Remote Vendor Risk Management Specialist

CSAA; Minnesota; Remote; USD 105,000 - 140,000; Full time

Benefits offered by this job

Remote-first culture

Annual bonus eligibility

401(k) with company match

Job summary

CSAA Insurance Group is seeking a skilled Third Party Vendor Risk Management Specialist for a remote role nationwide. The position focuses on assessing supplier risk, due diligence, and mitigating controls to protect CSAA tolerance.

Collaboration with Legal, Procurement, and executive teams is essential. Ideal candidates have a related bachelor's degree and at least 6 years in risk management or information security, with strong communication, governance, and regulatory knowledge.

Qualifications

• Related bachelor's degree or equivalent combination of education and experience required.
• Becomes proficient in assessing third-party risk across multiple domains.
• Demonstrates knowledge of governance, policies, and regulatory requirements in third-party risk.

Responsibilities

• Conduct comprehensive risk assessments of third-party relationships.
• Perform due diligence to ensure supplier standards and compliance.
• Develop and implement risk mitigation strategies to reduce exposure.
• Collaborate with Legal and Procurement to include risk provisions in contracts.
• Prepare and present risk reports to senior management and stakeholders.
• Stay updated on laws and best practices related to third-party risk management.
• Develop and deliver training on third-party risk policies.
• Support executives in driving portfolio reduction and improved risk posture.

Skills

Self-directed

Strong communication

Organizational skills

Risk governance knowledge

Legal/compliance awareness

Education

Bachelor's degree or equivalent

Tools

Aravo

Archer

ServiceNow

Coupa Risk Assess

Job description

CSAA Insurance Group is seeking a skilled Third Party Vendor Risk Management Specialist for a remote role nationwide. The position focuses on assessing supplier risk, due diligence, and mitigating controls to protect CSAA tolerance.

Collaboration with Legal, Procurement, and executive teams is essential. Ideal candidates have a related bachelor's degree and at least 6 years in risk management or information security, with strong communication, governance, and regulatory knowledge.