Third Party Risk Management Analyst II

Division or Field Office:

Office of Sec, Gen Counsel

Department of Position: Privacy & Third Party Risk Dpt

Work from:

Corporate Office, Erie PA

Salary Range:

$70,705.00 - $112,944.00 *

salary range is for this level and may vary based on actual level of role hired for

*This range represents a national range and the actual salary will depend on several factors including the scope and complexity of the role and the skills, education, training, credentials, location (State) based on ERIE's geographical differences, and experience of an applicant, as well as level of role for which the successful candidate is hired. Position may be eligible for an annual bonus payment.

At Erie Insurance, you’re not just part of a Fortune 500 company; you’re also a valued member of a diverse and inclusive team that includes more than 6,000 employees and over 13,000 independent agencies. Our Employees work in the Home Office complex located in Erie, PA, and in our Field Offices that span 12 states and the District of Columbia.

Benefits That Go Beyond The Basics

We strive to be Above all in Service® to our customers—and to our employees. That’s why Erie Insurance offers you an exceptional benefits package, including:

Premier health, prescription, dental, and vision benefits for you and your dependents. Coverage begins your first day of work.

Low contributions to medical and prescription premiums. We currently pay up to 97% of employees’ monthly premium costs.

Pension. We are among the 2% of Fortune 500 companies to offer a traditional pension plan. Full-time employees are vested after five years of services.

401(k) with up to 4% contribution match. The 401(k) is offered in addition to the pension.

Paid time off. Paid vacation, personal days, sick days, bereavement days and parental leave.

Career development. Including a tuition reimbursement program for higher education and industry designations.

Additional benefits that include company-paid basic life insurance; short-and long-term disability insurance; orthodontic coverage for children and adults; adoption assistance; fertility and infertility coverage; well-being programs; paid volunteer hours for service to your community; and dollar-for-dollar matching of your charitable gifts each year.

Position Summary

The hiring manager will also consider candidates for the Third Party Risk Management Analyst I (F08), Third Party Risk Management Analyst II (F11) and Senior Third Party Risk Management Analyst (F13). The level of position offered will depend on the depth and bread of the selected candidate's qualifications and experience.

Under moderate supervision, assesses the risks of doing business with third parties. Works with Sourcing & Vendor Management, business areas, and other stakeholders to manage risks.

Duties and Responsibilities

Conducts risk assessments that identify, analyze, mitigate, and report on the risks associated with products and services provided to ERIE by third parties.

Collaborates with internal and external partners to ensure risks are assessed and mitigated.

Maintains knowledge and understanding of best practices to control privacy, compliance, security, operational resiliency, and other risks, and applies them when assessing third parties.

Monitors ERIE’s third parties for changes in their risks and recommends actions to manage the risks.

Examines potential impacts from vulnerabilities to software and hardware used by ERIE’s third parties as well as incidents ERIE’s third parties have experienced and recommends responses.

Identifies improvements to Third Party Risk Management Program and processes and participates in or leads their implementation.

Participates in the training and mentoring of newer third party risk analysts.

The first three duties listed are the functions identified as essential to the job. Essential functions are those job duties that must be performed in order for the job to be accomplished.

This position description in no way states or implies that these are the only duties to be performed by the incumbent. Employees are required to follow any other job-related instruction and to perform any other duties as requested by their supervisor, or as become evident.

Capabilities

Values Diversity

Self-Development

Nimble Learning

Collaborates

Customer Focus

Cultivates Innovation

Optimizes Work Processes (IC)

Instills Trust

Ensures Accountability

Decision Quality

Qualifications

Minimum Educational and Experience Requirements

Bachelor degree in business, risk management, information technology or related discipline and three years of related work experience in risk management and/or internal controls required; or

Associate degree in business, risk management, information technology, or related discipline and five years of experience in risk management and/or internal controls required; or

High school diploma or GED and seven years of experience in risk management and/or internal controls required.

Additional Experience

Working experience of information security practices and frameworks (National Institute of Standards and Technology, etc.), insurance or financial services industries, and/or operations or information technology auditing required.

Some overnight travel required.

Designations and/or Licenses

Industry designations, such as the Certified Third Party Risk Professional, Certified Information Systems Auditor, Certified Information Systems Manager, Certified in Risk and Information Systems Control, Certified Information Systems Security Professional, preferred.

Physical Requirements

Climbing/accessing heights; Rarely

Lifting/Moving 0-20 lbs; Occasional (<20%)

Ability to move over 50 lbs using lifting aide equipment; Rarely

Manual Keying/Data Entry/inputting information/computer use; Frequent (50-80%)

Pushing/Pulling/moving objects, equipment with wheels; Rarely

Driving; Rarely

Lifting/Moving 20-50 lbs; Rarely