Enterprise Supplier Risk Analyst

Temporary

ASCENDING

Enterprise Supplier Risk Analyst
Hybrid – 3 days onsite, Richmond, VA
5 month contract
Position Overview
We are seeking an experienced Enterprise Supplier Risk Analyst to establish and execute a formal Supplier Management and Third-Party Risk Management program. This role will serve as the subject matter expert for supplier oversight, managing the vendor lifecycle from sourcing and due diligence through onboarding, ongoing performance monitoring, renewal, and offboarding.
The successful candidate will design supplier governance frameworks, implement risk-tiering methodologies, and ensure suppliers meet contractual, operational, cybersecurity, financial, and regulatory requirements. This individual will partner closely with Legal, Information Security, Enterprise Risk, Procurement, and business stakeholders to mitigate third-party risk while maximizing supplier value.
Key Responsibilities
Lead the development, implementation, and ongoing management of a Supplier Management and Third-Party Risk Management program.
Manage the complete supplier lifecycle, including sourcing support, due diligence, risk assessment, onboarding, monitoring, renewal, and offboarding.
Develop and maintain supplier governance frameworks, policies, procedures, standards, and reporting.
Establish and administer a risk-tiering methodology to evaluate suppliers based on criticality, data access, cybersecurity exposure, operational dependency, financial risk, and regulatory impact.
Conduct and coordinate supplier due diligence assessments, including cybersecurity, privacy, financial, operational, compliance, and reputational reviews.
Review and assess supplier documentation, including contracts, statements of work, service-level agreements, insurance documentation, security questionnaires, audit reports, and compliance certifications.
Evaluate supplier compliance with relevant industry standards and controls, including SOC 1, SOC 2, PCI DSS, ISO 27001, and related frameworks.
Identify supplier risks, document findings, develop mitigation plans, and track remediation activities through resolution.
Monitor vendor performance, contractual obligations, service levels, risk indicators, and ongoing compliance requirements.
Partner with Legal, Procurement, Information Security, Risk, Finance, and business owners to ensure appropriate contract terms and risk controls are in place.
Support contract lifecycle management activities, including supplier renewals, amendments, termination planning, and offboarding.
Perform cost, value, and performance analyses to support supplier decisions and optimization opportunities.
Prepare risk reports, dashboards, and executive-level summaries on supplier risk, compliance status, key findings, and remediation progress.
Build strong working relationships with internal stakeholders and external suppliers to promote accountability and effective risk management.
Required Qualifications
Demonstrated experience in supplier management, vendor management, third-party risk management, procurement, contract lifecycle management, or a related discipline.
Strong understanding of supplier due diligence, vendor onboarding, ongoing monitoring, performance management, and offboarding processes.
Experience developing or enhancing supplier governance frameworks, risk-assessment methodologies, policies, and procedures.
Knowledge of cybersecurity, operational, financial, regulatory, and compliance risks associated with third parties.
Familiarity with industry assurance reports and standards, including SOC 1, SOC 2, PCI DSS, ISO 27001, or similar frameworks.
Ability to read, interpret, and assess contracts, statements of work, service-level agreements, and regulatory requirements.
Strong analytical and critical-thinking skills, with the ability to evaluate complex information and make sound, risk-based recommendations.
Excellent verbal and written communication skills, including the ability to influence stakeholders at all organizational levels.
Strong project management and organizational skills, with the ability to manage multiple vendors, assessments, deliverables, and deadlines simultaneously.
Highly self-directed and proactive, with the ability to serve as the primary subject matter expert for supplier oversight.
Collaborative and relationship-focused approach, with the ability to build trust across Legal, Security, Risk, Procurement, Finance, and business teams.
Preferred Qualifications
Experience establishing a third-party risk management program within a regulated, financial services, government, healthcare, or similarly compliance-driven environment.
Experience with governance, risk, and compliance (GRC), vendor management, contract lifecycle management, or procurement platforms.
Certifications such as Certified Third Party Risk Professional (CTPRP), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified Risk Management Professional (CRMP), or similar credentials.
Familiarity with privacy and data protection requirements, business continuity planning, and supplier incident-management processes.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.

Apply

Vacancy posted 5 days ago

Similar jobs that could be interesting for youBased on the Enterprise Supplier Risk Analyst in Richmond, VA vacancy

Risk & Vulnerability Analyst, (Hybrid), Richmond, VA
...ABOUT THE ROLE: The client is seeking a Risk and Vulnerability Analyst to support vulnerability assessment and risk analysis activities... ...efforts, supporting scanning operations, and helping improve enterprise visibility into security weaknesses and cyber risks....
Suggested
For contractors
Local area
2 days per week
3 days per week
Brandon Consulting Associates, Inc.
Richmond, VA
4 days ago
Risk/Vulnerability Management Analyst
$40 - $80 per hour
...Job Title: Risk/Vulnerability Management Analyst Duration (Contract): 12 Months Client Location: Richmond, VA 23219 Location Preference... .../Vulnerability Management Analyst, you will support enterprise cybersecurity initiatives focused on vulnerability assessment...
Suggested
Hourly pay
Contract work
Smart IMS Inc
Richmond, VA
4 days ago
Technology Risk Specialist
$150 - $160 per hour
...contributor to the Truist second-line-of-defense (LoD2) Technology Risk team responsible for independent risk oversight of one or more... ...domains and/or Business Unit Technology areas. Partner with Enterprise Technology teammates and stakeholders in assigned oversight areas...
Suggested
Permanent employment
Full time
Part time
H1b
Work at office
Remote work
Work visa
Relocation package
Shift work
Day shift
Truist
Richmond, VA
4 days ago
Technology Risk Senior Specialist
$144k - $180k
...contributor to the Truist second-line-of-defense (LoD2) Technology Risk team responsible for independent risk oversight of one or more... ...domains and/or Business Unit Technology areas. Partner with Enterprise Technology teammates and stakeholders in assigned oversight areas...
Suggested
Full time
Part time
Work at office
Shift work
Day shift
Truist
Richmond, VA
4 days ago
Senior Risk Control Consultant, Field
...to evaluate how a company identifies and manages their inherent risk factors. Additionally they are expected to differentiate the... ...level project work that impacts the RC organization or Travelers enterprise.Perform other duties as assigned. What Will Our Ideal Candidate...
Suggested
Full time
For contractors
Local area
Long distance
Night shift
The Travelers Indemnity Company
Richmond, VA
5 days ago
Cybersecurity Vulnerability & Risk Analyst
...Openings: 1 Position Overview Seeking a Vulnerability Management Analyst to support vulnerability assessments, security scanning, remediation, compliance activities, and enterprise cyber-risk visibility. Key Skills • 5+ years Information Security experience...
Local area
Shift work
2 days per week
3 days per week
Stellar Professionals
Richmond, VA
3 days ago
Senior Risk Analyst
$167.28k - $196.8k
...together quarterly for intense in-person working sessions called “surges.”learn more about working at Coinbase. As a Senior Analyst on the Risk Analytics team within theConsumer & Business group, you'll own the identification and mitigation of account takeover (ATO)...
Local area
Coinbase
Richmond, VA
3 days ago
Manager, Technology and Cybersecurity Risk / Risk Data Analyst
$109k - $169k
...POSITION TITLEManager, Technology & Cybersecurity Risk / Risk Data AnalystPOSITION LOCATIONRichmond,... ...business hours of 9am-5pm EST.YOUR ROLEThe Enterprise Manager, Technology and Cybersecurity Risk / Risk Data Analyst is a senior individual contributor responsible...
Full time
Work at office
Local area
Remote work
Genworth Financial
Richmond, VA
4 days ago
Risk Management Analyst
...Risk Management Overview Seeking a motivated and detail-oriented Risk Management to join our team. This entry-level position provides systems engineering support focused on risk identification, analysis, and mitigation strategies in support of defense and space programs...
Work at office
Tecolote Research
Richmond, VA
2 days ago
GRC Analyst
...package; support DFARS 7012, DIBCAC, and CMMC Level 2 assessments. Risk management Maintain the security risk register; translate... ...attest to this? with control status and evidence. Coordinate supplier security reviews where CUI or export-controlled data flows down;...
Contract work
Remote work
ESP IT
Richmond, VA
20 hours ago
Senior Risk Associate
$96.5k - $110.1k
...Overview Senior Risk Associate Do you like working in the spotlight? Are you ready to work on the front line of a top 10 Bank... ...to ensure problem documentation is in adherence to enterprise standards. The other primary functions of the team for GPN Risk...
Full time
Part time
Local area
Capital One
Richmond, VA
13 days ago
Sr. Risk Associate - Modeling and Advanced Data Insights
$96.5k - $110.1k
...Overview Sr. Risk Associate - Modeling and Advanced Data Insights The Anti-Money Laundering (AML) Modeling and Advanced Data... ...milestones. Technologically Adept : Comfortable navigating complex enterprise technology systems, data sets, and project tracking tools....
Full time
Part time
Local area
Capital One
Richmond, VA
a month ago
Program Analyst-------------Need GC,USC,GC-EAD,H1’S
...IT Outsourcing and Technology assistance supplier headquartered in Chantilly, VA with off-... ...and administrations in ERP, CRM, Enterprise architecture, offshore advisory services... ...collaborating with business architects, analysts and stakeholders to understand strategic...
Worldwide
USM Systems
Richmond, VA
1 day ago
Cyber Security & Risk Strategy Senior Consultant
$105.4k - $207.8k
Position Summary Cyber Security & Risk Strategy Senior Consultant Our Deloitte Cyber team understands the unique challenges... ...objectives, regulatory requirements, and risk appetite. It keeps the enterprise a step ahead of the evolving threat landscape and gives...
Local area
Visa sponsorship
Deloitte
Richmond, VA
4 days ago
Sr. Business Analyst - Incentive Compensation Risk Management
$111.2k - $126.9k
...Overview Sr. Business Analyst - Incentive Compensation Risk Management As a Senior Business Analyst at Capital One, you will apply your strategic... ...the appropriate balance of risk and reward across the enterprise. General Responsibilities: Analysis: Identify...
Full time
Temporary work
Part time
Local area
Capital One
Richmond, VA
a month ago
Principal Associate, Risk Specialist
$120.8k - $137.9k
...Overview Principal Associate, Risk Specialist Do you like working in the spotlight? Are you ready to work on the front line... ...most critical data is well-managed, high quality, and adheres to enterprise data management policies. You will play a pivotal role in...
Full time
Part time
Local area
Capital One
Richmond, VA
a month ago
Sourcing Analyst
$71.3k - $118.8k
...Surgical is seeking a Strategic Sourcing Analyst to support sourcing and supplier management initiatives across our... ...lead times, inventory trends, and risk indicators. Participate in supplier... ..., Oracle, JD Edwards, or similar enterprise systems. Professional...
Full time
Contract work
H1b
Work at office
McKesson
Richmond, VA
3 days ago
Senior Risk Specialist, Compliance Governance Training Analyst
$87.7k - $100.1k
...Overview Senior Risk Specialist, Compliance Governance Training Analyst The Enterprise Compliance Governance Training team is seeking a collaborative, analytically focused risk management professional to join our team. As a Sr Risk Specialist at the Senior Associate...
Full time
Part time
Work at office
Local area
Capital One
Richmond, VA
a month ago
Health Actuary Consulting Senior Manager
$180.2k - $355.1k
...landscape, review plan design changes and pricing decisions, and enterprise cost strategies for health plan and insurance clients Review... ...apply trend forecasting, predictive modeling, underwriting, and risk analysis methodologies to support client decision-making Advise...
Local area
Visa sponsorship
Deloitte
Richmond, VA
2 days ago
Business Analyst
...Job Title : Business Analyst Location: Richmond, VA, Hybrid Rate : Best competitive... ...office. This position is responsible for enterprise-wide business analysis of web... ...InterSources Inc , a Certified Diverse Supplier, was founded in 2007 and offers innovative...
Remote work
InterSources
Richmond, VA
4 days ago
Risk & Independence Contract Specialist Senior Manager - Managed Services
$91k - $321.5k
...At PwC, our people in risk and compliance focus on maintaining regulatory compliance and managing risks for clients, providing advice... ...internal controls to mitigate risks effectively. Those in enterprise risk management at PwC will focus on identifying and mitigating...
Contract work
H1b
PwC
Richmond, VA
4 days ago
Chief Data Risk Officer
$320k - $400k
...America)Please review the following job description:The Chief Data Risk Officer is a senior executive position responsible for building... ...the independent oversight and effective challenge function for Enterprise Data and Artificial Intelligence (AI) management. Oversight...
Full time
Part time
Work experience placement
Work at office
Shift work
Day shift
Truist
Richmond, VA
2 days ago
QA Analyst
...QA Analyst Location: Richmond, VA, Hybrid Rate: Best competitive rate Local candidates... ...the name of the project. Currently, Enterprise Solutions is not fully staffed to... ...: InterSources Inc, a Certified Diverse Supplier, was founded in 2007 and offers innovative...
Contract work
Local area
Remote work
InterSources
Richmond, VA
5 days ago
Vulnerability Management Analyst
...Vulnerability Management Analyst Location: Richmond, Virginia... ...Commission (SCC) is seeking a Risk and Vulnerability Analyst to... ...operations, and helping improve enterprise visibility into security... ...InterSources Inc, a Certified Diverse Supplier, was founded in 2007 and...
Contract work
InterSources
Richmond, VA
5 days ago
AI Risk Senior Specialist
$180k - $200k
...the following job description:This senior individual contributor will serve as a strategic advisor and subject-matter expert on AI risk, helping the organization navigate complex and emerging risks associated with the development and use of artificial intelligence. The...
Full time
Part time
Shift work
Day shift
Truist
Richmond, VA
3 days ago
Associate Analyst, Procurement Operations (Richmond, VA)
$72.9k - $107.1k
...services it needs? As an Associate Analyst, Procurement Operations ,... ...with customers, suppliers, and service providers to address... ...proficiency in using data to identify risks, opportunities, and potential... ...systems, reporting tools, or enterprise applications preferred....
Full time
Internship
Work at office
Remote work
Relocation package
Monday to Friday
3 days per week
Altria
Richmond, VA
3 days ago
SuccessFactors Integration Analyst (1-2)
...Insight Global is seeking a Senior HCM Integration Consultant (SuccessFactors) for a leading enterprise client. This is a 12-month contract engagement to start (ongoing extensions), that will be fully remote on EST core hours. This consultant will be responsible for...
Contract work
Remote work
Insight Global
Richmond, VA
1 day ago
Senior Risk Associate, Upmarket & Discover Card - Card Risk(Hybrid)
$96.5k - $110.1k
...Overview Senior Risk Associate, Upmarket & Discover Card - Card Risk(Hybrid) Capital One is seeking highly motivated Senior Risk Associates interested in supporting and learning about dedicated risk advisory for the Upmarket and Discover Card business segments....
Full time
Part time
Local area
Capital One
Richmond, VA
more than 2 months ago
Principal Risk Associate
$120.8k - $137.9k
...Overview Principal Risk Associate Level: Principal Associate Location: McLean or Richmond - VA and Hybrid About Business Cards & Payments (BC&P) | Build the Future. At BC&P, we bring a builder's mindset to work, just like the business owners we serve...
Full time
Part time
Work at office
Local area
Capital One
Richmond, VA
27 days ago
Data Analyst Manager - Model Risk Office
$164.8k - $188.1k
...Data Analyst Manager - Model Risk Office At Capital One, data is at the center of everything we do. When we launched as a startup we disrupted... ...Risk Office and serves for providing risk reporting to enterprise and process optimization for the department. Responsible...
Full time
Part time
Work experience placement
Work at office
Local area
Capital One
Richmond, VA
5 hours ago

Do you want to receive more vacancies?

Subscribe and receive similar vacancies to Enterprise Supplier Risk Analyst. Be the first to apply!