Senior Vendor Risk Manager, Cybersecurity & Compliance

Dalio Family Office; Kansas City (KS); Hybrid; USD 175,000 - 260,000; Full time

Benefits offered by this job

100% company paid medical premiums

17 company paid holidays

Hybrid work environment

Free catered food services for in‑offi

Generous PTO offering

Casual dress code

150% 401(k) match up to $7,500 and 100

Gym reimbursement, back up childcare,等

Job summary

Dalio Family Office is seeking a Vendor Risk Manager to own the end-to-end third-party risk lifecycle across a high-volume vendor portfolio, synthesizing cybersecurity, AI, privacy, financial, and AML risks into clear, actionable risk positions.

You will lead vendor risk assessments, document residual risk acceptances with executives, evaluate security controls, and translate threat models into concrete control requirements, coordinating with Legal, IT, Finance, and Compliance.

Qualifications

• Bachelor's degree in Information Security, Risk Management, CS, Cybersecurity, or related field.
• At least 7 years of progressive vendor risk management and related fields.
• Experience managing the full third-party/vendor risk lifecycle with end-to-end program.
• Experience with SOC 2, ISO 27001, penetration testing, and security assessments.

Responsibilities

• Own the VRM program end-to-end: strategy, policy, workflow, tooling, metrics, and executive reporting.
• Lead vendor risk assessments across cybersecurity, AI risk, privacy, financial, AML/CFT.
• Document risk acceptances with executives; coordinate with IT, Legal, Finance, Compliance.
• Evaluate vendor security controls using SOC 2, ISO 27001, testing results.
• Conduct threat modeling (STRIDE, PASTA) for high-risk vendors and document findings.
• Translate threat model outputs into concrete control requirements per OWASP/NIST/MITRE.
• Assist Legal to translate risks into contractual requirements.
• Apply FAIR or similar methods for high-impact vendor decisions.

Skills

Vendor risk management

Risk assessment

Security architecture

Communication

Leadership

Education

Bachelor's degree in Information Security, Risk Management, Computer Science, Cybersecurity, or related discipline

Job description

Dalio Family Office is seeking a Vendor Risk Manager to own the end-to-end third-party risk lifecycle across a high-volume vendor portfolio, synthesizing cybersecurity, AI, privacy, financial, and AML risks into clear, actionable risk positions.

You will lead vendor risk assessments, document residual risk acceptances with executives, evaluate security controls, and translate threat models into concrete control requirements, coordinating with Legal, IT, Finance, and Compliance.