Third Party Risk Management Consultant (100% Remote)

Our customer is a large United States insurance company that is backed by more than 100 years of experience and provides insurance products and services for businesses and professionals in the United States., Canada and Europe. Headquartered in Chicago, IL, they have more than 20 US locations.

We are seeking a contract Third Party Risk Management Consultant to support our Customer's business needs. This role is 100% remote, but on-site work in Chicago or Louisville is preferred.

Responsibilities:

• Lead the development and execution of the reassessment and continuous monitoring strategy
• Build and maintain a risk intelligence framework that integrates external data sources (e.g., Supply Wisdom, Black Kite) with internal assessments and controls.
• Able to lead and direct staff aug resources that support program operations
• Implement tools and processes to continuously monitor vendor risk signals and trigger timely reviews or escalations.
• Analyze trends and anomalies in vendor risk data to inform decision-making and drive proactive mitigation.
• Maintain up-to-date vendor risk profiles and ensure timely updates based on risk intelligence inputs.
• Develop and mature the Third Party CVE management process
• Coordinate with internal stakeholders and vendors to ensure reassessments are completed on schedule and aligned with risk tiering.
• Document findings and ensure appropriate follow-up actions are initiated.
• Oversee the lifecycle of vendor-related issues, from identification through resolution.
• Partner with vendors and internal teams to ensure timely and effective remediation of identified risks or control gaps.
• Develop KPIs and dashboards to communicate vendor risk insights, reassessment outcomes, and issue trends.
• Serve as a subject matter expert on third-party risk intelligence, reassessments, and continuous monitoring.
• Provide guidance and training to internal teams on interpreting and responding to vendor risk signals.
• Foster strong relationships with external risk intelligence providers and stay informed on industry best practices.

Skills and Qualifications:

• Bachelor’s degree or equivalent
• CISSP, CRISC, or CISA preferred
• Experience with compliance frameworks such as HITRUST, NIST, ISO, and COBIT
• Experience with SOC 1/2 reports
• 7+ years of demonstrable experience in TPRM, preferably in a regulated industry
• Detail-oriented with strong organizational and communication skills
• Ability to work with both technical and non-technical internal business stakeholders.

Preferred:

• Advanced knowledge of ProcessUnity
• Experience with Risk Intelligence platforms such as Supply Wisdom and Black Kite
• Experience designing and implementing new TPRM processes and assessment methodologies

We offer a competitive salary range for this position. Most candidates who join our team are hired at the median of this range, ensuring fair and equitable compensation based on experience and qualifications.

Contractor benefits are available through our 3rd Party Employer of Record (Available upon completion of waiting period for eligible engagements)

Benefits include: Medical, Dental, Vision, 401k.

An Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.