Remote Third-Party Vendor Risk Specialist

CSAA; Maryland; Remote; USD 105,000 - 141,000; Full time

Benefits offered by this job

Annual bonus

401(k) with company match

Remote-first culture

Job summary

CSAA Insurance Group (CSAA IG) is seeking a Third Party Vendor Risk Management Specialist to work remotely from anywhere in the United States (excluding Hawaii and Alaska). You will assess supplier risks, review controls, and support risk reduction across the enterprise.

The role requires 6+ years in third-party risk management or information security, a related bachelor's degree, and strong communication and organizational skills to coordinate with Legal, Procurement, and Risk teams.

Qualifications

• Bachelor's degree or equivalent required.
• 6+ years of related experience, including 4+ years in third-party risk management or information security.
• Strong communication and organizational skills; ability to work independently and in teams.

Responsibilities

• Conduct comprehensive risk assessments of third-party relationships across risk domains.
• Perform due diligence to ensure suppliers meet standards and regulatory requirements.
• Develop and implement risk mitigation strategies to minimize exposure.
• Collaborate with Legal and Procurement to ensure proper risk provisions in contracts.
• Prepare and present risk reports to senior management and stakeholders.

Skills

Risk assessment

Due diligence

Communication

Organizational skills

Stakeholder management

Education

Bachelor's degree or equivalent

Tools

Aravo

Archer

ServiceNow

Coupa Risk Assess

Job description

CSAA Insurance Group (CSAA IG) is seeking a Third Party Vendor Risk Management Specialist to work remotely from anywhere in the United States (excluding Hawaii and Alaska). You will assess supplier risks, review controls, and support risk reduction across the enterprise.

The role requires 6+ years in third-party risk management or information security, a related bachelor's degree, and strong communication and organizational skills to coordinate with Legal, Procurement, and Risk teams.