Risk Management Specialist

Position Overview
The Risk Management Specialist plays a strategic role in supporting the Enterprise Risk Management (ERM) function by identifying, assessing, monitoring, and mitigating risks across the organization, with a strong emphasis on insurance industry operations and regulatory requirements. This role supports enterprise-wide risk initiatives, third-party risk oversight, fraud prevention compliance, and regulatory reporting while partnering with business leaders to promote a risk-aware culture.
This position reports to the Director of Enterprise Risk Management.

Essential Elements

Third-Party Risk Management (TPRM)

• Support execution and continuous improvement of the TPRM program.
• Conduct pre-contract due diligence and ongoing vendor risk assessments.
• Facilitate annual vendor reviews and ensure timely remediation of identified issues.
• Administer and maintain vendor risk management systems/platforms.
• Prepare monthly and quarterly vendor risk dashboards and reporting.

Vendor Inventory Management

• Maintain accuracy and completeness of the vendor inventory database.
• Ensure vendor records remain current and compliant with internal standards.

Special Investigations Unit (SIU) Coordination

• Coordinate investigations of suspected fraudulent insurance claims.
• Maintain accurate and detailed investigative documentation.
• Ensure compliance with state anti-fraud regulations and reporting deadlines.
• File required reports with state Departments of Insurance.
• Coordinate annual and new hire fraud awareness training.

Enterprise Risk Management Support

• Support enterprise risk assessments, risk identification, mitigation planning, and monitoring activities.
• Maintain enterprise risk registers and supporting documentation.
• Assist with control assessments and issue tracking.

Risk Reporting & Analytics

• Develop and maintain dashboards, KRIs, and management reporting.
• Analyze trends and emerging risks for leadership review.

Compliance & Regulatory Support

• Assist with ORSA documentation and NAIC-related reporting.
• Review SOC 1 reports and track Complementary User Entity Controls (CUECs).
• Support internal and external audit requests as needed.

Continuous Improvement / Projects

• Participate in cross-functional strategic initiatives.