Remote Third-Party Vendor Risk Specialist

CSAA; Utah; Remote; USD 105,000 - 141,000; Full time

Benefits offered by this job

Bonus eligibility

401(k) with company match

Remote-friendly culture

Flexible workplace

Job summary

CSAA Insurance Group is hiring a Third Party Vendor Risk Management Specialist to assess risk from supplier relationships and evaluate supplier controls. The role involves profiling, assessment, and issues management to reduce third‑party risk portfolio and improve enterprise risk outcomes.

You will support risk identification, perform due diligence, and collaborate with Legal, Procurement, and Compliance to embed risk controls in contracts.

Qualifications

• Bachelor's degree or equivalent combination of education and experience required.
• 6+ years related experience including minimum 4+ years in Third Party Risk Management or information security.
• Self-directed, able to work independently and in a team.
• Strong communication and relationship-building with internal partners.
• Organizational skills to manage a high volume of assessments.
• Knowledge of TPRM governance, policies, and regulatory requirements.

Responsibilities

• Conduct comprehensive risk assessments of third‑party relationships across multiple domains.
• Perform due diligence on suppliers to meet standards and regulatory requirements.
• Develop and implement risk mitigation strategies and controls.
• Collaborate with Legal and Procurement to ensure appropriate risk provisions in contracts.
• Prepare and present reports to senior management and stakeholders.

Skills

Communication skills

Organizational skills

Risk governance

Legal/compliance knowledge

Education

Bachelor's degree or equivalent

Tools

Aravo

Archer

ServiceNow

Coupa Risk Assess

Job description

CSAA Insurance Group is hiring a Third Party Vendor Risk Management Specialist to assess risk from supplier relationships and evaluate supplier controls. The role involves profiling, assessment, and issues management to reduce third‑party risk portfolio and improve enterprise risk outcomes.

You will support risk identification, perform due diligence, and collaborate with Legal, Procurement, and Compliance to embed risk controls in contracts.