Vice President, Enterprise Risk Management

The Mutual Group • Iowa - TMG Home Office, IA

1d • $200,000 - $260,000 • Hybrid

About The Position

The Vice President, Enterprise Risk Management is responsible for leading and continuously advancing The Mutual Group's enterprise risk management program, ensuring risk management is embedded into strategic planning, governance, operational decision-making, and organizational culture in support of the organization's mission to serve property & casualty mutual insurance carriers. Reporting to the Chief Legal Officer, this executive partners closely with executive leadership, Legal, Information Security, Compliance, Internal Audit, and Member organizations to identify, assess, monitor, and communicate enterprise risks while integrating risk management across the organization to support informed decision-making and long-term business objectives. The Vice President provides enterprise leadership for risk governance, privacy and AI governance, Board risk reporting, and the continued development and maturity of the enterprise risk management framework. This role plays a key leadership role in operationalizing the organization's approach to enterprise risk and privacy by advancing a comprehensive privacy governance and data protection program, integrating privacy risk considerations into the enterprise risk framework, and supporting compliance with evolving data privacy and AI-related regulatory requirements. As a strategic advisor to executive leadership, this role enables informed decision-making by balancing prudent risk management with innovation, growth, and operational excellence in support of The Mutual Group's Members and long-term strategic objectives.

Requirements

• 12+ years of progressive leadership experience in enterprise risk management, governance, compliance, legal, audit, operational risk, or a related discipline.
• Bachelor's degree in Business, Risk Management, Finance, Accounting, Law, or related field required.
• Demonstrated success designing, implementing, and maturing enterprise risk management programs within complex or highly regulated organizations.
• Experience partnering with executive leadership and presenting enterprise risk insights and recommendations to Boards of Directors.
• Demonstrated ability to lead enterprise initiatives through collaboration, influence, and alignment across multiple business functions.
• Strong knowledge of enterprise risk management frameworks, governance models, and risk assessment methodologies.
• Broad understanding of strategic, operational, financial, regulatory, technology, cybersecurity, privacy, third-party, and other enterprise risks.
• Knowledge of privacy, data protection, AI governance, and evolving regulatory requirements.
• Strong business acumen with the ability to translate enterprise risks into business recommendations that support innovation, growth, and operational excellence.
• Executive presence with the ability to influence, build relationships, and lead through collaboration across a matrixed organization.
• Exceptional analytical, strategic thinking, communication, and problem-solving skills.
• Experience within the insurance, financial services, or another highly regulated industry required.
• Property & Casualty insurance experience strongly preferred.
• Experience in a private equity-backed, growth-oriented, acquisitive, or multi-entity organization preferred.

Nice To Haves

• Advanced degree (MBA or JD) and/or professional certifications (e.g., ARM, CRISC, CISA, CIPP, CISSP) preferred.

Responsibilities

• Lead the development, execution, and continuous maturity of The Mutual Group's Enterprise Risk Management (ERM) strategy, framework, and operating model.
• Establish and maintain enterprise risk governance, including risk taxonomy, assessment methodologies, risk registers, and enterprise risk reporting.
• Lead the development and ongoing review of enterprise risk appetite statements and risk tolerance thresholds aligned with corporate strategy, business objectives, and Member commitments.
• Ensure enterprise risk considerations are integrated into strategic planning, acquisitions, technology investments, new business initiatives, and significant organizational change.
• Partner with business leaders to identify, assess, prioritize, and monitor strategic, operational, financial, regulatory, technology, cybersecurity, third-party, reputational, and emerging risks.
• Develop and maintain enterprise Key Risk Indicators (KRIs), dashboards, and analytics that provide meaningful insights into enterprise risk exposure, trends, and program effectiveness.
• Prepare and present enterprise risk reporting and emerging risk insights to executive leadership, the Board of Directors, and Member organizations.
• Monitor the external business, regulatory, technology, and insurance landscape while advising executive leadership on enterprise risks associated with strategic initiatives, partnerships, and emerging opportunities.
• Serve as a trusted advisor to executive leadership by integrating enterprise risk considerations into strategic decision-making, business planning, and enterprise transformation initiatives while promoting a culture of informed risk ownership, accountability, and continuous improvement across the enterprise.
• Lead the execution and continuous improvement of the organization's privacy governance and data protection program under the direction of the Chief Legal Officer.
• Oversee implementation of privacy risk management practices, including privacy impact assessments and data protection reviews.
• Establish enterprise privacy governance practices supporting the responsible collection, use, protection, retention, and sharing of organizational and personal information.
• Partner with Legal, Compliance, Information Security, AI leadership, and business leaders to integrate privacy, responsible AI, and data governance into enterprise risk management.
• Monitor emerging AI, privacy, and regulatory developments and assess organizational impacts.
• Support response efforts for significant privacy incidents, including coordination of risk assessment, remediation, and control improvements.
• Promote compliance with applicable privacy, data protection, and AI governance requirements across the enterprise.
• Lead enterprise risk governance processes, including oversight structures, escalation protocols, and cross-functional decision frameworks.
• Collaborate across Legal, Compliance, and Information Security to align enterprise governance, risk, and control frameworks.
• Develop enterprise policies, standards, and reporting frameworks that strengthen governance, accountability, and risk oversight.
• Support implementation and optimization of GRC/ERM systems, analytics, and reporting capabilities to enable data-driven risk insights.
• Monitor legislative and regulatory developments affecting enterprise risk, governance, privacy, and compliance.
• Develop executive and Board reporting that provides meaningful insight into enterprise risk profile, emerging risks, organizational resilience, and overall risk exposure.
• Facilitate executive discussions regarding enterprise risk priorities, risk appetite, and mitigation strategies.

Benefits

• Competitive base salary plus incentive plans for eligible team members
• 401(K) retirement plan that includes a company match of up to 6% of your eligible salary
• Free basic life and AD&D, long-term disability and short-term disability insurance
• Medical, dental and vision plans to meet your unique healthcare needs
• Wellness incentives
• Generous time off program that includes personal, holiday and volunteer paid time off
• Educational assistance

What This Job Offers

• Job Type: Full-time
• Career Level: Executive