Supervisor, IT Security Vendor Risk Management

Raymond James; Saint Petersburg (FL); Hybrid; USD 120,000 - 190,000; Full time

Benefits offered by this job

Benefits package

Hybrid work model

Job summary

Raymond James is seeking an IT Security Vendor Risk Lead to oversee risk-based assessments for third-party engagements. The role requires coordinating with Procurement, Legal, IT, and business owners to ensure compliance and timely delivery.

Hybrid work model with in-office presence and emphasis on clear risk communication, governance, and continuous process improvement. Visa sponsorship is not offered for this role.

Qualifications

• Experience leading risk assessment efforts for third-party vendors.
• Understanding of information security and technology risk domains.
• Ability to apply risk concepts and translate findings into actionable conclusions.
• Proven track record coaching and guiding team members to meet timelines.

Responsibilities

• Leads a team responsible for risk-based due diligence assessments for third-party engagements.
• Oversees evaluation of information security and technology risks for vendors, products, and services.
• Ensures vendor risk outcomes align with risk appetite and regulatory obligations.
• Maintains quality, consistency, and timeliness of vendor risk assessments.
• Translates technical findings into clear risk conclusions and recommendations for stakeholders.
• Provides risk guidance to business and technology partners.
• Collaborates with Procurement, Legal, IT, and business owners throughout the lifecycle.
• Ensures adherence to internal policies and external regulatory expectations.
• Drives continuous improvement of the vendor risk management program.
• Manages team performance and day-to-day execution.

Skills

Leadership

Vendor risk management

IT security

Regulatory awareness

Communication

Education

High School (HS)

Job description

Job Description Summary

This role provides essential leadership oversight to ensure consistent coverage and quality of IT Security Vendor Risk Assessments while improving coordination, standardization, and risk-based prioritization. Dedicated supervision will drive measurable time reduction through operational efficiencies, reduce rework and process overhead, and enable senior leaders to focus on program strategy and regulatory readiness.

Job Description

This position follows our hybrid workstyle policy: Expected to be in a Raymond James office location a minimum of 10-12 days a month.

Please note: This role is not eligible for Work Visa sponsorship, either currently or in the future.

Technical Skills/Experience:

• Foundational experience in IT security, vendor risk management, third party risk, or similar risk functions
• Working knowledge of core information security and technology risk domains sufficient to review assessments, identify gaps, and accelerate complex issues appropriately.
• Familiarity with internal policies, standards, and common regulatory expectations impacting third party risk management, with the ability to follow established procedures and recognize potential non compliance trends for escalation.
• Ability to apply basic risk concepts (inherent risk, control effectiveness, residual risk) to support consistent risk ratings and clear, defensible assessment outcomes.
• Experience reviewing and validating the work of others for completeness, accuracy, and adherence to standards, and providing constructive feedback to improve assessment quality and consistency.
• Developing people leadership skills, including task prioritization, workload coordination, coaching junior team members, and tracking team deliverables against defined timelines and objectives.
• Strong written and verbal communication skills, with the ability to summarize assessment results and risks in clear, business appropriate language for stakeholders and management.

Responsibilities:

• Leads a team responsible for conducting risk based due diligence assessments for third party supplier engagements
• Oversees the evaluation of information security and technology risks associated with vendors, products, and services
• Ensures vendor risk outcomes align with the firm's risk appetite and regulatory obligations
• Accountable for the quality, consistency, and timeliness of vendor risk assessments
• Translates technical and regulatory findings into clear risk conclusions and actionable recommendations
• Provides guidance and risk insights to business and technology stakeholders
• Partners closely with Procurement, Legal, IT, and business owners throughout the vendor lifecycle
• Ensures adherence to internal policies and external regulatory expectations
• Drives continuous improvement of the vendor risk management program
• Manages team performance, development, and day to day execution

Education

High School (HS) (Required)

Work Experience

General Experience - 3 to 6 years, Manager Experience - 13 months to 3 years

Certifications

Travel

Less than 25%

Workstyle

Hybrid

The total compensation for this position includes base salary or wages, and may include components such as additional compensation (cash or equity), discretionary bonuses, or commissions. This position is eligible for a benefits package that may include medical, dental, and vision; life insurance; critical illness insurance and accident insurance; disability benefits; retirement savings; paid time off (including vacation, holidays, and sick leave); and parental leave. Eligibility for benefits and specific offerings may vary based on position and employment status. To view more details of the benefits offered, visit Myrjbenefits.com.

At Raymond James our associates use five guiding behaviors (Develop, Collaborate, Decide, Deliver, Improve) to deliver on the firm's core values of client-first, integrity, independence and a conservative, long-term view.

We expect our associates at all levels to:

• Grow professionally and inspire others to do the same
• Work with and through others to achieve desired outcomes
• Make prompt, pragmatic choices and act with the client in mind
• Take ownership and hold themselves and others accountable for delivering results that matterContribute to the continuous evolution of the firm

At Raymond James - as part of our people-first culture, we honor, value, and respect the uniqueness, experiences, and backgrounds of all of our Associates. When associates bring their best authentic selves, our organization, clients, and communities thrive. The Company is an equal opportunity employer and makes all employment decisions on the basis of merit and business needs.