Remote Vendor Risk Specialist - Third-Party Security

CSAA; North Carolina; Remote; USD 105,000 - 141,000; Full time

Benefits offered by this job

Remote work

Job summary

CSAA Insurance Group (CSAA IG) is seeking a Remote Third Party Vendor Risk Management Specialist to assess supplier risk, profile vendors, and evaluate the effectiveness of controls to mitigate risk to CSAA tolerance. The specialist will perform due diligence, develop risk mitigation strategies, and collaborate with Legal and Procurement to ensure contract language includes proper risk provisions.

This role emphasizes reporting, regulatory compliance, and ongoing training to raise risk awareness

Qualifications

• A related bachelor's degree or equivalent combination of education and experience is required.
• 6+ years of related experience including a minimum of 4+ years' experience in Third Party Risk Management or information security is required.
• Self-directed, able to work independently, as well as within a team.
• Communication skills and relationship building with internal business partners.
• Organizational skills to manage a high volume of simultaneous assessments.
• Knowledge of and experience with third-party risk management governance, policies, and organizational structures
• Understanding of the relevant legal and compliance requirements.

Responsibilities

• Conduct comprehensive risk assessments of third-party relationships to identify and evaluate potential risks across multiple risk domains.
• Perform due diligence on third-party suppliers to ensure they meet the organization's standards and regulatory requirements.
• Develop and implement risk mitigation strategies and controls to minimize the organization's exposure to third-party risks.
• Collaborate with Legal and Procurement teams to ensure appropriate risk mitigation provisions are included in the contract language.
• Prepare and present reports on third-party risk management activities to senior management and relevant stakeholders.
• Stay updated on relevant laws, regulations, and industry best practices related to third-party risk management.
• Develop and deliver training programs to educate employees on third-party risk management policies, procedures, and best practices.
• Support efforts with senior executives, inside and outside the organization, to adopt a more rigorous risk posture and drive third-party vendor risk management and portfolio reduction.

Skills

Risk assessment

Due diligence

Risk mitigation

Contract review

Reporting

Regulatory compliance

Training delivery

Stakeholder communication

Education

Bachelor's degree or equivalent

Tools

Aravo

Archer

ServiceNow

Coupa Risk Assess

Job description

CSAA Insurance Group (CSAA IG) is seeking a Remote Third Party Vendor Risk Management Specialist to assess supplier risk, profile vendors, and evaluate the effectiveness of controls to mitigate risk to CSAA tolerance. The specialist will perform due diligence, develop risk mitigation strategies, and collaborate with Legal and Procurement to ensure contract language includes proper risk provisions.

This role emphasizes reporting, regulatory compliance, and ongoing training to raise risk awareness