---
title: 'Vendor Risk Manager at DFO Referrals'
canonical: 'https://feeny.ai/job/vendor-risk-manager-dfo-referrals-westport-1jethntygqzx'
type: 'job'
last_seen: '2026-09-06'
---

# Vendor Risk Manager at DFO Referrals

- **Company:** DFO Referrals
- **Location:** Westport, CT
- **Posted:** 2026-07-02
- **Last confirmed live:** 2026-09-06
- **Apply:** https://job-boards.greenhouse.io/dforeferrals/jobs/6107769004

## Job description

Vendor Risk Manager​

Dalio Family Office

Dalio Family Office Overview:

The Dalio Family Office (DFO) supports Barbara and Ray Dalio and their family in their ventures, investments, and philanthropic efforts under Dalio Philanthropies, which includes OceanX, Dalio Education, Endless Network, and the Beijing Dalio Foundation. The core of the DFO’s culture is built around meaningful work and meaningful relationships and the family’s commitment to giving back. The office is headquartered in Westport, CT with regional offices in New York City, Singapore, and Abu Dhabi.

Position Summary:

​​The Vendor Risk Manager owns the end-to-end third-party risk lifecycle, onboarding, diligence, monitoring, and exit across a high-volume, diverse vendor portfolio. You will synthesize risk across cybersecurity, AI, privacy, financial, and AML/CFT/sanctions domains into clear, actionable risk positions, performing structured threat modeling for high-exposure vendors. ​

Day-to-day responsibilities would include a combination of the following:

- Own the VRM program end-to-end: strategy, policy, procedure, workflow, tooling, metrics, and executive reporting for CISO/CRO/board visibility.
- ​Lead holistic vendor risk assessments across cybersecurity, AI risk, privacy, financial, AML/CFT/sanctions.
- Document residual risk acceptances with named accountable executives and time-boxed review dates; coordinate with IT, Legal, Finance, and Compliance as appropriate.
- ​Evaluate and monitor vendor security controls based on data sensitivity and business criticality, leveraging industry frameworks and evidence such as SOC 2, ISO 27001, penetration testing, and security assessments.
- Conduct structured threat models (STRIDE, PASTA) for high risk vendors, and document findings as durable artifacts informing contracting, monitoring, and exit planning.
- Translate threat model outputs into concrete, testable control requirements drawing from OWASP (ASVS, API Security Top 10, LLM/Agentic Top 10), NIST (SP 800-53, SP 800-161, CSF 2.0, SP 800-207), and MITRE ATT&CK; scale requirements to vendor tier.
- Partner with Legal to translate identified risks into enforceable contractual requirements.
- Apply FAIR or comparable quantitative methods for high-impact vendor decisions, expressing cyber risk in loss-exposure terms that resonate with senior leadership.
- Advise IT, Engineering and business teams on vendor integration architecture (SSO/SCIM, OAuth, conditional access, DLP, segmentation, BYOK, VPC peering) and maintain approved reference patterns.
- ​Drive automation and tooling maturity to handle high vendor volume without proportional headcount growth; produce program dashboards tracking throughput, cycle time, recertification compliance, and remediation aging.

​​ The ideal candidate will possess the following knowledge, skills, attributes, and values:

- Expert knowledge of third-party/vendor risk management
- Strong risk assessment and analytical skills
- Technical understanding of enterprise security architecture
- Excellent communication and stakeholder management skills
- Proven ability to lead and optimize vendor risk programs

Illustrative Benefits:

- 100% company paid medical premiums
- 17 company paid holidays
- Friday summer hours
- Monthly community happy hours
- Hybrid work environment
- Free catered food services for in-office days
- Generous PTO offering
- Casual dress code
- 150% 401(k) match up to $7,500 and 100% match above $7,500 ($15k match limit)
- Gym reimbursement, back up childcare services, insurance, financial, and legal services, and much more!

Qualifications:

- Bachelor’s degree in Information Security, Risk Management, Computer Science, Cybersecurity, or a related discipline.
- At least 7 years of progressive experience across vendor risk management, cybersecurity architecture, security engineering, GRC, audit, or related fields.
- Experience managing the full third-party/vendor risk lifecycle, including vendor onboarding, due diligence, risk assessments, continuous monitoring, recertification, remediation tracking, and vendor exit planning, with at least 2 years owning an end-to-end TPRM program.
- Strong technical knowledge of cybersecurity frameworks, standards, and methodologies including NIST, ISO 27001/27002, OWASP, MITRE ATT&CK, Shared Assessments, threat modeling approaches (STRIDE/PASTA), and risk management practices.
- Hands-on experience evaluating enterprise security controls, cloud and integration architectures, SOC 2 Type II reports, ISO certifications, penetration testing results, data protection requirements, and third-party security risks across complex technology environments.
- Ability to communicate complex technical and risk concepts to executive stakeholders, collaborate effectively across business functions
- 10% travel as required based on business needs.

Compensation:

Compensation for the role includes a competitive salary in the range from $175,000 -$260,000 (inclusive of a merit-based bonus, dependent on years of experience, level of education obtained, as well as applicable skillset) and an excellent benefits package, including  paid time off ranging from 15 to 25 days based on years of service, paid sick and safe leave, dental, vision, life and disability insurance, paid parental time off, birth mother recovery pay, sick family member pay, parental ramp back up program, gym reimbursement and generous employer match for 401k.

Please note we are unable to provide immigration sponsorship for this position.

At the DFO, we believe our biggest asset is our people. We are proud to be an equal opportunity employer, hiring and developing individuals from diverse backgrounds and experiences to add to our collaborative culture. The DFO treats all candidates and employees with respect and does not discriminate in our recruiting, hiring, and promoting processes and general treatment during employment, including on the basis of actual or perceived race, creed, color, religion, sex, age, sexual orientation, gender identity and/or expression, alienage or national origin, ancestry, citizenship status, marital status, veteran status, or disability.

## About DFO Referrals

## Company Overview
- **One-liner**: DFO Referrals is the talent acquisition and recruitment platform for the Dalio Family Office, which manages the ventures, investments, and philanthropic initiatives of Ray and Barbara Dalio.
- **Entity Type**: Private (family office)
- **Headquarters**: Westport, Connecticut, United States (with additional offices in New York City, Singapore, and Abu Dhabi)
- **Founded**: Year not publicly disclosed (the Dalio Family Office has been active for many years; DFO Referrals as a hiring entity likely launched in recent years)
- **Founders**: Ray Dalio and Barbara Dalio (founders of the Dalio Family Office)

## Core Business
- **Primary industry/industries**: Executive Offices, Family Office, Financial Services, Philanthropy, Ocean Exploration, Education
- **Target customers**: Not applicable (DFO Referrals supports the internal hiring needs of the Dalio Family Office and its affiliated entities; it does not serve external customers)
- **Mission or purpose statement**: The Dalio Family Office is rooted in a culture of meaningful work and meaningful relationships, supporting the family’s legacy of giving back through Dalio Philanthropies, OceanX, Dalio Education, Endless Network, and the Beijing Dalio Foundation.

## Products & Services
DFO Referrals is not a product company; it is a hiring arm. The entities it supports include:
- **Dalio Family Office (DFO)**: Core investment and administrative services for the Dalio family.
- **Dalio Philanthropies**: Philanthropic initiatives across ocean exploration, education, and global giving.
- **OceanX**: A non-profit that combines exploration, research, and multimedia education to transform public understanding of the ocean.
- **Dalio Education**: Education-focused programs and partnerships.
- **Endless Network**: A philanthropic initiative focused on expanding internet access.

## Market Standing
- **Valuation/Market Cap**: Not disclosed (private family office)
- **Key Metric**: Total Funding – Not applicable (privately funded); Headcount – 6 employees reported on LinkedIn [linkedin.com/company/dalio-family-office] (likely refers to core DFO staff; the broader ecosystem employs many more)
- **Notable Investors/Partners**: The Dalio family (self-funded); partners include Bridgewater Associates (founded by Ray Dalio), various philanthropic organizations, and academic institutions.
- **Growth Signals**: 40% headcount growth YoY at the core family office [linkedin.com/company/dalio-family-office]; active job postings include senior roles in finance, technology, legal, and operations (17+ open positions as of June 2026) [greenhouse.io, jobera.com]; expanding presence in Singapore and Abu Dhabi.

## Competitive Advantages
- **Access to the Dalio ecosystem**: Employees work directly with the family office, gaining exposure to high-impact investments, philanthropy, and global initiatives.
- **Meaningful work**: Roles support ocean conservation, education, and global connectivity, offering a sense of purpose beyond profit.
- **Strong compensation and benefits**: Competitive salaries (ranges from $95k–$655k depending on role) plus 100% company-paid medical premiums, 17 paid holidays, generous PTO, 150% 401(k) match up to $7,500, gym reimbursement, and hybrid work environment [scoutify.com].
- **Low turnover / high retention culture**: Focus on "meaningful work and meaningful relationships" as core values.

## Strategic Focus
- **Current priorities**: Expanding the talent base for the family office and its philanthropic arms, particularly in technology (CISO, DevSecOps, Data Engineering), finance (senior accounting, tax advisory), and international operations (Singapore, APAC partnerships).
- **Direction for growth**: Deepening the family’s impact in ocean exploration (OceanX), education, and global philanthropy, while maintaining a lean, high-performance team.

## Why Work Here
- **Culture highlights**: Mission-driven, collaborative, high-performing environment with a focus on meaningful relationships [scoutify.com].
- **Remote/hybrid/office policy**: Hybrid work environment; many roles are on-site in Westport, CT or New York City, with some roles in Singapore (on-site). 100% remote roles are rare [jobera.com].
- **Notable perks or engineering culture**: 100% company-paid medical premiums, 17 paid holidays, generous PTO, 150% 401(k) match up to $7,500 (plus 100% match above $7,500, up to $15k match limit), gym reimbursement, and hybrid flexibility [scoutify.com]. Engineering roles (e.g., Senior DevSecOps Engineer, Senior Data Engineer) offer competitive compensation ($200k–$350k+ range) [scoutify.com].
- **Visa sponsorship**: Conflicting reports; USCIS data shows no H-1B petition history for DFO Referrals, but some sources indicate sponsorship for international candidates [scoutify.com]. Candidates should inquire directly during the application process.

## Sources
1. [greenhouse.io](https://job-boards.greenhouse.io/dforeferrals) – DFO Referrals job board, listing 16+ open positions.
2. [linkedin.com/company/dalio-family-office](https://www.linkedin.com/company/dalio-family-office) – Dalio Family Office LinkedIn profile (headcount, growth, description).
3. [scoutify.com](https://scoutify.com/companies/dfo-referrals/) – DFO Referrals careers page with compensation ranges, perks, H1B sponsorship discussion.
4. [jobalmanac.com](https://www.jobalmanac.com/companies/dforeferrals) – Additional job listings and company details.
5. [jobera.com](https://jobera.com/employer/dforeferrals/) – List of 17 open positions with salary ranges and location classification.
6. [daliofamilyoffice.com](https://daliofamilyoffice.com) – Official website (not deeply crawled, but primary source for entity description).

## Other roles at DFO Referrals

- [IT Service Associate](https://feeny.ai/job/it-service-associate-dfo-referrals-westport-hettp4hpkj76) — Westport, CT
- [Senior Accounting Associate, Investment](https://feeny.ai/job/senior-accounting-associate-investment-dfo-referrals-westport-zdeqs4fpfngb) — Westport, CT
- [Senior Product Designer](https://feeny.ai/job/senior-product-designer-dfo-referrals-westport-6qxs1kjhk4z2) — Westport, CT
- [Chief Human Resources Officer](https://feeny.ai/job/chief-human-resources-officer-dfo-referrals-westport-kr9rc43mwf9w) — Westport, CT
- [VP, Portfolio Analytics & Reporting](https://feeny.ai/job/vp-portfolio-analytics-reporting-dfo-referrals-westport-f44yhg6gfht5) — Westport, CT
- [IT Operations Specialist](https://feeny.ai/job/it-operations-specialist-dfo-referrals-westport-connecticut-6q3p2pe7qz1t) — Westport Connecticut, United States
- [AI Governance Engineer](https://feeny.ai/job/ai-governance-engineer-dfo-referrals-westport-yb6j1d1d30gq) — Westport, CT
- [Senior Tax Manager, Trust](https://feeny.ai/job/senior-tax-manager-trust-dfo-referrals-westport-72961mtxwx8j) — Westport, CT
- [Executive Assistant](https://feeny.ai/job/executive-assistant-dfo-referrals-westport-ja6y2phd6eep) — Westport, CT
- [Senior Tax Manager, International](https://feeny.ai/job/senior-tax-manager-international-dfo-referrals-westport-2vm34hv5hfa3) — Westport, CT