Remote Third-Party Risk Specialist

CSAA Insurance Group; Arizona; Hybrid; USD 105,000 - 140,000; Full time

Benefits offered by this job

Remote-first culture

Flexible Workplace

Annual discretionary bonus

Job summary

CSAA Insurance Group is seeking a Remote Third Party Vendor Risk Management Specialist to assess supplier risks and governance controls, driving risk reduction across the enterprise. The role emphasizes collaboration with Legal, Procurement, and Compliance teams to ensure robust risk management practices and regulatory alignment.

The position requires a minimum of a bachelor’s degree and 6+ years in related risk areas, including 4+ years in third-party risk management or information security.

Qualifications

• Bachelor’s degree or equivalent required.
• 6+ years in related risk roles with at least 4+ years in Third Party Risk Management or information security.
• Self-directed, able to work independently as well as within a team.
• Communication and relationship-building with internal partners.
• Knowledge of third-party risk governance, policies, and controls.

Responsibilities

• Conduct comprehensive third-party risk assessments across multiple risk domains.
• Perform due diligence on third-party suppliers to ensure standards and regulatory requirements are met.
• Develop and implement risk mitigation strategies and controls to minimize exposure.
• Collaborate with Legal and Procurement to ensure appropriate risk provisions in contracts.
• Prepare and present reports on risk management activities to senior management and stakeholders.

Skills

Communication

Relationship building

Independence

Organizational

Risk governance

Education

Bachelor's degree or equivalent

Tools

Aravo

Archer

ServiceNow

Coupa Risk

Job description

CSAA Insurance Group is seeking a Remote Third Party Vendor Risk Management Specialist to assess supplier risks and governance controls, driving risk reduction across the enterprise. The role emphasizes collaboration with Legal, Procurement, and Compliance teams to ensure robust risk management practices and regulatory alignment.

The position requires a minimum of a bachelor’s degree and 6+ years in related risk areas, including 4+ years in third-party risk management or information security.