Enterprise Risk Lead

Munich Re•Batavia Township, OH

About The Position

Munich Re America Services (MRAS) is a shared service organization providing services to Munich Re's US property and casualty companies and other group entities. As part of Munich Re's US operations, the organization draws on the financial strength and stability of a leading insurance and reinsurance brand. The Enterprise Risk Lead is a recognized subject matter expert within Integrated Risk Management (IRM), independently leading complex risk initiatives and advancing specialized capabilities, methodologies, governance practices, and organizational effectiveness. The position operates with substantial autonomy, advises and constructively challenges stakeholders and senior leadership, and influences outcomes across multiple functions, business units, and organizational areas. The initial specialization is IT operational risk. The role will establish and execute second-line oversight of IT operational risks for ERGO NEXT, using the Operational Risk and Control System (ORCS) framework and relevant risk, control, audit, incident, resilience, and project information to develop a forward-looking view of material IT and ICT risks, control effectiveness, governance gaps, and required management actions. It will work with ERGO NEXT and other Munich Re stakeholders to promote a proportionate, coordinated approach aligned with applicable regulatory expectations and Munich Re requirements, while avoiding unnecessary duplication. After establishing IT oversight, the Enterprise Risk Lead will support the orderly transition of IT ORCS activities, documentation, open actions, and governance dependencies to the responsible IT function. As organizational priorities evolve, the role may also lead or contribute to other integrated risk domains and enterprise initiatives, including Information Security Management (ISM), Business Continuity Management (BCM), operational risk, control governance, and other cross-functional risk capabilities.

Requirements

7–10 years of progressive risk management or related experience, including enterprise-level leadership, governance, and oversight of significant risk initiatives or programs.
Experience in IT operational risk, technology risk, internal audit, information security, controls, business continuity, compliance, or a related discipline.
Experience presenting to senior leadership and leading complex assessments, projects, programs, or cross-functional initiatives.
Bachelor's degree in a related discipline.

Nice To Haves

Relevant professional certification(s) aligned with the role or area of specialization.
Advanced degree in a related field, particularly for specialized or leadership-focused roles.

Responsibilities

Serve as a recognized subject matter expert and trusted advisor in assigned enterprise risk domains, providing expert guidance, consultation, and constructive challenge to stakeholders and senior leadership.
Lead the design, execution, and continuous improvement of second-line IT operational risk oversight for ERGO NEXT, aligned with the ORCS framework, regulatory expectations, and Munich Re requirements.
Assess material IT and ICT risks using risk and control assessments, control-owner self-assessments, audit and regulatory findings, incidents and loss events, technology resilience and disaster recovery information, major programs and projects, risk scenarios, and other relevant sources.
Independently review and challenge risk and control assessments, including risk descriptions, control conclusions, supporting evidence, ownership, remediation plans, risk acceptance decisions, and escalation of material issues.
Consolidate complex information into a forward-looking view of material IT operational risks, control and governance themes, emerging concerns, and management priorities.
Lead recurring IT ORCS assessment, governance, monitoring, and reporting activities, including risk workshops, executive and committee materials, action tracking, and stakeholder follow-up.
Collaborate across ERGO NEXT, IRM, IT, BCM, Compliance, Internal Audit, Legal, TPRM, and business functions to clarify responsibilities, resolve gaps, and support risk-based decision-making.
Interpret relevant regulatory requirements, industry standards, policies, and frameworks; identify gaps and recommend practical, proportionate improvements to risk governance, controls, assessment processes, and reporting.
Deliver executive-ready reporting, insights, and recommendations to senior leadership, governance forums, boards, auditors, regulators, and other key stakeholders.
Lead or support significant integration, regulatory, audit, remediation, disruption, and technology risk activities within the role's scope.
Plan and support transition of IT ORCS responsibilities to the responsible IT function, including knowledge transfer, documentation, open-action handoff, and alignment of ongoing governance interfaces.
Lead or contribute to other priority IRM domains and cross-functional initiatives as team needs evolve, including ISM, BCM, operational risk, control governance, and enterprise risk capability enhancements.

Benefits

Two health insurance plan options: PPO or High Deductible.
Prescription drug coverage included in the health insurance plan.
Vision and dental insurance plans.
Basic life insurance at no cost, equal to 1x annual salary, and AD&D coverage equal to 1x annual salary.
Short- and long-term disability coverage.
Supplemental life and AD&D plans available for purchase for employees and dependents.
Voluntary accident, critical illness, and hospital indemnity benefit plans.
401(k) plan with up to a 5% employer match.
Retirement savings plan that is 100% company funded.
Paid time off beginning at 24 days annually, with additional days for milestone service anniversaries.
Eligibility for a yearly bonus.
Health and wellness programs at no cost.
Paid time off for eligible family care needs.
Tuition assistance and educational achievement bonuses.
Corporate matching gifts program for charitable donations.
Paid time off to volunteer in the community.