Vendor Risk & Compliance Specialist

Socket.dev; Laurel (MD); On-site; USD 40,000 - 49,000; Full time

Benefits offered by this job

Medical benefits

401(k) with company match

Company-paid life insurance

Job summary

Socket.dev is seeking a risk management professional to lead vendor due diligence, perform risk assessments, and drive improvements in governance and controls. The role collaborates with Information Security, IT, Compliance, Finance, and Internal Audit to align with regulatory expectations and industry best practices.

Responsibilities include monitoring vendor performance, maintaining risk inventories, and producing dashboards and reports.

Qualifications

• Associates degree in Business Administration, Finance, Risk Management, IT, or related field (or equivalent work experience).
• Two to four years of relevant experience in vendor management, contract administration, compliance, risk management, insurance administration, audit, or related function.
• Knowledge of third-party risk management, enterprise risk management, contract management, and corporate insurance processes.
• Experience with risk management, governance, risk and compliance (GRC), contract management, or vendor management software preferred.
• General knowledge of regulatory requirements including NCUA, FFIEC, GLBA, and third-party risk management expectations.
• Professional certifications preferred, e.g., CRVPM, NCRM, or similar.
• Or an equivalent combination of education and experience

Responsibilities

• Evaluate vendor due diligence documentation and identify material risks and control deficiencies.
• Perform vendor risk assessments and ongoing monitoring per program requirements.
• Review and track due diligence docs in risk management databases and coordinate with vendors and internal stakeholders.
• Analyze trends in vendor performance and risk indicators to identify emerging risks and corrective actions.
• Prepare reports, dashboards, and scorecards related to vendor management and risk activities.
• Coordinate and manage vendor onboarding activities and assess risk ratings.
• Review contractual provisions for risk considerations and coordinate resolution with business owners.
• Analyze insurance claims, coverage, and renewal information to identify exposures and improvements.

Skills

Vendor risk management

GRC knowledge

Contract management

Regulatory knowledge

SOC reports

Data analysis

Microsoft Office

Communication skills

Collaborative work

Education

Associate degree or equivalent experience

Tools

GRC software

Vendor management software

Job description

Socket.dev is seeking a risk management professional to lead vendor due diligence, perform risk assessments, and drive improvements in governance and controls. The role collaborates with Information Security, IT, Compliance, Finance, and Internal Audit to align with regulatory expectations and industry best practices.

Responsibilities include monitoring vendor performance, maintaining risk inventories, and producing dashboards and reports.