AVP, Third Party Risk Management

AVP Risk Management - KE05AE

We're determined to make a difference and are proud to be an insurance company that goes well beyond coverages and policies. Working here means having every opportunity to achieve your goals - and to help others accomplish theirs, too. Join our team as we help shape the future.

The Hartford is establishing a dedicated Third-Party Risk Management (TPRM) Office within its Enterprise Risk Management Organization to ensure consistent oversight, standardized practices, and effective controls across all third-party relationships. Reporting to the Chief Operational Risk Officer, the Head of Third-Party Risk Management will lead the design and execution of an enterprise-wide TPRM program as a newly established second-line function. This leader will coordinate with senior managers, executives, and both internal and external stakeholders to maintain alignment with the company's risk appetite and strategic objectives, while delivering value to customers and stakeholders through resilient and secure risk management practices.

Key Responsibilities:

• Define the vision, mission, and strategic direction for the new TPRM Office, ensuring it aligns with the company's risk appetite, business objectives and regulatory expectations.
• Develop an end-to-end TPRM framework, defining scope, policies, standards, and risk management practices applied across the third-party lifecycle.
• Partner with senior leadership to define the organization's tolerance for third-party risk and develop key risk and performance indicators (KRIs/KPIs) for ongoing measurement.
• Create and lead the Third-Party Risk Committee to implement an effective governance framework, facilitate informed discussions, escalate significant matters to senior leadership, and promote a culture of risk awareness.
• Work closely with cross-functional teams such as Compliance, Legal, Procurement, Information Security, and Technology to ensure the TPRM is integrated with other risk disciplines.
• Create executive and Board-level reporting on third-party risk posture including key metrics, trends, significant incidents, mitigation activities and overall program maturity.
• Play a key role in third-party incident response coordination for major incidents involving third parties, driving the response efforts and facilitating unified decision-making across the enterprise.
• Continuously monitor and adapt framework in response to evolving risk landscape, industry practices, and regulatory expectations (NAIC, NYDFS, NIST, GDPR, OFSI).
• Oversee the selection, implementation and ongoing management of a TPRM platform to support risk management.

• 10+ years in risk management, compliance, or audit, including 5+ years in third-party risk management.

• Experience building or transforming TPRM programs in regulated industries, ideally financial services.
• Proven leadership of risk management initiatives such as policy and standard development.
• A proactive approach with a strong bias for taking action and driving results
• Strong strategic thinking, stakeholder engagement, and leadership skills.
• Excellent communicator with ability to lead cross-functional teams and influence all organizational levels.
• In-depth knowledge of regulatory frameworks and standards (NIST, NYDFS, NAIC, UK FCA/PRA, OFSI).
• Familiar with GRC/TPRM platforms (e.g., Archer).
• Bachelor's/master's in business, risk management, or related field required; certifications (e.g., CTPRP) preferred.