Remote Third-Party Risk & Compliance Specialist

CSAA; West Virginia; Remote; USD 105,000 - 141,000; Full time

Job summary

CSAA Insurance Group is hiring a Remote Third Party Vendor Risk Management Specialist to assess and mitigate risks from supplier relationships. The role involves risk profiling, due diligence, and effective risk communication across the enterprise, with collaboration across Legal, Procurement, and Compliance teams.

Ideal candidates have 6+ years in risk management or information security, strong self-direction, and proven ability to manage multiple assessments while communicating complex risks

Qualifications

• Bachelor's degree or equivalent required.
• 6+ years of related experience including at least 4+ years in Third-Party Risk Management or information security.
• Self-directed, able to work independently and with a team.
• Strong communication and relationship-building skills.
• Organizational skills to manage many assessments.
• Knowledge of TPRM governance, policies, and structures.
• Understanding of applicable legal and compliance requirements.

Responsibilities

• Conduct risk assessments of third-party relationships across multiple domains.
• Perform due diligence to ensure suppliers meet standards and regulations.
• Develop and implement risk mitigation strategies and controls.
• Collaborate with Legal and Procurement to include risk provisions in contracts.
• Prepare reports for senior management and stakeholders; communicate findings and mitigation plans.
• Stay updated on laws and best practices; ensure regulatory compliance.
• Develop and deliver training on third-party risk policies and procedures.
• Assist executives in strengthening risk posture and reducing vendor risk portfolio.

Job description

CSAA Insurance Group is hiring a Remote Third Party Vendor Risk Management Specialist to assess and mitigate risks from supplier relationships. The role involves risk profiling, due diligence, and effective risk communication across the enterprise, with collaboration across Legal, Procurement, and Compliance teams.

Ideal candidates have 6+ years in risk management or information security, strong self-direction, and proven ability to manage multiple assessments while communicating complex risks