Referso Jobs

Manager, Enterprise Risk Management

DaVita Kidney Care · Posted Nov 10, 2026

Open

Denver, Colorado, United States
Full-time · Manager
$85K–$135K per year
2–3 years

Manager, Enterprise Risk Management

DaVita Kidney Care · Posted Nov 10, 2026

Open

Denver, Colorado, United States
Full-time · Manager
$85K–$135K per year
2–3 years

Manager, Enterprise Risk Management

DAVITA · Posted Nov 10, 2026

Open

Denver, Colorado, United States
Hybrid
Full-time · Associate
$85K–$135K per year
2–3 years

Apply with RefersoAI Apply on careers page

Lead and manage enterprise risk management functions including corporate insurance, third‑party risk, and vendor intelligence, while collaborating with cross‑functional teams and presenting to senior leadership.

Compensation

The Salary Range for the role is $85,000.00 - $135,000.00 per year.

Responsibilities

Lead annual data collection across corporate insurance lines
Negotiate with external brokers and underwriters
Review commercial contracts for risk
Administer COI program for vendors
Support implementation of third‑party risk platform

Requirements

Bachelor’s degree from an accredited institution
Nice to have: Associate in Risk Management (ARM)
Nice to have: Chartered Property Casualty Underwriter (CPCU)
Nice to have: RIMS‑CRMP
Nice to have: Experience with GRC/TPRM platforms

Skills

Corporate risk management Commercial insurance Third‑party risk management Vendor risk assessment Contract review

Third-Party Risk Management, Senior Associate

Huron · Posted Nov 10, 2026

Open

Bangalore, India
Senior
3–5 years

Apply with RefersoAI Apply on careers page

Responsible for enhancing Huron’s vendor risk management practices, maintaining industry standards across vendor security reviews, managing security questionnaires and evidence collection, tracking remediation items to closure, and maintaining accurate third‑party risk records.

Responsibilities

Implement continual process improvement to existing vendor review practices
Conduct security reviews of prospective and existing vendors
Assess vendor responses and supporting evidence to identify gaps
Recommend risk ratings and escalate higher‑risk vendors
Support reassessment of existing vendors

Requirements

Undergraduate degree
Nice to have: ServiceNow
Nice to have: OneTrust
Nice to have: Archer
Nice to have: ProcessUnity

Skills

vendor security assessment GRC SOC 2 ISO 27001 NIST security frameworks vendor risk management

Cyber Risk Business Development Manager

Protecht Group · Posted Nov 8, 2026

Open

Sydney, New South Wales, Australia
Manager
3–5 years

Apply with RefersoAI Apply on careers page

Lead strategic conversations and drive new business opportunities in cyber risk and third‑party risk solutions across APAC, UK and North America.

Responsibilities

Lead customer discovery and value based sales conversations focused on cyber risk, vendor risk, compliance and resilience.
Position Protecht's cyber risk capabilities and demonstrate how they connect into a broader integrated GRC platform.
Build strong relationships across Security, Risk, Compliance, Procurement and Executive leadership teams.
Partner closely with Marketing and channel partners to drive pipeline growth and revenue.
Run complex sales opportunities from qualification through to negotiation and close.

Skills

cyber risk information security GRC SaaS solutions ISO 27001 NIST CSF SOC 2 CPS 234

Senior Compliance Specialist

Huron · Posted Nov 6, 2026

Open

Bangalore, India
Associate
2–4 years

Apply with RefersoAI Apply on careers page

As the Sr. Compliance Specialist (Associate), you will support Huron’s governance, risk, and compliance program and its certification, assurance, and regulatory obligations, including ISO/IEC 27001:2022, ISO 22301, SOC 2, HIPAA, CMMC, and SOX, working closely with IT, Legal, and business partners and SMEs.

Responsibilities

Support the review, update, and rollout of Huron IT and Security policies and procedures, and maintain ISMS documentation for ISO/IEC 27001:2022
Maintain the GRC risk and issue log and risk exception records, working with owners to keep ratings, due dates, and status current
Manage policy exceptions (vulnerability, end-of-life (EOL), and other requests) with business teams, tracking deadlines and obtaining leadership approval
Gather data for GRC and security metrics, KPIs, and KRIs for management reporting
Support business impact analyses (BIAs) and business continuity and disaster recovery (DR) testing, including scoping, scheduling, evidence, and follow-up

Requirements

Bachelor’s degree required, preferably in Information Security, Information Technology, Information Systems, or a related discipline
Nice to have: GRC platforms
Nice to have: ISO 27001 Lead Auditor
Nice to have: CISA
Nice to have: CRISC

Skills

governance risk

Third-Party Risk Management Analyst (TPRM) – Vendor Risk & Due Diligence

Recrute Action · Posted Nov 4, 2026

Open

Toronto, Ontario, Canada
Hybrid
Contract · Mid
$42–$55 per hour
2–5 years

Apply with RefersoAI Apply on careers page

Analyze and manage third‑party risk across the vendor lifecycle, conducting risk assessments, due diligence, monitoring, and remediation.

Compensation

Salaried: $42-47 per hour. Incorporated Business Rate: $50-55 per hour. 6-month contract.

Responsibilities

Conduct and provide effective challenge of Inherent Risk Questionnaires
Challenge responses where information appears incomplete, inconsistent, or does not appropriately reflect service criticality, data sensitivity, technology dependencies, regulatory impact, or other relevant risk considerations
Ensure the Inherent Risk Questionnaire appropriately identifies the supplier’s inherent risk
Escalate material gaps, inconsistencies, or unresolved concerns before the inherent risk assessment is finalized
Perform financial due diligence, including reviews of supplier financial health, financial risk indicators, and credit information

Requirements

Bachelor's degree in a related field
Nice to have: Familiarity with third-party risk regulatory expectations
Nice to have: Experience reviewing SOC reports, ISO certifications, audit reports
Nice to have: Experience with third-party risk or vendor management platforms such as Archer, Ivalua, or ProcessUnity
Nice to have: Understanding of cybersecurity, information security, privacy, business continuity, and technology risk concepts

Manager, Enterprise Risk Management

Manager, Enterprise Risk Management

Compensation

Responsibilities

Requirements

Skills

Benefits

Manager, Enterprise Risk Management

Compensation

Responsibilities

Requirements

Skills

Third-Party Risk Management, Senior Associate

Responsibilities

Requirements

Skills

Cyber Risk Business Development Manager

Responsibilities

Skills

Senior Compliance Specialist

Responsibilities

Requirements

Skills

Third-Party Risk Management Analyst (TPRM) – Vendor Risk & Due Diligence

Compensation

Responsibilities

Requirements

Benefits

Skills

ProcessUnity jobs

Compensation

Responsibilities

Requirements

Skills

Benefits

Compensation

Responsibilities

Requirements

Skills

Responsibilities

Requirements

Skills

Responsibilities

Skills

Responsibilities

Requirements

Skills

Compensation

Responsibilities

Requirements

Benefits

Skills