Vice President, Enterprise Risk Management

Department: Legal Job Description: The Vice President, Enterprise Risk Management is responsible for leading and continuously advancing The Mutual Group s enterprise risk management program, ensuring risk management is embedded into strategic planning, governance, operational decision-making, and organizational culture in support of the organization s mission to serve property casualty mutual insurance carriers. Reporting to the Chief Legal Officer, this executive partners closely with executive leadership, Legal, Information Security, Compliance, Internal Audit, and Member organizations to identify, assess, monitor, and communicate enterprise risks while integrating risk management across the organization to support informed decision-making and long-term business objectives. The Vice President provides enterprise leadership for risk governance, privacy and AI governance, Board risk reporting, and the continued development and maturity of the enterprise risk management framework. This role plays a key leadership role in operationalizing the organization s approach to enterprise risk and privacy by advancing a comprehensive privacy governance and data protection program, integrating privacy risk considerations into the enterprise risk framework, and supporting compliance with evolving data privacy and AI-related regulatory requirements. As a strategic advisor to executive leadership, this role enables informed decision-making by balancing prudent risk management with innovation, growth, and operational excellence in support of The Mutual Group s Members and long-term strategic objectives. Work Arrangement: Employees who live within 30 miles of the TMG home office are expected to follow a hybrid or in-office schedule. The initial training period may require additional in‑office days. Accountabilities: Enterprise Risk Leadership Lead the development, execution, and continuous maturity of The Mutual Group s Enterprise Risk Management (ERM) strategy, framework, and operating model. Establish and maintain enterprise risk governance, including risk taxonomy, assessment methodologies, risk registers, and enterprise risk reporting. Lead the development and ongoing review of enterprise risk appetite statements and risk tolerance thresholds aligned with corporate strategy, business objectives, and Member commitments. Ensure enterprise risk considerations are integrated into strategic planning, acquisitions, technology investments, new business initiatives, and significant organizational change. Partner with business leaders to identify, assess, prioritize, and monitor strategic, operational, financial, regulatory, technology, cybersecurity, third-party, reputational, and emerging risks. Develop and maintain enterprise Key Risk Indicators (KRIs), dashboards, and analytics that provide meaningful insights into enterprise risk exposure, trends, and program effectiveness. Prepare and present enterprise risk reporting and emerging risk insights to executive leadership, the Board of Directors, and Member organizations. Monitor the external business, regulatory, technology, and insurance landscape while advising executive leadership on enterprise risks associated with strategic initiatives, partnerships, and emerging opportunities. Serve as a trusted advisor to executive leadership by integrating enterprise risk considerations into strategic decision-making, business planning, and enterprise transformation initiatives while promoting a culture of informed risk ownership, accountability, and continuous improvement across the enterprise. Privacy Governance Data Protection Lead the execution and continuous improvement of the organization s privacy governance and data protection program under the direction of the Chief Legal Officer. Oversee implementation of privacy risk management practices, including privacy impact assessments and data protection reviews. Establish enterprise privacy governance practices supporting the responsible collection, use, protection, retention, and sharing of organizational and personal information. Partner with Legal, Compliance, Information Security, AI leadership, and business leaders to integrate privacy, responsible AI, and data governance into enterprise risk management. Monitor emerging AI, privacy, and regulatory developments and assess organizational impacts. Support response efforts for significant privacy incidents, including coordination of risk assessment, remediation, and control improvements. Promote compliance with applicable privacy, data protection, and AI governance requirements across the enterprise. Governance Regulatory Oversight Lead enterprise risk governance processes, including oversight structures, escalation protocols, and cross-functional decision frameworks. Collaborate across Legal, Compliance, and Information Security to align enterprise governance, risk, and control frameworks. Develop enterprise policies, standards, and reporting frameworks that strengthen governance, accountability, and risk oversight. Support implementation and optimization of GRC/ERM systems, analytics, and reporting capabilities to enable data-driven risk insights. Monitor legislative and regulatory developments affecting enterprise risk, governance, privacy, and compliance. Develop executive and Board reporting that provides meaningful insight into enterprise risk profile, emerging risks, organizational resilience, and overall risk exposure. Facilitate executive discussions regarding enterprise risk priorities, risk appetite, and mitigation strategies. Qualifications: 12 years of progressive leadership experience in enterprise risk management, governance, compliance, legal, audit, operational risk, or a related discipline. Bachelor s degree in Business, Risk Management, Finance, Accounting, Law, or related field required. Advanced degree (MBA or JD) and/or professional certifications (e.g., ARM, CRISC, CISA, CIPP, CISSP) preferred. Demonstrated success designing, implementing, and maturing enterprise risk management programs within complex or highly regulated organizations. Experience partnering with executive leadership and presenting enterprise risk insights and recommendations to Boards of Directors. Demonstrated ability to lead enterprise initiatives through collaboration, influence, and alignment across multiple business functions. Strong knowledge of enterprise risk management frameworks, governance models, and risk assessment methodologies. Broad understanding of strategic, operational, financial, regulatory, technology, cybersecurity, privacy, third-party, and other enterprise risks. Knowledge of privacy, data protection, AI governance, and evolving regulatory requirements. Strong business acumen with the ability to translate enterprise risks into business recommendations that support innovation, growth, and operational excellence. Executive presence with the ability to influence, build relationships, and lead through collaboration across a matrixed organization. Exceptional analytical, strategic thinking, communication, and problem-solving skills. Experience within the insurance, financial services, or another highly regulated industry required. Property Casualty insurance experience strongly preferred. Experience in a private equity-backed, growth-oriented, acquisitive, or multi-entity organization preferred. Pay Range: Anticipated Hiring Range: $200,000 - $260,000 annual base salary depending on experience, qualifications, and geographic location Benefits: We are proud to offer our full-time regular employees a robust benefits suite that includes: Competitive base salary plus incentive plans for eligible team members 401(K) retirement plan that includes a company match of up to 6% of your eligible salary Free basic life and AD D, long-term disability and short-term disability insurance Medical, dental and vision plans to meet your unique healthcare needs Wellness incentives Generous time off program that includes personal, holiday and volunteer paid time off Flexible work schedules and hybrid/remote options for eligible positions Educational assistance Equal Opportunity Employer The Mutual Group is an Equal Opportunity Employer. It is our policy to recruit, hire, train and promote individuals in all job classifications without regard to race, color, religion, sex, national origin, age, veteran status, disability, sexual orientation, gender identity or any other characteristic protected by law. Know Your Rights: Workplace Discrimination is Illegal Your Rights Under USERRA Applicants requiring a reasonable accommodation due to a disability at any stage of the employment application process should contact Talent themutualgroup.com . Employment Verification The Mutual Group participates in the E-Verify program and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the U.S. You are protected from employment discrimination based on your citizenship status and national origin. E-Verify Program Overview E-Verify Participation Poster All offers of employment are contingent upon the successful completion of a background check. #TMG