Third Party Vendor Risk Management Specialist

This is a fully remote position, open to applicants in Alabama, +42 more states.

📋 Description

• Evaluate risks associated with third-party supplier relationships and assess supplier controls in relation to CSAA's risk tolerance.

• Conduct supplier profiling, assessments, and manage issues utilizing established protocols and criteria.

• Execute thorough third-party risk assessments across a variety of risk domains.

• Carry out due diligence to confirm that suppliers comply with organizational standards and regulatory mandates.

• Create and implement strategies and controls for risk mitigation.

• Work in conjunction with Legal and Procurement to incorporate suitable risk mitigation clauses in contracts.

• Prepare and deliver third-party risk reports to senior management and relevant stakeholders.

• Share findings, recommendations, and risk mitigation strategies throughout the organization.

• Keep abreast of pertinent laws, regulations, and industry best practices.

• Ensure adherence to applicable regulations and manage any changes or updates.

• Design and conduct training on third-party risk policies, procedures, and best practices.

• Assist senior executives in fostering a more stringent risk posture and minimizing the third-party vendor risk portfolio.

⛳️ Requirements

• A relevant bachelor's degree or an equivalent mix of education and experience is required.

• Over 6 years of related experience.

• At least 4 years of experience in Third Party Risk Management or information security.

• Self-motivated and capable of working both independently and collaboratively within a team.

• Strong communication and relationship-building skills with internal business partners.

• Excellent organizational abilities to handle a high volume of simultaneous assessments.

• Knowledge and experience in third-party risk management governance, policies, and organizational frameworks.

• Familiarity with relevant legal and compliance obligations.

• Experience or education in information security, cyber security, IT architecture, business continuity, legal, enterprise risk management, or another pertinent risk domain.

• Familiarity with or experience in procurement functions.

• Experience in or knowledge of the property casualty insurance sector.

• Proficiency in platforms such as Aravo, Archer, ServiceNow, Coupa Risk Assess, or similar tools.

• Willingness to travel as necessary for divisional/team meetings and other in-person engagements.

• Authorization to work indefinitely in the United States.

• Must not require immigration assistance or visa sponsorship.

🏝️ Benefits

• Eligibility for an annual bonus for most positions.

• 401(k) plan with company matching contributions.

• Opportunities for career advancement, leadership, and mentoring support.

• Access to development opportunities.

• A remote-first flexible work environment.

• The option to work from various locations, including CSAA offices.

• Employee resource groups and opportunities for volunteering.

• Reasonable accommodations for qualified applicants and employees with disabilities or other limitations.