Remote Third-Party Risk Management Specialist

CSAA; Washington (District of Columbia); Remote; USD 105,000 - 141,000; Full time

Benefits offered by this job

Annual bonus eligibility

401(k) with company match

Remote-first culture

Job summary

CSAA Insurance Group is seeking a highly experienced Third Party Vendor Risk Management Specialist to assess and mitigate risks from supplier relationships. The role supports risk identification and portfolio reduction in a remote, U.S.-based environment.

Responsibilities include risk assessments, due diligence, contract review collaboration with Legal and Procurement, and reporting to senior leadership. Prior experience in information security or risk governance is preferred, with ongoing

Qualifications

• Bachelor's degree or equivalent combination of education and experience is required.
• 6+ years related experience including a minimum of 4+ years in Third Party Risk Management or information security.

Responsibilities

• Conduct risk assessments of third-party relationships across multiple domains.
• Perform due diligence to ensure supplier standards and regulatory requirements are met.
• Develop and implement risk mitigation strategies to minimize exposure.
• Collaborate with Legal and Procurement to include appropriate risk provisions in contracts.
• Prepare reports on risk activities for senior management and stakeholders.
• Stay updated on laws, regulations and best practices related to third-party risk management.
• Develop and deliver training programs to educate employees on risk policies and procedures.

Skills

Communication skills

Independence

Organizational skills

Governance knowledge

Legal/compliance knowledge

Education

Bachelor's degree

Tools

Aravo

Archer

ServiceNow

Coupa Risk Assess

Job description

CSAA Insurance Group is seeking a highly experienced Third Party Vendor Risk Management Specialist to assess and mitigate risks from supplier relationships. The role supports risk identification and portfolio reduction in a remote, U.S.-based environment.

Responsibilities include risk assessments, due diligence, contract review collaboration with Legal and Procurement, and reporting to senior leadership. Prior experience in information security or risk governance is preferred, with ongoing