “Automate & Optimize” (Audit), and “Predict & Prevent” (Compliance) state.
- Implement continuous AI-led monitoring to shift compliance controls from detective to preventive, reducing recurring issues and enabling early identification of compliance weaknesses.
- Advance AI strategies to automate routine audit requests, exception tracking, and risk routing, enabling dynamic prioritization and proactive crisis response based on real-time data and predictive analytics.
- Design and oversee a risk-based audit program for procurement processes, supplier management, sourcing, contracting, purchasing, and payment controls; track corrective actions through closure.
- Ensure adherence to applicable laws, regulations, internal policies, ethical sourcing requirements, delegated authorities, and contractual obligations.
- Partner with Legal, Finance, Internal Audit, IT Security, Cybersecurity, Quality, and Business Continuity teams on cross-functional risks and controls.
- Oversee supplier and third-party risk management, including due diligence, risk segmentation, monitoring, remediation, and business-continuity considerations.
- Define compliance metrics, dashboards, and leadership reporting on material risks, audit findings, and control effectiveness.
- Lead investigations and remediation related to procurement compliance concerns, control failures, and audit findings.
- Develop policies, standards, training, and communications that reinforce compliant, ethical, and resilient procurement practices.
- Lead, coach, and develop the Risk & Compliance team in alignment with organizational goals.
Qualifications
- Bachelor’s degree in business, supply chain, finance, accounting, law, risk management, or a related field; advanced degree preferred.
- 10+ years of progressive experience in procurement, enterprise risk management, audit, compliance, internal controls, or related disciplines, including leadership experience.
- Demonstrated experience designing and implementing risk-based compliance and audit strategies in a complex, regulated, or global organization.
- Strong knowledge of procurement lifecycle controls, strategic sourcing, contracting, supplier management, third-party risk, and purchase-to-pay processes.
- Broad enterprise risk-management experience spanning IT security, procurement, cybersecurity, business continuity, quality, supplier management, and/or legal.
- Knowledge of relevant compliance, governance, and control frameworks; CPA, CIA, CISA, CRMP, CCEP, or equivalent certification preferred.
Additional Information
Applicable only to applicants applying to a position in any location with pay disclosure requirements under state or local law:
- The compensation range described below is the range of possible base pay compensation that the Company believes in good faith it will pay for this role at the time of this posting based on the job grade for this position. Individual compensation paid within this range will depend on many factors including geographic location, and we may ultimately pay more or less than the posted range. This range may be modified in the future.
- We offer a comprehensive package of benefits including paid time off (vacation, holidays, sick), medical/dental/vision insurance and 401(k) to eligible employees.
- This job is eligible to participate in our long-term incentive programs.
Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, incentive, benefits, or any other form of compensation and benefits that are allocable to a particular employee remains in the Company's sole and absolute discretion unless and until paid and may be modified at the Company’s sole and absolute discretion, consistent with applicable law.
AbbVie is an equal opportunity employer and is committed to operating with integrity, driving innovation, transforming lives and serving our community. Equal Opportunity Employer/Veterans/Disabled.
US & Puerto Rico only - to learn more, visit https://www.abbvie.com/join-us/equal-employment-opportunity-employer.html
US & Puerto Rico applicants seeking a reasonable accommodation, click here to learn more:
https://www.abbvie.com/join-us/reasonable-accommodations.html
See all 1,049+ Vendor Risk Management Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Vendor Risk Management roles.
Get Access To All JobsTips for Finding Vendor Risk Management Jobs
Target financial services and consulting firms
Banks, insurance companies, and management consulting firms file the most LCAs for Vendor Risk Management roles. These employers have established immigration pipelines and legal teams equipped to handle H-1B and L-1 petitions efficiently.
Align your degree to the specialty occupation standard
USCIS requires a specific degree field tied to the role. A bachelor's in finance, business administration, supply chain, or information systems typically satisfies the specialty occupation requirement for Vendor Risk Management positions at most employers.
Highlight certifications relevant to risk management
Credentials like CISA, CRISC, or CTPRP strengthen your petition by demonstrating specialized expertise beyond a general degree. USCIS officers treat professional certifications as supporting evidence that the role requires specialized knowledge.
Understand the LCA requirement before your first interview
Your employer must file a Labor Condition Application with the Department of Labor before submitting your H-1B petition. Confirming early that your employer has done this before saves significant time during the hiring process.
Ask employers about their cap-exempt status
Universities, nonprofits affiliated with universities, and certain research institutions are cap-exempt, meaning they can file H-1B petitions year-round without the lottery. Some Vendor Risk roles exist within these organizations, which is worth exploring.
Use Migrate Mate to find sponsorship-ready employers
Not every Vendor Risk Management posting comes with sponsorship, and filtering manually is time-consuming. Migrate Mate surfaces roles where employers have a verified history of sponsoring international candidates in risk and compliance functions.
Frequently Asked Questions
Does Vendor Risk Management qualify as a specialty occupation for H-1B purposes?
Yes. Vendor Risk Management qualifies as a specialty occupation because the role theoretically and practically requires at least a bachelor's degree in a specific field such as finance, business, information systems, or risk management. USCIS has approved H-1B visa petitions for this job title across financial services, technology, and healthcare sectors. Having a degree that directly maps to the duties of the role strengthens the petition considerably.
What visa types are available for Vendor Risk Management professionals beyond the H-1B?
The L-1B visa is available if you're transferring within a multinational company and have specialized knowledge of vendor risk frameworks, third-party systems, or proprietary assessment methodologies. The O-1A is an option for candidates with exceptional recognition in risk management, such as published research or senior advisory roles. TN visa status applies to Canadian and Mexican nationals in qualifying business analyst or management consultant categories.
How competitive is H-1B sponsorship for Vendor Risk Management roles specifically?
Sponsorship rates vary by employer size and sector. Large financial institutions such as JPMorgan, Citi, and Goldman Sachs, along with consulting firms like Deloitte and KPMG, file LCAs for Vendor Risk roles regularly and have mature immigration programs. Smaller fintech companies may sponsor but less predictably. Browsing Migrate Mate lets you identify employers with an active history of sponsoring international candidates in risk and compliance.
My degree is in a field adjacent to risk management. Will that create problems with my H-1B petition?
It depends on how closely your degree maps to the role's duties. A degree in information security, accounting, or supply chain management can support a Vendor Risk petition if the job description emphasizes those specific competencies. Where a degree is adjacent rather than exact, employers often bolster the petition with a detailed support letter explaining why the specific field of study is relevant to the position's core functions.
Can I work in Vendor Risk Management on OPT while waiting for H-1B sponsorship?
Yes. If you graduated from a U.S. university, standard OPT gives you 12 months of work authorization. STEM OPT extends that by 24 months if your degree is in a qualifying STEM field such as information systems, computer science, or certain business analytics programs. This extension provides enough runway to apply for H-1B sponsorship through your employer, since the lottery and cap-subject petition process typically takes six to twelve months from registration to approval.
What is the prevailing wage requirement for sponsored Vendor Risk Management jobs?
U.S. employers sponsoring a visa must pay at least the prevailing wage, which is what workers in the same role, area, and experience level typically earn. The Department of Labor sets this rate to make sure companies aren't hiring foreign workers simply because they'd accept lower pay than a U.S. worker. It varies by job title, location, and experience. You can look up current prevailing wage rates for any occupation and location using the OFLC Wage Search page.