Remote Third-Party Vendor Risk Management Specialist

CSAA; Colorado; Remote; USD 105,000 - 141,000; Full time

Benefits offered by this job

Annual bonus eligibility

401(k) with company match

Remote-first workplace

Job summary

CSAA Insurance Group is seeking a dedicated Third Party Vendor Risk Management Specialist to assess supplier risk and controls, profile vendors, and manage issues. The role emphasizes risk identification and portfolio reduction while collaborating with Legal and Procurement for contract provisions.

The ideal candidate has 6+ years in risk management, including 4+ years in third-party risk or information security, with strong communication and governance knowledge.

Qualifications

• Bachelor's degree or equivalent
• 6+ years in related risk fields
• 4+ years in third-party risk management or information security
• Self-directed and independent work style
• Strong communication and relationship-building with internal partners
• Knowledge of third-party risk governance, policies and structures
• Understanding of legal and regulatory requirements

Responsibilities

• Conduct comprehensive risk assessments of third-party relationships across multiple domains
• Perform due diligence on third-party suppliers to meet standards and regulatory requirements
• Develop and implement risk mitigation strategies and controls
• Collaborate with Legal and Procurement to ensure risk provisions in contracts
• Prepare and present reports to senior management and stakeholders
• Stay updated on laws, regulations and best practices in third-party risk
• Develop and deliver training on risk policies and practices
• Support executives to improve risk posture and portfolio reduction

Skills

Self-directed

Communication

Team player

Organizational skills

Third-party risk governance

Legal/compliance knowledge

Education

Bachelor's degree

Tools

Aravo

Archer

ServiceNow

Coupa Risk Assess

Job description

CSAA Insurance Group is seeking a dedicated Third Party Vendor Risk Management Specialist to assess supplier risk and controls, profile vendors, and manage issues. The role emphasizes risk identification and portfolio reduction while collaborating with Legal and Procurement for contract provisions.

The ideal candidate has 6+ years in risk management, including 4+ years in third-party risk or information security, with strong communication and governance knowledge.