Third Party Vendor Risk Management Specialist - Remote

CSAA Insurance Group; Arizona; Hybrid; USD 105,000 - 140,000; Full time

Benefits offered by this job

Remote-first culture

Flexible Workplace

Annual discretionary bonus

Job summary

CSAA Insurance Group is seeking a Remote Third Party Vendor Risk Management Specialist to assess supplier risks and governance controls, driving risk reduction across the enterprise. The role emphasizes collaboration with Legal, Procurement, and Compliance teams to ensure robust risk management practices and regulatory alignment.

The position requires a minimum of a bachelor’s degree and 6+ years in related risk areas, including 4+ years in third-party risk management or information security.

Qualifications

• Bachelor’s degree or equivalent required.
• 6+ years in related risk roles with at least 4+ years in Third Party Risk Management or information security.
• Self-directed, able to work independently as well as within a team.
• Communication and relationship-building with internal partners.
• Knowledge of third-party risk governance, policies, and controls.

Responsibilities

• Conduct comprehensive third-party risk assessments across multiple risk domains.
• Perform due diligence on third-party suppliers to ensure standards and regulatory requirements are met.
• Develop and implement risk mitigation strategies and controls to minimize exposure.
• Collaborate with Legal and Procurement to ensure appropriate risk provisions in contracts.
• Prepare and present reports on risk management activities to senior management and stakeholders.

Skills

Communication

Relationship building

Independence

Organizational

Risk governance

Education

Bachelor's degree or equivalent

Tools

Aravo

Archer

ServiceNow

Coupa Risk

Job description

Job Title and Location

Third Party Vendor Risk Management Specialist - Remote

Location: Arizona - Home Teleworkers Additional Locations Alabama - Home Teleworkers, Alabama - Home Teleworkers, Arkansas - Home Teleworkers, California - Home Teleworkers, Colorado - Home Teleworkers, Connecticut - Home Teleworkers, Delaware - Home TeleWorker, District of Columbia - Home Teleworkers, Florida - Home Teleworkers, Georgia - Home Teleworkers, Idaho - Home Teleworkers, Illinois - Home Teleworkers, Indiana - Home Teleworkers, Iowa - Home Teleworkers, Kansas - Home Teleworker, Kentucky - Home Teleworkers, Louisiana - Home Teleworkers, Maine Home Teleworkers, Maryland - Home Teleworkers, Massachusetts - Home Teleworkers, Michigan - Home Teleworkers, Minnesota - Home Teleworkers, Mississippi - Home Teleworker, Missouri - Home Teleworker, Montana - Home Teleworkers {+ 21 more}

Company Information

CSAA Insurance Group (CSAA IG), a AAA insurer, is one of the leading personal lines property and casualty insurance groups in the United States. Here, every employee shapes our mission. We build innovative, human-centered solutions that help AAA members prevent, prepare for, and recover from life's uncertainties. You will join a collaborative, inclusive culture where your strengths have room to grow and your ideas can drive real impact. Step into a role where you can contribute to our shared success through meaningful work. We are actively hiring for a Third Party Vendor Risk Management Specialist!

Your Role

The Third Party Vendor Risk Management Specialist is responsible for assessing the risk introduced by the nature of the relationship established with our suppliers, and the effectiveness of the suppliers’ controls to mitigate that risk to CSAA tolerance. The specialist level will perform supplier profiling, assessment, and issues management using established processes and criteria. The specialist’s objectives include supporting risk identification and a reduction in the third-party vendor risk portfolio, improved risk management and better risk outcomes for the enterprise.

Your Work

• Risk Assessment: Conduct comprehensive risk assessments of third-party relationships to identify and evaluate potential risks across multiple risk domains.


• Due Diligence: Perform due diligence on third-party suppliers to ensure they meet the organization’s standards and regulatory requirements.


• Risk Mitigation: Develop and implement risk mitigation strategies and controls to minimize the organization’s exposure to third-party risks.


• Contract Review: Collaborate with Legal and Procurement teams to ensure appropriate risk mitigation provisions are included in the contract language.


• Reporting and Communication: Prepare and present reports on third-party risk management activities to senior management and relevant stakeholders. Communicate findings, recommendations, and risk mitigation strategies effectively to ensure awareness and understanding across the organization.


• Regulatory Compliance: Stay updated on relevant laws, regulations, and industry best practices related to third-party risk management. Ensure the organization’s compliance with applicable regulations and proactively address any changes or updates.


• Training and Awareness: Develop and deliver training programs to educate employees on third-party risk management policies, procedures, and best practices. Foster a culture of risk awareness and accountability throughout the organization. Support efforts with senior executives, inside and outside the organization, to adopt a more rigorous risk posture and drive third-party vendor risk management and portfolio reduction.

Required Experience, Education and Skills

• A related bachelor’s degree or equivalent combination of education and experience is required.


• 6+ years of related experience including a minimum of 4 + years’ experience in Third Party Risk Management or information security is required.


• Self-directed, able to work independently, as well as within a team.


• Communication skills and relationship building with internal business partners.


• Organizational skills to manage a high volume of simultaneous assessments.


• Knowledge of and experience with third-party risk management governance, policies, and organizational structures.


• Understanding of the relevant legal and compliance requirements.

What would make us excited about you?

• Experience or education in information security, cyber security, IT architecture, business continuity, legal, enterprise risk management, or other relevant risk domain.


• Experience in or knowledge of procurement functions.


• Experience in the property casualty insurance industry.


• Familiarity with Aravo, Archer, ServiceNow, Coupa Risk Assess, or similar platform.


• Actively shapes our company culture (e.g., participating in employee resource groups, volunteering, etc.).


• Lives into cultural norms (e.g., willing to have cameras when it matters: helping onboard new team members, building relationships, etc.).


• Travels as needed for role, including divisional / team meetings and other in-person meetings.


• Fulfills business needs, which may include investing extra time, helping other teams, etc.

Why Choose a Career at CSAA IG

At CSAA IG, we are a mission-driven organization proudly committed to empowering our members, our employees, and our communities to thrive.

Recognition: We offer a total compensation package, annual bonus eligibility for most roles, 401(k) with a company match, and so much more! Read more about what we offer and what it is like to be a part of our dynamic team at https://careers.csaainsurance.aaa.com/us/en/benefits.

Career Growth: We believe in growth for everyone. Here at CSAA IG, leaders and mentors partner with employees to align interests, unlock development opportunities, and support long-term success.

Flexible Workplace: We embrace a remote-first culture through our Flexible Workplace. Most employees hold Home-Flex roles, working primarily from home, often with the flexibility to work from various locations including CSAA offices.

Inclusion and Belonging: An inclusive and welcoming workplace is the cornerstone of our success. By fostering an environment where people feel valued and heard, we deepen our ability to understand and meet the unique needs of our members. This strengthens innovation and enhances our products and services, giving us a competitive edge in the market.

Sustainability: As climate change leads to more frequent and severe weather events, we are taking bold action to build more resilient communities and reduce our environmental impact.

CSAA Insurance Group is an equal opportunity employer.

The national average salary range for this position is $105,345.00-$117,050.00. However, we have a location-based compensation structure. Our salary ranges vary and are calculated based on work location. The starting pay range for this position across all the states we hire in is $105,345.00-$140,550.00.

This role also includes an opportunity for a company-wide annual discretionary bonus, through our Annual Incentive Plan (AIP), of up to 10% of eligible pay.

Colorado Specific Job Range :$105,345.00 - $128,800.00

About CSAA Insurance Group

CSAA Insurance Group offers automobile, home and other personal lines of insurance to AAA Members in 23 states and the District of Columbia. Founded in 1914, the company has been rated "A" or better by AM Best for more than 90 years and, with over $8 billion in revenue, is one of the top personal lines property casualty insurance groups in the United States.

Guided by care for people and communities, we cultivate an inclusive and flexible culture that strengthens connection, supports belonging, and empowers employees to make a meaningful difference for those we serve.

Our Enduring Purpose We help our members and communities prevent, prepare for and recover from life's uncertainties with care and compassion.

As a member-owned insurance company, our enduring purpose inspires us to be a voice for industry change, continually delivering AAA members peace of mind, providing employees the chance to do work that makes a real difference.

For more information on CSAA, please visit www.csaa-insurance.aaa.com.

Careers at CSAA Insurance Group A career at CSAA is built one development opportunity at a time, driven by your interests and by leaders who invest in you.

Through mentoring, leadership programs, tuition support and hands-on experiences, you can build a purpose-driven path with meaningful impact.

We prioritize human connection for the AAA members and commercial partners we serve and the employees who bring our shared mission to life.

We build a culture of inclusion and belonging that supports community for all.

We prioritize people over places, creating a flexible workplace where 95% of employees work remotely and gather in-person for moments that matter.

We take responsibility for the world around us by serving our communities and supporting meaningful action to build a sustainable future.

For more information on life at CSAA, please visit https://careers.csaa-insurance.aaa.com/us/en/