Remote Third-Party Risk & Compliance Specialist

CSAA; Indiana (PA); Remote; USD 105,000 - 141,000; Full time

Benefits offered by this job

Annual bonus eligibility

401(k) with company match

Remote-first culture

Job summary

CSAA Insurance Group is hiring a Third Party Vendor Risk Management Specialist for a remote role across the United States, with Hawaii and Alaska exceptions. The role focuses on assessing supplier risk, evaluating controls, and driving reductions in the third-party risk portfolio.

The candidate should have at least a bachelor’s degree and 6+ years of related experience, including 4+ years in TPRM or information security.

Qualifications

• Related bachelor's degree or equivalent combination of education and experience is required.
• 6+ years of related experience including a minimum of 4+ years in Third Party Risk Management or information security.
• Self-directed, able to work independently as well as in a team.
• Strong communication skills and ability to build relationships with internal partners.
• Excellent organizational skills to manage a high volume of assessments.
• Knowledge of third-party risk management governance, policies, and structures.
• Understanding of relevant legal and compliance requirements.

Responsibilities

• Conduct comprehensive risk assessments of third-party relationships across multiple risk domains.
• Perform due diligence on third-party suppliers to ensure compliance with standards and regulatory requirements.
• Develop and implement risk mitigation strategies and controls.
• Collaborate with Legal and Procurement to ensure appropriate risk provisions in contracts.
• Prepare and present risk reports to senior management and stakeholders.
• Stay updated on laws, regulations, and best practices related to third-party risk management.
• Develop and deliver training programs to educate employees on third-party risk management policies.
• Support senior executives to drive portfolio reduction and stronger risk posture.

Skills

Third-Party Risk Management

Information Security

Communication

Organizational Skills

Education

Bachelor's degree

Tools

Aravo

Archer

ServiceNow

Coupa Risk Assess

Job description

CSAA Insurance Group is hiring a Third Party Vendor Risk Management Specialist for a remote role across the United States, with Hawaii and Alaska exceptions. The role focuses on assessing supplier risk, evaluating controls, and driving reductions in the third-party risk portfolio.

The candidate should have at least a bachelor’s degree and 6+ years of related experience, including 4+ years in TPRM or information security.