Remote Third-Party Risk Specialist

CSAA; Massachusetts; Remote; USD 105,000 - 140,000; Full time

Benefits offered by this job

Annual bonus eligibility

401(k) with company match

Remote-first culture

Job summary

CSAA Insurance Group is seeking a Remote Third Party Vendor Risk Management Specialist to assess supplier risks and validate their controls, working across Legal, Procurement, and Compliance. This role emphasizes risk profiling, due diligence, and effective communication with senior leaders.

The ideal candidate brings 6+ years in risk management or information security, strong collaboration skills, and experience with governance and regulatory requirements.

Qualifications

• Bachelor's degree or equivalent combination of education and experience is required.
• 6+ years of related experience including a minimum of 4+ years in Third Party Risk Management or information security.

Responsibilities

• Conduct comprehensive risk assessments of third-party relationships across multiple risk domains.
• Perform due diligence on third-party suppliers to meet standards and regulatory requirements.
• Develop and implement risk mitigation strategies and controls to minimize exposure.
• Collaborate with Legal and Procurement to ensure risk provisions in contracts.
• Prepare and present reports on third-party risk management to senior management.

Skills

Risk management

Communication

Organizational skills

Self-directed

Relationship building

Teamwork

Analytical thinking

Independent work

Education

Bachelor's degree or equivalent

Tools

Aravo

Archer

ServiceNow

Coupa Risk Assess

Job description

CSAA Insurance Group is seeking a Remote Third Party Vendor Risk Management Specialist to assess supplier risks and validate their controls, working across Legal, Procurement, and Compliance. This role emphasizes risk profiling, due diligence, and effective communication with senior leaders.

The ideal candidate brings 6+ years in risk management or information security, strong collaboration skills, and experience with governance and regulatory requirements.