Lead Third-Party Risk Analyst

Thank you for considering Amica as part of your career journey, where your future is our business.

At Amica, we pride ourselves on being an inclusive and supportive environment. We all work together to accomplish the common goal of providing the best experience for our customers. We believe in trust and fostering lasting relationships for our customers and employees! We’re focused on creating a workplace that works for all. We’ll continue to provide training, guidance, and resources to make Amica a true place of belonging for all employees. Want to learn more about our commitment to diversity, equity, and inclusion? Visit our DEI page to read about it!

As a mutual company, our people are our priority. We seek differences of opinion, life experience and perspective to represent the diversity of our policyholders and achieve the best possible outcomes.

The Lead Third-Party Risk Analyst leads the assessment, monitoring, and mitigation of technology-related third-party risks while serving as a subject matter expert in third-party risk management. This role also supports broader Risk Management initiatives and oversees the maintenance and enhancement of Amica’s Risk and Compliance (ARC) platform.

• Lead the assessment and monitoring of third-party vendors

• • Lead primarily the IT focused assessment and monitoring of technology vendors, cloud service providers, software providers, data processors, and other third parties that support Amica's operations.

• • Conduct thorough reviews of vendor risk assessments for completeness, consistency, and appropriate evaluation of cybersecurity, privacy, data management, business continuity, disaster recovery, fourth-party, and technology control risks.

• • Utilize external cybersecurity monitoring tools, including Recorded Future, to continuously monitor vendor cyber risk, analyze emerging threats and vulnerabilities, and incorporate relevant findings into third-party risk assessments and ongoing monitoring.

• • Maintain TPRM use cases in the GRC platform, document risk data, and manage system changes

• Lead development and enhancement of risk assessment methodologies

• • Lead the development of key risk assessment calculations, tolerances, and tiering ensuring a consistent and structured approach to vendor risk evaluation.

• • Collaborate with Information Technology, Enterprise Cyber Security, and Vendor Management to ensure consistency of TPRM approach

• Demonstrate TPRM subject matter expertise

• • Collaborate with internal stakeholders on SLA management, disposition findings and implement appropriate controls

• • Ensure a high level of awareness and training across the company as well as the appropriate level of accountability for vendor risk within the business units

• • Provide guidance on third-party risk management policies, procedures, and best practices

• • Collaborate with procurement, legal, and compliance teams to ensure vendor agreements meet risk and regulatory standards.

• Ensure Alignment with Other Enterprise Risk Programs

• • Collaborate with ERM to align risk strategies, assess risks, and develop mitigation strategies

• • Collaborate with ORM to effectively map CUEC’s and internal control procedures to vendor engagement

• Lead Reporting & Presentations

• • Create TPRM dashboards, enhance reporting processes, and use BI tools effectively.

• • Track and report key risk indicators (KRIs) to senior leadership, providing insights on vendor-related risks and trends.

• Manage Amica's Risk and Compliance Software Platform (ARC)

• • Manage the ongoing maintenance and enhancement of ARC, including TPRM use cases, workflows, risk data, reporting capabilities, integrations, and system changes.

• • Lead the Application Coordinator Team, establish priorities, coordinate activities, and ensure appropriate operating procedures and ownership are maintained.

• • Maintain a forward-looking ARC roadmap on a biannual basis, reflecting business priorities, regulatory needs, platform capabilities, technical dependencies, and planned enhancements.

• • Manage technical enhancements to the platform, including identifying and documenting requirements; leading the product team through confirmation, prioritization, and collaboration on enhancements; validating data; coordinating pre- and post-deployment testing; and ensuring applicable change management policies are followed throughout the process.

• • Coordinate with Technology, platform vendors, product owners, data owners, and business users to resolve issues, improve data quality, and support sustainable platform performance.

Requirements:

• Bachelor's degree in Accounting, Business, Management Information Systems, Cybersecurity, Information Technology, Data Science, or a related field

• 5-10 years of third-party risk, technology risk, information security, GRC, or insurance experience preferred

• Strong understanding of third-party risk management frameworks and technology control domains, including cybersecurity, privacy, cloud, data management, resilience, and fourth-party risk

• Experience assessing technology vendors and reviewing SOC reports, security questionnaires, control evidence, remediation plans, and other vendor assurance documentation

• Experience administering and enhancing a GRC platform, including requirements definition, workflow configuration, data validation, testing, release coordination, and change management

• Ability to lead cross-functional product or application teams and maintain a forward-looking system roadmap

• Strong analytical, quantitative, and problem-solving skills, with the ability to be an innovative thinker and understand the big picture

• Experience conducting internal and vendor-facing criticality and risk assessments

• Skilled use of business intelligence tools for reporting and data analysis

• Ability to work cross-functionally with technical and nontechnical stakeholders at various levels, with clear written and verbal communication

This role does not currently offer employment visa sponsorship.

Current Amica employees should review the below information:

• Level: 13
• Important: Relocation program may apply
• Deadline For Internal Employees: November 30, 2026

Total Rewards

• Medical, dental, vision coverage for single or family, short- and long-term disability, and life insurance

• Paid Vacation – you will receive at least 13 vacation days in the first 12 months, amounts could be greater depending on the role. While able to use prior to accrual, vacation time will accrue monthly.

• Holidays - 14 paid holidays observed

• Sick time - 6 days sick time at hire, 6 additional days sick time at 90 days of employment

• Generous 401k with company match and immediate vesting. Additionally, annual 3% non-elective employer contribution

• Annual Success Sharing Plan - Paid to eligible employees if company meets or exceeds combined ratio, growth and/or service goals

• Generous leave programs, including paid parental bonding leave

• Student Loan Repayment and Tuition Reimbursement programs

• Generous fitness and wellness reimbursement

• Employee community involvement

• Strong relationships, lifelong friendships

• Opportunities for advancement in a successful and growing company

Amica conducts background checks which includes a review of criminal, educational, employment and social media histories, and if the role involves use of a company vehicle, a motor vehicle or driving history report. The background check will not be initiated until after a conditional offer of employment is made and the candidate accepts the offer. Qualified applicants with arrest or conviction records will be considered for employment.

The safety and security of our employees and our customers is a top priority. Employees may have access to employees’ and customers’ personal and financial information in order to perform their job duties. Candidates with a criminal history that imposes a direct or indirect threat to our employees’ or customers’ physical, mental or financial well-being may result in the withdrawal of the conditional offer of employment.

About Amica

Amica Mutual Insurance Company is America’s oldest mutual insurer of automobiles. A direct national writer, Amica also offers home, marine and umbrella insurance. Amica Life Insurance Company, a wholly owned subsidiary, provides life insurance and retirement solutions. Amica was founded on the principles of creating peace of mind and building enduring relationships for and with our exceptionally loyal policyholders, a mission that thousands of employees in offices nationwide share and support.

Equal Opportunity Policy: All qualified applicants who are authorized to work in the United States will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, family status, ethnicity, age, national origin, ancestry, physical and/or mental disability, mental condition, military status, genetic information or any other class protected by law. The Age Discrimination in Employment Act prohibits discrimination on the basis of age with respect to individuals who are 40 years of age or older. Employees are subject to the provisions of the Workers' Compensation Act.

Amica Mutual Insurance Company is committed to protecting job seekers from recruitment fraud. We never request sensitive personal information or payment during the interview process. All legitimate job opportunities are listed on our official careers site: https://careers.amica.com. Learn more in the "Is Amica hiring?" section of our FAQ.

At Amica, opportunity isn’t always linear

We pride ourselves on nurturing and activating curiosity, because what's best for our people is what's best for our business.

Amica offers diverse and engaging career paths to fit your unique skill set, interests and abilities. See what Amica has to offer and get an inside look at your future role through the eyes of current members of our team.

Our mission is to create peace of mind

For over 115 years, we’ve championed the idea that empathy is our best policy. At Amica, we’re more than an insurance company. We build relationships. Whether it’s the first call or the moment our customers need us most, we always show up with compassion. We create policies to fit our clients' needs, and find answers where they’re needed most. That’s insurance that works.

Values that drive us

You care about integrity, purpose and community. So do we.We’re looking for people who value mutual respect as much as we do.We want to welcome you to a culture where you feel you belong.

Mutual Respect

A culture of doing the right thing, brought to life by our deep commitment to volunteerism

Empowered Growth

Career-long support, including training, development and advancement opportunities

Personally Invested

Top-tier medical plans for physical and mental health, retirement, well-being and more

Inside Track

Security and stability reflected in our grow-from-within career development model

What to expect when applying

Find the best fit

We’re always looking for the right candidates to join our growing team. Take a look at the current open roles and evaluate which you think you’d be a good fit for.



Submit resume and apply

If selected, a member of our talent acquisition team will reach out to you at the email address provided to schedule your initial phone screen.



Interview with the team

Beyond the initial phone screen, you will meet with the hiring manager and additional members of the team as part of your interview process.