Third Party Risk Management Consulting Director

You have a clear vision of where your career can go. And we have the leadership to help you get there. At CNA, we strive to create a culture in which people know they matter and are part of something important, ensuring the abilities of all employees are used to their fullest potential. We are seeking a strategic thought leader to help drive forward our Third-Party Risk & Assurance function. In this role, you will play a critical part in strengthening and evolving our Third-Party Risk Management capabilities, driving consistency, transparency, and operational excellence across the organization. You will partner closely with Third Party risk peers and cross-functional stakeholders to enhance assurance practices, enable data-driven decision-making, and ensure the organization is well-positioned to manage third-party risk in an increasingly complex regulatory and technology landscape. The Third Party Risk Management program at CNA coordinates and performs risk management activities across cybersecurity, business continuity, compliance, and general operational risk controls throughout the lifecycle of the Third Party relationship. This individual contributor position manages program elements of the Third Party Risk Management program, including but not limited to, assessment methodology updates, assurance, performance and program level reporting and analytics. JOB DESCRIPTION: Essential Duties & Responsibilities Performs a combination of duties in accordance with departmental guidelines: Perform Third Party Risk assessments for complex, sensitive, and escalated Third Party assessments, including those requiring on-site reviews. In the course of executing these critical and sensitive assessments, evaluate Third Party questionnaire responses, perform control review/validation, and assess documentation per established procedures and standards. Perform periodic quality assurance and review of Third Party Risk assessments performed by all assessment team members to ensure that all assessments meet established standards and expectations. Actively solicit business partner engagement and buy-in by attending, and organizing where appropriate, periodic meetings with business partners to ensure Third Party Risk Management is appropriately meeting business needs. Coordinate, review and submit program analytics to leadership covering process utilization metrics, program Key Performance Indicators, Third Party Risk Key Risk Indicators, and escalation reporting and management. Support leadership in managing and implementing all identified program, process, and technology configuration process improvements in the Third Party Risk Management program roadmap. Own the design, implementation, and ongoing management of the enterprise weighted third-party risk scorecard, ensuring risk calculations consistently incorporate assessment results, issue severity, remediation status, performance metrics (SLAs/KPIs), and monitoring signals to support prioritization, escalation, and executive decision-making. Develop and maintain interaction model with all relevant CNA Business and Risk Stakeholders. Ensure they are appropriately looped into TPRM processes and enabled to support TPRM through workflow, reporting, and analytics Leveraging general Third Party Risk Management expertise, take the lead on performing regular updates of CNA's Third Party Risk Management methodologies Own enterprise-level governance, prioritization, and escalation of third-party issues to ensure remediation outcomes are risk-based, consistent, and defensible. Lead the support of TPRM Technology including the administration, management, configuration, and testing for all current TPRM technology. Additionally, monitor TPRM technology market landscape to ensure CNA's TPRM technology stack is appropriately updated. Develop and maintain a robust quality assurance program that extends outside of just individual auality control of assessments. May perform additional duties as assigned. Reporting Relationship AVP or above Skills, Knowledge & Abilities Program expertise in Third Party Risk Management best-practices including industry security, business continuity, and data privacy standards, risk assessment testing procedures, issue management processes, and inherent/residual risk calculations Compelling communicator; demonstrated verbal and written communication skills. Detail oriented with strong organizational skills and ability to manage multiple projects effectively. Ability to communicate and simplify technical concepts for those not familiar with risk management concepts, particularly in the context of business stakeholder training. Strong interpersonal skills with the ability to work with staff at all levels. Proven thought leadership and ability to provide informal guidance to more junior team members. Strong knowledge of Microsoft Office Suite and other business-related software systems including processing systems and applications. Education & Experience Bachelor's degree or equivalent Typically a minimum of nine years of experience in Supplier Risk or Third-Party Risk assessment Experience developing and managing remediation action/incident management processes. Experience in developing remediation action/incident management specific reporting and analytics. CISSP, CRISC, or CISA highly preferred #LI-CP1 #LI-hybrid In certain jurisdictions, CNA is legally required to include a reasonable estimate of the compensation for this role. In District of Columbia, California, Colorado, Connecticut, Illinois, Maryland, Massachusetts, New York and Washington, the national base pay range for this job level is $97,000 to $189,000 annually. Salary determinations are based on various factors, including but not limited to, relevant work experience, skills, certifications and location. CNA offers a comprehensive and competitive benefits package to help our employees – and their family members – achieve their physical, financial, emotional and social wellbeing goals. For a detailed look at CNA's benefits, please visit cnabenefits.com. CNA is committed to providing reasonable accommodations to qualified individuals with disabilities in the recruitment process. To request an accommodation, please contact leaveadministration@cna.com. At CNA, we are focused on success, individually and collectively. We pride ourselves on promoting a culture that challenges and engages people. We strive to connect people, departments and business areas, to function as a team, and to serve our customers and communities with professionalism and respect. Our dedication to employee engagement, continuous learning and the open exchange of ideas is the cornerstone of our business. These ideals, combined with our focus on the customer, enable us to explore new market opportunities and build on our success. Our values, culture and financial strength are what differentiates us from other employers and make CNA the place you want to work. At CNA, we are committed to advancing a culture of inclusion – one that attracts talent from all walks of life, fosters respect and collaboration, and enables all of our colleagues to do their best work. At CNA, we have a long standing commitment to the diverse communities in which we live and work. We actively make a difference for the greater good through partnerships, sustainability, initiatives, and working together for a better tomorrow. Corporate Social Responsibility is not one person, or one department, it's the entire enterprise coming together to make the world a better place.