Head of Enterprise Risk Managment & Security

Minnesota Historical Society • Saint Paul, MN

9h • $86,840 - $180,528 • Onsite

About The Position

This position exists to provide leadership, strategic design, and professional administration for the Minnesota Historical Society’s (MNHS) Enterprise Risk Management (ERM), compliance, and security programs. The Head of Enterprise & Risk Management is responsible for developing, implementing, and maintaining risk management strategies that protect MNHS staff, visitors, collections, facilities, information, and reputation across the organization.

Working within the Shared Services division, this position leads risk assessment, policy development, compliance initiatives, emergency preparedness planning, security operations, and cybersecurity governance. This position works collaboratively across MNHS to identify risks, implement mitigation strategies, support organizational resilience, and ensure compliance with applicable policies, standards, and regulations.

Requirements

• Bachelor’s degree in Emergency Management, Business Administration, Criminal Justice, Information Security, Corporate Risk, or a functionally parallel field.
• Eight years of progressively responsible experience in risk management, security, emergency management, compliance, business continuity, cybersecurity, or related fields.
• Three years of direct supervisory experience leading multi-tiered protective or compliance-driven teams.
• Proven understanding of modern Enterprise Risk Management frameworks, risk register tracking models, and key risk indicator (KRI) data collection.
• Demonstrated ability to coordinate multi-faceted financial budgets, optimizing daily operational expenditures alongside capital infrastructure allocations.
• Ability to maintain a flexible operational schedule, responding to emergency on-call notices or weekend security demands as necessary.
• Possession of a valid driver's license and a willingness to travel regularly to historical landmarks, libraries, and museum properties statewide.

Nice To Haves

• Possession of specialized risk or protection credentials, including but not limited to: Certified Institutional Protection Manager (CIPM), Certified Protection Professional (CPP), Associate in Risk Management (ARM), or Professional in Risk Management (PRM).
• Prior experience working within preservation facilities, historical societies, cultural complexes, university networks, or museums housing archival artifacts.
• Familiarity with evaluating automated cloud architecture security parameters, software vendor risk assessments, and the structural application of NIST CSF standards.

Responsibilities

• Lead and coordinate enterprise risk management programs to identify, assess, and mitigate organizational risks.
• Provide guidance and recommendations related to cybersecurity risk, data management, and information protection programs in collaboration with Technology Services.
• Lead physical security, emergency preparedness, and business continuity programs across MNHS.
• Provide leadership, direction, and oversight for assigned staff and departmental resources.

Benefits

• Eligible to participate in State Employee Group Insurance Program and a retirement program with employer contribution.
• Generous vacation and sick time accruals with additional paid holidays.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager