IT - Third Party Risk Manager I - II Remote - The Cincinnati Insurance Companies

Make a difference with a career in insurance

At The Cincinnati Insurance Companies, we put people first and apply the Golden Rule to our daily operations. To put this into action, we’re looking for extraordinary people to join our talented team. Our service-oriented, ethical, knowledgeable, caring associates are the heart of our vision to be the best company serving independent agents. We help protect families and businesses as they work to prevent or recover from a loss. Share your talents to help us reach for continued success as we bring value to the communities we serve and demonstrate that Actions Speak Louder in Person®.

If you’re ready to build productive relationships, collaborate within a diverse team, embrace challenges and develop your skills, then Cincinnati may be the place for you. We offer career opportunities where you can contribute and grow.

Build your future with us

Our Vendor Management Office department is currently seeking a Third Party Risk Manager.

Work location and flexibility are subject to change based on evolving business needs, but generally, selected candidates who reside:

• within 50 miles of Headquarters may be expected to work in a hybrid capacity, combining remote and onsite work when business needs necessitate.
• more than 50 miles from Headquarters must be flexible and available to travel to Fairfield, OH, on an occasional basis for special events, training sessions, or key meetings.

To ensure active engagement in meetings, it is mandatory for all IT associates to have cameras turned on for all interactions with other associates, customers, and stakeholders. Your camera must be on and positioned correctly to clearly show your face. This practice is crucial for maintaining connection and engagement, as non-verbal cues are essential for effective communication.

Be ready to:

conduct information security risk assessments of vendors and vendor software, based on company standards and risk appetite, leveraging demonstrated working knowledge of industry security practices

make information security risk recommendations on behalf of the company, within limits approved by management

review project documentation, system design documents, vendor security policies and other vendor security references (i.e. SOC II type 2, SIG, AUP, PCI ROC, TPRM monitoring reports, etc.) to determine the extent, type, and scope of risks of the vendor relationship

provide security-related recommendations and communicate the need for the changes to business, IT and other stakeholders

coordinate with IT architects, project teams and vendors to bring system designs into alignment with company security standards

follow procedures to establish company records for the risk management process

modify vendor risk procedures and other tools to support continuous improvement of the vendor risk management program