Salary
💰 $78,000 - $128,000 per year
About the role
- Collaborate with Cybersecurity, Compliance, Procurement, Legal, and Business Units to perform ongoing risk assessments of third parties, focusing on operational, information security, compliance, financial, and reputational risks.
- Lead routine risk assessment and management activities, including identifying, documenting, and escalating control deficiencies, recommending remediation actions, and tracking issue resolution.
- Evaluate third-party control documentation (SOC reports, ISO 27001, SIG Lite/Full, questionnaires) to assess risk mitigation adequacy.
- Foster collaboration with stakeholders across the enterprise.
- Help develop Third-Party Risk Management (TPRM) frameworks and enhance the enterprise risk-smart culture through education.
- Establish and maintain enterprise-wide reporting.
- Help with continuous improvement efforts, process automation, and documentation updates to enhance TPRM efficiency and scalability.
- Contribute to regulatory reporting and audit support related to third-party oversight.
Requirements
- Demonstrated experience providing customer driven solutions, support or service.
- Solid knowledge and understanding of risk management methods, standards, processes, governance models, and industry standard risk analysis approaches.
- Knowledge of insurance, industry trends and adjacencies.
- Demonstrated experience facilitating group discussions.
- Skills to influence these discussions are developing.
- Strong written and verbal communication and problem-solving skills.
- Demonstrated experience establishing positive relationships with stakeholders.
- Demonstrated experience in managing projects to their completion.