Remote Third-Party Risk Lead

CSAA; Louisiana (MO); Remote; USD 105,000 - 141,000; Full time

Job summary

CSAA Insurance Group (CSAA IG) is seeking a Third Party Vendor Risk Management Specialist to assess risks from supplier relationships and evaluate their controls across the enterprise. This remote position supports risk identification and portfolio reduction while enabling flexible, home-based work.

The role will perform profiling, due diligence, mitigation, and reporting, working with Legal, Procurement, and senior leadership to drive risk-aware decisions in a remote-first environment.

Qualifications

• Bachelor's degree or equivalent required.
• 6+ years related experience including a minimum of 4+ years in Third Party Risk Management or information security.
• Self-directed, able to work independently, as well as within a team.
• Communication skills and relationship building with internal business partners.
• Knowledge of third-party risk management governance, policies, and organizational structures.

Responsibilities

• Risk Assessment: Conduct comprehensive risk assessments of third-party relationships to identify and evaluate potential risks across multiple risk domains.
• Due Diligence: Perform due diligence on third-party suppliers to ensure they meet the organization's standards and regulatory requirements.
• Risk Mitigation: Develop and implement risk mitigation strategies and controls to minimize the organization's exposure to third-party risks.
• Contract Review: Collaborate with Legal and Procurement teams to ensure appropriate risk mitigation provisions are included in the contract language.
• Reporting and Communication: Prepare and present reports on third-party risk management activities to senior management and relevant stakeholders. Communicate findings, recommendations, and risk mitigation strategies effectively to ensure awareness and understanding across the organization.
• Regulatory Compliance: Stay updated on relevant laws, regulations, and industry best practices related to third-party risk management. Ensure the organization's compliance with applicable regulations and proactively address any changes or updates.
• Training and Awareness: Develop and deliver training programs to educate employees on third-party risk management policies, procedures, and best practices. Foster a culture of risk awareness and accountability throughout the organization.
• Support efforts with senior executives, inside and outside the organization, to adopt a more rigorous risk posture and drive third-party vendor risk management and portfolio reduction.

Skills

Communication skills

Self-directed

Team collaboration

Organizational skills

Risk management knowledge

Education

Bachelor's degree or equivalent

Tools

Aravo

Archer

ServiceNow

Coupa Risk Assess

Job description

CSAA Insurance Group (CSAA IG) is seeking a Third Party Vendor Risk Management Specialist to assess risks from supplier relationships and evaluate their controls across the enterprise. This remote position supports risk identification and portfolio reduction while enabling flexible, home-based work.

The role will perform profiling, due diligence, mitigation, and reporting, working with Legal, Procurement, and senior leadership to drive risk-aware decisions in a remote-first environment.