Enterprise Risk Management Lead - Remote

CSAA Insurance Group, a AAA Insurer•Washington, NV

9d•$110,700 - $147,500•Remote

About The Position

The Enterprise Risk Management Lead supports the organization’s risk management framework and provides complex risk analysis, reporting, and advisory support to senior management and internal stakeholders. Operating with a high degree of independence, the role applies sound judgment to medium- and high-complexity matters, including new and ambiguous situations where precedent may be limited. The role’s primary emphasis is the implementation, monitoring, and continuous improvement of enterprise risk management processes. As a secondary accountability, the role supports the enterprise approach to responsible artificial intelligence by coordinating AI governance activities, facilitating cross-functional reviews, and helping ensure AI-related risks and controls are proportionate to each use case’s impact and maturity.

Requirements

Bachelor’s degree in a related field or an equivalent combination or education and experience.
6+ years of proven experience in risk management, insurance, financial analysis, actuarial, underwriting, product management or related experience required.

Nice To Haves

Prior experience in Enterprise Risk Management strongly preferred.
Strong organizational and project management skills and ability to accurately complete complex projects within tight deadlines, including leading multiple projects simultaneously.
A solution-oriented problem solver with strong analytical skills. Able to quickly gain a solid understanding of the company's operations and overall business goals and objectives.
Experience working with operational / product / financial measures and models, including analysis of results.
Ability to collaborate with all levels of personnel from end users to executive management.
Ability to influence outcomes with or without formal authority, often delivering results through others.
Ability to build business case scenarios.
People-oriented with excellent communication skills (oral and written modes).
Relevant certifications are preferred, including: Associate in Risk Management (ARM), Associate in Reinsurance (ARe), Chartered Property/Casualty Underwriter (CPCU), Financial Risk Management (FRM), or Associate of Casualty Actuary Society (ACAS).
Understanding of CSAA IG business strategy.
Broad actuarial skillset with deep understanding of pricing, reserving, ERM, statutory accounting, and risk and return concepts.
Actively shapes our company culture (e.g., participating in employee resource groups, volunteering, etc.).
Lives into cultural norms (e.g., willing to have cameras on when it matters: helping onboard new team members, building relationships, etc.).
Travels as needed for role, including divisional / team meetings and other in-person meetings.
Fulfills business needs, which may include investing extra time, helping other teams, etc.

Responsibilities

Implement and continuously improve enterprise risk management processes, including risk identification, ownership, assessment, scoring, monitoring, reporting, mitigation quantification, and action planning across established and emerging risk areas.
Support the annual ERM planning cycle by helping define risk priorities, assessment activities, reporting expectations, governance calendars, and areas requiring deeper review, including AI and emerging technology risks.
Establish and maintain processes to monitor enterprise risks on an ongoing basis, with clear ownership, escalation paths, mitigation actions, approval conditions, and follow-up requirements.
Identify and evaluate emerging risks and trends, including risks associated with generative AI, machine learning, AI-enabled workflows, autonomous or agentic systems, data use, cybersecurity, model performance, third parties, and technology architecture.
Apply a consistent, proportionate risk methodology to evaluate business impact, autonomy, data sensitivity, external exposure, regulatory considerations, reversibility, control effectiveness, residual risk, and lifecycle stage.
Manage risk intake and assessment activities for enterprise initiatives and AI use cases, including initial risk analysis, review routing, case readiness, documentation requirements, decision materials, and governance follow-up.
Coordinate cross-functional risk reviews with Enterprise Risk Management, Compliance, Legal, Cybersecurity, Data Science, Model Governance, Data Governance, Enterprise Architecture, technology teams, and business partners.
Help determine the appropriate level and pathway of governance review based on materiality and risk, including whether matters qualify for streamlined review or require broader committee, executive, or Board-level consideration.
Distinguish controls appropriate for experimentation and pilots from requirements needed before production, external deployment, regulated use, or implementation of more autonomous capabilities.
Assess whether proposed safeguards and human oversight are meaningful, timely, supported by appropriate information and authority, and sufficient for the nature and significance of the risk.
Identify material evidence gaps, conflicting recommendations, unclear ownership, duplicative requirements, control weaknesses, and requirements that are not proportionate to the underlying risk or decision consequence.
Develop timely, accurate, and decision-ready risk reports, analyses, dashboards, executive briefings, and recommendations that clearly describe risk exposure, safeguards, residual risk, required decisions, and accountable owners.
Prepare standard Board and committee risk materials, including quarterly Audit Committee updates, annual reports to the full Board, and information related to material or emerging risks such as AI.
Support the leader accountable for enterprise AI governance and coordinate the day-to-day activities of the cross-functional AI Council as part of the organization’s broader risk-governance structure.
Draft risk acceptance or approval conditions, escalation recommendations, decision records, and practical guidance for business and technical teams.
Develop and maintain enterprise risk and AI governance policies, procedures, standards, playbooks, templates, risk tiers, intake criteria, review methods, and control documentation.
Ensure governance documentation clearly distinguishes mandatory requirements, conditional controls, and informational guidance, and accurately reflects accountable owners, approval status, effective dates, version history, and superseded materials.
Respond to external ERM compliance, information, and reporting requirements in coordination with accountable subject-matter experts, including requirements affecting AI and emerging technologies.
Provide complex risk analysis and practical recommendations that support business decisions and responsible innovation while protecting the enterprise and avoiding unnecessary governance burden.
Promote clear risk ownership, consistent governance practices, reusable evidence, meaningful accountability, and effective coordination across business, risk, compliance, legal, technology, and control functions.