Remote Third-Party Risk Management Specialist

CSAA; South Dakota; Remote; USD 105,000 - 141,000; Full time

Job summary

CSAA Insurance Group (CSAA IG), a AAA insurer, is hiring a remote Third Party Vendor Risk Management Specialist to assess supplier risks and the effectiveness of controls.

The role focuses on risk profiling, due diligence, remediation, and reporting to senior management, with strong collaboration across Legal, Procurement, and Compliance to maintain regulatory alignment and a resilient vendor portfolio.

Qualifications

• Bachelor's degree or equivalent required.
• 6+ years in third-party risk management or information security.
• Self-directed, able to work independently and in a team.
• Strong communication and relationship-building with internal partners.
• Ability to manage a high volume of assessments and stay organized.

Responsibilities

• Conduct comprehensive risk assessments of third-party relationships to identify risks across domains.
• Perform due diligence on third-party suppliers to meet standards and regulatory requirements.
• Develop and implement risk mitigation strategies and controls to minimize exposure.
• Collaborate with Legal and Procurement to ensure risk provisions in contracts.
• Prepare and present reports on third-party risk activities to senior management.
• Stay updated on laws and industry best practices related to third-party risk management.
• Develop and deliver training programs to educate employees on policies and procedures.
• Support executives to drive a stronger risk posture and portfolio reduction.

Skills

Risk assessment

Due diligence

Risk mitigation

Contract review

Reporting

Regulatory compliance

Training and awareness

Communication

Organizational skills

Education

Bachelor's degree or equivalent

Tools

Aravo

Archer

ServiceNow

Coupa Risk Assess

Job description

CSAA Insurance Group (CSAA IG), a AAA insurer, is hiring a remote Third Party Vendor Risk Management Specialist to assess supplier risks and the effectiveness of controls.

The role focuses on risk profiling, due diligence, remediation, and reporting to senior management, with strong collaboration across Legal, Procurement, and Compliance to maintain regulatory alignment and a resilient vendor portfolio.