Third Party Risk Management Analyst II

Erie Insurance•Erie, PA

1d•$70,705 - $112,944•Onsite

About The Position

Under moderate supervision, the Third Party Risk Management Analyst assesses the risks of doing business with third parties and works with Sourcing & Vendor Management, business areas, and other stakeholders to manage those risks. The role is based at Erie Insurance’s corporate office in Erie, Pennsylvania. The hiring manager may also consider candidates for Analyst I or Senior Analyst; the position level offered will depend on the selected candidate’s qualifications and experience.

Requirements

Bachelor’s degree in business, risk management, information technology, or a related discipline and three years of related work experience in risk management and/or internal controls; or an associate degree in one of these fields and five years of such experience; or a high school diploma or GED and seven years of such experience.
Working experience with information security practices and frameworks, such as those of the National Institute of Standards and Technology, is required.
Working experience in the insurance or financial services industries, and/or operations or information technology auditing, is required.
Some overnight travel is required.

Nice To Haves

Industry designations such as Certified Third Party Risk Professional, Certified Information Systems Auditor, Certified Information Systems Manager, Certified in Risk and Information Systems Control, or Certified Information Systems Security Professional.

Responsibilities

Conduct risk assessments to identify, analyze, mitigate, and report on risks associated with products and services provided to ERIE by third parties.
Collaborate with internal and external partners to ensure risks are assessed and mitigated.
Maintain knowledge of best practices for controlling privacy, compliance, security, operational resiliency, and other risks, and apply them when assessing third parties.
Monitor ERIE’s third parties for changes in their risks and recommend actions to manage those risks.
Examine potential impacts from vulnerabilities to software and hardware used by ERIE’s third parties, as well as incidents those third parties have experienced, and recommend responses.
Identify improvements to the Third Party Risk Management Program and processes and participate in or lead their implementation.
Participate in training and mentoring newer third party risk analysts.

Benefits

Health, prescription, dental, and vision benefits for employees and dependents, with coverage beginning on the first day of work.
Low employee contributions to medical and prescription premiums; the company currently pays up to 97% of employees’ monthly premium costs.
Traditional pension plan; full-time employees are vested after five years of service.
401(k) with up to a 4% contribution match.
Paid vacation, personal days, sick days, bereavement days, and parental leave.
Tuition reimbursement for higher education and industry designations.
Company-paid basic life insurance.
Short- and long-term disability insurance.
Orthodontic coverage for children and adults.
Adoption assistance.
Fertility and infertility coverage.
Well-being programs.
Paid volunteer hours for community service.
Dollar-for-dollar matching of charitable gifts each year.
Position may be eligible for an annual bonus payment.