Job Information
CSAA Insurance Group (CSAA IG), a AAA insurer, is one of the top personal lines’ property and casualty insurance groups in the U.
S. Our employees proudly live our core beliefs and fulfill our enduring purpose to help members prevent, prepare for, and recover from life's uncertainties, and we're proud of the culture we create together.
As we commit to progress over perfection, we recognize that every day is an opportunity to be innovative and adaptable. At CSAA IG, we hire good people for a brighter tomorrow.
We are actively hiring for a Third Party Risk Management Specialist. Join us and support CSAA IG in achieving our goals.
Your Role :
Third Party Risk Management Specialist is responsible for assessing the risk introduced by the nature of the relationship established with our suppliers, and the effectiveness of the suppliers’ controls to mitigate that risk to CSAA tolerance.
The specialist level will perform evaluations using established processes and criteria. The specialist’s objectives include supporting a reduction in the third-party vendor risk portfolio, improved risk management and better risk outcomes for the enterprise.
Your Work :
Risk Assessment : Conduct comprehensive risk assessments of third-party relationships to identify and evaluate potential risks across multiple risk domains.
Due Diligence : Perform due diligence on third-party suppliers to ensure they meet the organization's standards and regulatory requirements.
Risk Mitigation : Develop and implement risk mitigation strategies and controls to minimize the organization's exposure to third-party risks.
Contract Review : Collaborate with Legal and Procurement teams to ensure appropriate risk mitigation provisions are included in the contract language.
Reporting and Communication : Prepare and present reports on third-party risk management activities to senior management and relevant stakeholders.
Communicate findings, recommendations, and risk mitigation strategies effectively to ensure awareness and understanding across the organization.
Regulatory Compliance : Stay updated on relevant laws, regulations, and industry best practices related to third-party risk management.
Ensure the organization's compliance with applicable regulations and proactively address any changes or updates.
Training and Awareness : Develop and deliver training programs to educate employees on third-party risk management policies, procedures, and best practices.
Foster a culture of risk awareness and accountability throughout the organization.
Support efforts with senior executives, inside and outside the organization, to adopt a more rigorous risk posture and drive third-party vendor risk management and portfolio reduction.
Required Experience, Education and Skills
3 + years’ experience in Third Party Risk Management or a related function.
Bachelor’s degree or equivalent in related areas.
Self-directed, able to work independently, as well as within a team.
Communication skills and relationship building with internal business partners.
Organizational skills to manage a high volume of simultaneous assessments.
Knowledge of and experience with third-party risk management governance, policies, and organizational structures.
Understanding of the relevant legal and compliance requirements.
What would make us excited about you?
Experience or education in information security, cyber security, IT architecture, business continuity, legal, enterprise risk management, or other relevant risk domain.
Experience in or knowledge of procurement function.
Experience in the property casualty insurance industry.
Familiarity with Coupa Risk Assess, Archer, ServiceNow or similar platform
Actively shapes our company culture (e.g., supporting employee resource groups, mentoring employees, volunteering, joining cross-functional projects).
Champions our cultural norms (e.g., willing to have cameras when it matters : helping onboard new team members, building relationships, etc.).
Demonstrates a company ownership mindset, thinking beyond boundaries of their own area.
Travels as needed for role, including divisional / team meetings and other in-person meetings.
Fulfills business needs, which may include investing extra time, helping other teams, etc.
CSAA IG Careers
At CSAA IG, we’re proudly devoted to protecting our customers, our employees, our communities, and the world at large. We are on a climate journey to continue to do better for our people, our business, and our planet.
Taking bold action and leading by example. We are citizens for a changing world, and we continually change to meet it.
Join us if you
BELIEVE in a mission focused on building a community of service, rooted in inclusion and belonging.
COMMIT to being there for our customers and employees.
CREATE a sense of purpose that serves the greater good through innovation.
Recognition : We offer a total compensation package, performance bonus, 401(k) with a company match, and so much more!
Third Party Risk Management Specialist - Remote
Third Party Risk Management Specialist is responsible for assessing the risk introduced by the nature of the relationship established with our suppliers, and the effectiveness of the suppliers’ controls to mitigate that risk to CSAA tolerance. The specialist’s objectives include supporting a reducti...
Security Risk Management Specialist
In security risk management we're looking to harness the power of industry best practice combined with driving new innovation on how we do security risk assessments and modelling. Our security risk management team is the primary owner of the strategy and practices of how we identify, track and r...
Enterprise Third Party Risk Governance, QA Senior Analyst
Enterprise Third Party Risk Governance Quality Assurance Senior Analyst will be responsible for partnering with SoFi Business Units, internal program stakeholders and external third party service providers to support the oversight and governance of SoFi’s Third Party Risk Management Program, through...
Specialist, Risk Management - P&C
This Specialist, Risk Management – P&C will be part of the Agribusiness Team. The reports, Risk Management Consultant’s opinions and recommendations are utilized by underwriting to determine risk selection and pricing. In-depth knowledge of risk management issues, loss drivers and risk controls asso...
Third Party Risk Analyst
Adobe’s Vendor Risk Management Office (VRMO) is looking for a Risk Analyst to drive initiatives around Third Party Risk Management (TPRM) with regard to Adobe's global vendor base. Work closely with leadership and become a part of a diverse team, to support the management of Adobe’s Third-Party Risk...
Corporate Senior Third-Party Risk Analyst
The Senior Third-Party Risk Analyst will report to the Corporate Third-Party Risk Manager, who is responsible for the Third-Party Risk Management (TPRM) program. Additionally, the Senior Third-Party Risk Analyst will ensure that third-party relationships are accurately risk-rated and documented in t...
Third Party Risk Consultant
Adobe’s Vendor Risk Management Office (VRMO) is looking for a Risk Consultant to drive initiatives around Third Party Risk Management (TPRM) with regard to Adobe's global vendor base. Work closely with leadership and become a part of a diverse team, to support the management of Adobe’s Third-Party R...
Junior Project Manager - Security Clearance Required
We are looking for a Junior Project Manager who will be working with the Special Programs Division. Provide over sight of the Subject Manager Expert's (SME'S). Associated Degree from an accredited college or university or a combination of project management and military/ emergency response experienc...
Cyber Security Defense Analyst- (Entry Level) - Security Clearance Required
The candidate will perform cyber threat intelligence analysis, correlate actionable security events, perform network traffic analysis using raw packet data, net flow, IDS, IPS and custom sensor output as it pertains to the cyber security of communications networks, and participate in the coordinatio...
Regulatory Compliance Analyst (13633) - Security Clearance Required
Strategic Deterrent Division is seeking a Regulatory Compliance Analyst* *to join our team of high performing and diverse professionals. The selected candidate will, through oversight and participation, lead a team of dedicated professionals in performing multiple Government Compliance activities. D...