Senior Third Party Risk Analyst (Hybrid)

Position Compensation Range:

Pay Rate Type:

Compensation may vary based on the job level and your geographic work location. Relocation support is offered for eligible candidates.

Primary Accountabilities

• You will collaborate with our teams like Cybersecurity, Compliance, Procurement, Legal, and Business Units to perform ongoing risk assessments of third parties, focusing on operational, information security, compliance, financial, and reputational risks.
• Lead routine risk assessment and management activities, including identifying, documenting, and escalating control deficiencies, recommending remediation actions, and tracking issue resolution.
• Evaluate third-party control documentation (SOC reports, ISO 27001, SIG Lite/Full, questionnaires) to assess risk mitigation adequacy.
• Foster collaboration with stakeholders across the enterprise.
• Help develop Third-Party Risk Management (TPRM) frameworks and enhance the enterprise risk-smart culture through education.
• Establish and maintain enterprise-wide reporting.
• Help with continuous improvement efforts, process automation, and documentation updates to enhance TPRM efficiency and scalability.
• Contribute to regulatory reporting and audit support related to third-party oversight.

Specialized Knowledge & Skills Requirements:

• Demonstrated experience providing customer driven solutions, support or service.
• Solid knowledge and understanding of risk management methods, standards, processes, governance models, and industry standard risk analysis approaches.
• Knowledge of insurance, industry trends and adjacencies.
• Demonstrated experience facilitating group discussions. Skills to influence these discussions are developing.
• Strong written and verbal communication and problem-solving skills.
• Demonstrated experience establishing positive relationships with stakeholders.
• Demonstrated experience providing customer-driven solutions, support or service.
• Demonstrated experience in managing projects to their completion.

Preferred Qualifications:

• Working knowledge of third-party risk regulations and guidance (e.g., OCC, FFIEC, GDPR, CCPA, NYDFS 500, HIPAA).
• Knowledge of regulatory requirements and industry standards related to cybersecurity, data privacy, and compliance.
• Ability to evaluate risks and assess vendor control environments.
• Understanding of IT and compliance risk, control frameworks and control assessments.

Licenses

• Not applicable.

Travel Requirements

• Up to 10%.

Physical Requirements

• Not applicable.

Additional Job Information:

• In this hybrid role, you will be expected to work a minimum of 10 days per month from one of these offices: Madison, WI 53783; Boston, MA 02110
• Internal candidates are encouraged to apply regardless of location and will be considered based upon the needs of the role.

• Offer to selected candidate will be made contingent on the results of applicable background checks

• Offer to selected candidate is contingent on signing a non-disclosure agreement for proprietary information, trade secrets, and inventions

• Sponsorship will not be considered for this position unless specified in the posting

We encourage you to apply even if you do not meet all of the requirements listed above. Skills can be used in many different ways, and your life and professional experience may be relevant beyond what a list of requirements will capture. We encourage those who are passionate about what we do to apply!

We provide benefits that support your physical, emotional, and financial wellbeing. You will have access to comprehensive medical, dental, vision and wellbeing benefits that enable you to take care of your health. We also offer a competitive 401(k) contribution, a pension plan, an annual incentive, 9 paid holidays and a paid time off program (23 days accrued annually for full-time employees). In addition, our student loan repayment program and paid-family leave are available to support our employees and their families. Interns and contingent workers are not eligible for American Family Insurance Group benefits.

We are an equal opportunity employer. It is our policy to comply with all applicable federal, state and local laws pertaining to non-discrimination, non-harassment and equal opportunity. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law.