Third Party Vendor Risk Management Specialist

Stellenbeschreibung:

Assess risks introduced by third-party supplier relationships and evaluate supplier controls against CSAA tolerance
Perform supplier profiling, assessments, and issues management using established processes and criteria
Conduct comprehensive third-party risk assessments across multiple risk domains
Perform due diligence to ensure suppliers meet organizational standards and regulatory requirements
Develop and implement risk mitigation strategies and controls
Collaborate with Legal and Procurement to include appropriate risk mitigation provisions in contracts
Prepare and present third-party risk reports to senior management and stakeholders
Communicate findings, recommendations, and mitigation strategies across the organization
Monitor relevant laws, regulations, and industry best practices
Ensure compliance with applicable regulations and address changes or updates
Develop and deliver training on third-party risk policies, procedures, and best practices
Support senior executives in adopting a more rigorous risk posture and reducing the third-party vendor risk portfolio

Requirements

Related bachelor's degree or equivalent combination of education and experience required
6+ years of related experience
Minimum of 4+ years' experience in Third Party Risk Management or information security
Self-directed and able to work independently and within a team
Communication and relationship-building skills with internal business partners
Organizational skills to manage a high volume of simultaneous assessments
Knowledge and experience with third-party risk management governance, policies, and organizational structures
Understanding of relevant legal and compliance requirements
Experience or education in information security, cyber security, IT architecture, business continuity, legal, enterprise risk management, or another relevant risk domain
Experience in or knowledge of procurement functions
Experience in the property casualty insurance industry
Familiarity with Aravo, Archer, ServiceNow, Coupa Risk Assess, or similar platform
Ability to travel as needed, including for divisional/team meetings and other in-person meetings
Authorization to work indefinitely in the United States
Must not require immigration support or visa sponsorship

Core Competencies

Demonstrates expertise in Third Party Risk Management, including risk assessments, compliance with legal and regulatory requirements, and the development of risk mitigation strategies. Strong communication and organizational skills are essential for managing supplier relationships and presenting findings to stakeholders.