Senior Third Party Risk Analyst

Description:

American Family Insurance is seeking a Senior Third Party Risk Analyst to strengthen and advance its Third-Party Risk Management (TPRM) program. In this hybrid position, the role will be focused on conducting end-to-end third-party risk assessments, analyzing vendor control environments, and ensuring compliance with organizational policies, regulatory requirements, and industry best practices.

The Senior Analyst will collaborate across departments such as Cybersecurity, Compliance, Procurement, Legal, and Business Units to mitigate operational, financial, reputational, and information security risks posed by third-party relationships. This is a critical role that supports enterprise-wide risk reporting, regulatory compliance, and process improvements to enhance the scalability and efficiency of TPRM operations.

Key Responsibilities:

• Conduct comprehensive third-party risk assessments covering information security, compliance, financial, operational, and reputational risks.

• Review and evaluate third-party control documentation, such as SOC reports, ISO certifications, SIG Lite/Full, and vendor questionnaires.

• Identify, document, and escalate control deficiencies; recommend remediation strategies and track resolution.

• Develop and refine TPRM frameworks, processes, and reporting for enterprise-wide adoption.

• Partner with stakeholders across the organization to drive alignment and foster a strong risk-aware culture.

• Contribute to continuous improvement through process automation, documentation updates, and efficiency initiatives.

• Support audit and regulatory reporting requirements related to vendor oversight.

• Collaborate on capacity-building efforts, including risk awareness education across business functions.

Qualifications & Skills:

• Solid knowledge of risk management methods, governance models, and industry-standard risk analysis approaches.

• Experience in insurance, cybersecurity, IT, compliance risk, and vendor control frameworks.

• Strong written and verbal communication, problem-solving, and relationship management skills.

• Proven ability to manage projects to completion with attention to compliance and regulatory standards.

• Preferred: familiarity with third-party risk regulatory requirements (OCC, FFIEC, GDPR, CCPA, NYDFS 500, HIPAA).

• Understanding of IT control assessments, data privacy regulations, and vendor oversight best practices.

Travel Requirements: Up to 10%

Benefits:

• Comprehensive medical, dental, vision, and wellbeing benefits.

• Competitive 401(k) contribution and pension plan.

• Annual incentive program.

• 9 paid holidays and 23 days PTO (accrued annually).

• Paid family leave and student loan repayment program.

• Relocation support for eligible candidates.

• Inclusive workplace with reasonable accommodations available.