Senior Third Party Risk Management Analyst

Job Description

Insight Global is seeking a Senior TPM Analyst to join a client in the regulatory technology space. This client is expanding their offerings into the insurance industry and are seeking a risk and compliance subject matter expert to guide their product teams. This role covers the AI vendor onboarding and ongoing oversight angle. We are looking for the person who personally evaluates AI/technology vendors, runs the security and risk questionnaires, and tracks vendor evidence — not a manager who oversees TPRM.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to View email address on click.appcast.io learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy:

Skills and Requirements

- Personally involved in contract review for technology vendors

- Expertise within the Insurance industry (any domain) and impact of AI from a risk perspective

- 4+ years of experience in TPRM

- Familiarity with traditional vendor risk processes that pre-dated AI —questionnaires, controls, and evidence types used for non-AI vendors.

- Hands-on use of legacy GRC or vendor management systems.

- Hands-on use of TPRM platforms (e.g., Prevalent, ProcessUnity, ServiceNow VRM, OneTrust Vendorpedia, Archer, or equivalent).

- Direct experience tracking ongoing vendor risk and evidence after onboarding.

o Familiarity with continuous monitoring or external scoring tools (e.g., CyberGRX, SecurityScorecard, Bitsight, UpGuard, or equivalent). - Experience evaluating AI-specific vendor risks — model leakage, training data provenance, agent autonomy, or equivalent.

o How AI vendor onboarding actually works at their carrier — timeline, friction points, common reasons vendors get rejected.

o Where AI-specific risks fit into a traditional TPRM framework, and where the framework breaks down.

o Whether their carrier treats AI vendors differently from other technology vendors and, if so, how.

- Personally conducted vendor due diligence on AI/ML or technology vendors — sending questionnaires, reviewing responses, scoring vendors, recommending approval or rejection.

- Contract review specifically for AI-specific clauses (data usage, audit rights, model documentation, change notification).