Remote Third-Party Risk Specialist

CSAA; Virginia (MN); Remote; USD 105,000 - 140,000; Full time

Benefits offered by this job

401(k) with company match

Annual bonus eligibility

Job summary

CSAA Insurance Group is seeking a remote Third Party Vendor Risk Management Specialist to assess supplier risks and controls. You will profile suppliers, perform due diligence, and work with Legal and Procurement to embed risk-mitigating provisions in contracts.

The role emphasizes risk identification, governance, and regulatory compliance, with opportunities for training and leadership across the enterprise. Travel may be required for key meetings.

Qualifications

• Bachelor's degree or equivalent required.
• 6+ years' risk management experience, with 4+ in Third Party Risk Management or information security.
• Self-directed and able to work independently or within a team.
• Strong communication and relationship-building with internal partners.
• Knowledge of TP risk governance, policies, and regulatory requirements.

Responsibilities

• Risk Assessment: conduct comprehensive risk assessments of third-party relationships across risk domains.
• Due Diligence: perform due diligence on third-party suppliers to meet standards and regulatory requirements.
• Risk Mitigation: develop and implement risk mitigation strategies and controls.
• Contract Review: collaborate with Legal and Procurement to ensure risk provisions in contracts.
• Reporting and Communication: prepare and present risk reports to senior management and stakeholders.
• Regulatory Compliance: stay updated on laws and best practices for TP risk management.
• Training and Awareness: deliver training on TP risk management policies and procedures.
• Travel: support executives and teams with risks, including in-person meetings as needed.

Skills

Third-Party Risk Mgmt

Information Security

Communication

Organizational Skills

Education

Bachelor's degree or equivalent

Tools

Aravo

Archer

ServiceNow

Coupa Risk Assess

Job description

CSAA Insurance Group is seeking a remote Third Party Vendor Risk Management Specialist to assess supplier risks and controls. You will profile suppliers, perform due diligence, and work with Legal and Procurement to embed risk-mitigating provisions in contracts.

The role emphasizes risk identification, governance, and regulatory compliance, with opportunities for training and leadership across the enterprise. Travel may be required for key meetings.