Remote Third-Party Risk Management Specialist

CSAA; South Carolina; Remote; USD 105,000 - 141,000; Full time

Benefits offered by this job

Annual bonus

401(k) with company match

Remote-first culture

Job summary

CSAA Insurance Group is seeking a remote Third Party Vendor Risk Management Specialist. You will assess risks from supplier relationships, profile vendors, and track mitigation efforts to reduce risk across the enterprise.

The role requires 6+ years in related risk work, including 4+ years in third-party risk or information security, with strong communication and collaboration skills to engage internal partners and stakeholders.

Qualifications

• A related bachelor's degree or equivalent combination of education and experience is required.
• 6+ years of related experience including 4+ years in Third Party Risk Management or information security.
• Self-directed, able to work independently and in a team.
• Strong communication and relationship building with internal partners.
• Ability to manage a high volume of assessments.

Responsibilities

• Conduct comprehensive risk assessments of third-party relationships across domains.
• Perform due diligence on third-party suppliers to meet standards and regulatory requirements.
• Develop and implement risk mitigation strategies and controls.
• Collaborate with Legal and Procurement on contract language.
• Prepare and present risk reports to senior management.

Skills

Risk assessment

Due diligence

Communication

Organizational skills

Relationship building

Education

Bachelor's degree or equivalent

Tools

Aravo

Archer

ServiceNow

Coupa Risk Assess

Job description

CSAA Insurance Group is seeking a remote Third Party Vendor Risk Management Specialist. You will assess risks from supplier relationships, profile vendors, and track mitigation efforts to reduce risk across the enterprise.

The role requires 6+ years in related risk work, including 4+ years in third-party risk or information security, with strong communication and collaboration skills to engage internal partners and stakeholders.