Third Party Vendor Risk Management Specialist - Remote

CSAA Insurance Group, a AAA Insurer•Washington, NV

1d•$105,345 - $140,550•Remote

About The Position

CSAA Insurance Group (CSAA IG), a AAA insurer, is one of the leading personal lines property and casualty insurance groups in the United States. Here, every employee shapes our mission. We build innovative, human-centered solutions that help AAA members prevent, prepare for, and recover from life's uncertainties. You will join a collaborative, inclusive culture where your strengths have room to grow and your ideas can drive real impact. Step into a role where you can contribute to our shared success through meaningful work. We are actively hiring for a Third Party Vendor Risk Management Specialist! The Third Party Vendor Risk Management Specialist is responsible for assessing the risk introduced by the nature of the relationship established with our suppliers, and the effectiveness of the suppliers’ controls to mitigate that risk to CSAA tolerance. The specialist level will perform supplier profiling, assessment, and issues management using established processes and criteria. The specialist’s objectives include supporting risk identification and a reduction in the third-party vendor risk portfolio, improved risk management and better risk outcomes for the enterprise.

Requirements

A related bachelor’s degree or equivalent combination of education and experience is required.
6+ years of related experience including a minimum of 4 + years’ experience in Third Party Risk Management or information security is required.
Self-directed, able to work independently, as well as within a team.
Communication skills and relationship building with internal business partners.
Organizational skills to manage a high volume of simultaneous assessments.
Knowledge of and experience with third-party risk management governance, policies, and organizational structures
Understanding of the relevant legal and compliance requirements.

Nice To Haves

Experience or education in information security, cyber security, IT architecture, business continuity, legal, enterprise risk management, or other relevant risk domain.
Experience in or knowledge of procurement functions.
Experience in the property casualty insurance industry.
Familiarity with Aravo, Archer, ServiceNow, Coupa Risk Assess, or similar platform.
Actively shapes our company culture (e.g., participating in employee resource groups, volunteering, etc.).
Lives into cultural norms (e.g., willing to have cameras when it matters: helping onboard new team members, building relationships, etc.).
Travels as needed for role, including divisional / team meetings and other in-person meetings.
Fulfills business needs, which may include investing extra time, helping other teams, etc.

Responsibilities

Conduct comprehensive risk assessments of third-party relationships to identify and evaluate potential risks across multiple risk domains.
Perform due diligence on third-party suppliers to ensure they meet the organization's standards and regulatory requirements.
Develop and implement risk mitigation strategies and controls to minimize the organization's exposure to third-party risks.
Collaborate with Legal and Procurement teams to ensure appropriate risk mitigation provisions are included in the contract language.
Prepare and present reports on third-party risk management activities to senior management and relevant stakeholders. Communicate findings, recommendations, and risk mitigation strategies effectively to ensure awareness and understanding across the organization.
Stay updated on relevant laws, regulations, and industry best practices related to third-party risk management. Ensure the organization's compliance with applicable regulations and proactively address any changes or updates.
Develop and deliver training programs to educate employees on third-party risk management policies, procedures, and best practices. Foster a culture of risk awareness and accountability throughout the organization.
Support efforts with senior executives, inside and outside the organization, to adopt a more rigorous risk posture and drive third-party vendor risk management and portfolio reduction.