Remote Third-Party Risk Specialist | Vendor Assurance

CSAA; Maine; Remote; USD 105,000 - 141,000; Full time

Benefits offered by this job

Annual bonus eligibility

401(k) with company match

Remote-first culture

Job summary

CSAA Insurance Group is seeking a Remote Third Party Vendor Risk Management Specialist to assess and mitigate risks from supplier relationships. You will profile suppliers, perform due diligence, and manage issues using established criteria.

The role emphasizes risk identification, reporting to senior leaders, and collaboration with Legal and Procurement to ensure contractual risk provisions. A flexible remote-first environment supports nationwide travel when needed.

Qualifications

• Bachelor's degree or equivalent required.
• 6+ years in risk management or information security.
• Self-directed, able to work independently and in a team.
• Strong communication and relationship-building skills.
• Knowledge of third-party risk governance and regulatory requirements.

Responsibilities

• Conduct comprehensive risk assessments of third-party relationships.
• Perform due diligence on third-party suppliers.
• Develop and implement risk mitigation strategies and controls.
• Collaborate with Legal and Procurement on contract language.
• Prepare and present reports to senior management and stakeholders.
• Stay updated on laws, regulations and industry best practices.
• Develop and deliver training on third-party risk policies.
• Support executives to improve risk posture and portfolio reduction.

Skills

Third-Party Risk Management

Information Security

Risk Assessment

Due Diligence

Regulatory Compliance

Communication Skills

Education

Bachelor's degree or equivalent

Tools

Aravo

Archer

ServiceNow

Coupa Risk Assess

Job description

CSAA Insurance Group is seeking a Remote Third Party Vendor Risk Management Specialist to assess and mitigate risks from supplier relationships. You will profile suppliers, perform due diligence, and manage issues using established criteria.

The role emphasizes risk identification, reporting to senior leaders, and collaboration with Legal and Procurement to ensure contractual risk provisions. A flexible remote-first environment supports nationwide travel when needed.