VP- Enterprise Risk

Merchants Bonding Company•West Des Moines, IA

1d•Onsite

About The Position

The Chief Risk Officer leads the Company’s enterprise risk management (ERM), internal audit, and third-party risk management programs. The Chief Risk Officer maintains an integrated framework for identifying, assessing, managing, monitoring, and reporting strategic, operational, financial, regulatory, technology, and other material risks. The position coordinates regulatory and rating-agency risk reporting, including the Own Risk and Solvency Assessment (ORSA), and provides management and the Board of Directors with independent, timely insight into the effectiveness of risk management, governance, and internal controls. The Chief Risk Officer also oversees business continuity, incident management, and corporate insurance activities including an internal audit function.

Requirements

Bachelor’s degree in Risk Management, Compliance, Legal, or another related field.
10 years of experience in the risk management field, with practical knowledge of finance and business compliance regulations in the Property & Casualty insurance industry.
Strong knowledge of ERM principles, internal controls, risk-based auditing, third-party risk management, insurance regulation, and corporate governance.
Demonstrated judgment, independence, analytical ability, project and provider management, business acumen, and the ability to influence without direct authority.
Excellent written, verbal, facilitation, and presentation skills, with the ability to communicate complex risk matters clearly to executives, Chief Risk Officers, regulators, and business leaders.
Sound discretion and strict confidentiality.
Proficiency with Microsoft Office products.

Nice To Haves

Previous experience with Fidelity and Surety lines of business.
Experience with governance, risk, compliance, audit management, data analysis, or reporting tools.

Responsibilities

Leads and continuously improves the enterprise-wide ERM framework, including risk governance, policies, taxonomy, risk appetite and tolerances, assessment methodology, escalation criteria, and reporting.
Serves as a permanent member of the Enterprise Risk Governance Team (ERGT); develops meeting content, facilitates the team’s work, and supports fulfillment of its charter.
Partners with management and business leaders to identify and assess current and emerging risks and to integrate risk considerations into strategy, capital planning, operations, major initiatives, and decision-making.
Maintains the enterprise risk register and facilitates periodic risk assessments, including evaluation of likelihood, impact, velocity, controls, mitigation plans, ownership, and residual risk.
Leads and oversees the internal audit function, whether staffed internally, outsourced, or co-sourced, while maintaining appropriate independence and direct access and functional reporting to the Audit & Risk Committee.
Develops risk-based audit plans, budgets, and resource models for Audit & Risk Committee approval and manages internal personnel and external providers, as applicable.
Oversees audits, control reviews, and advisory engagements; communicates findings and tracks corrective actions through closure.
Owns and continuously improves the third-party risk management framework across the vendor lifecycle, including risk tiering, due diligence, approval, contracting support, ongoing monitoring, issue management, renewal, and termination or transition planning.
Partners with Procurement, Information Security, Legal, Compliance, Finance, and business owners to apply proportionate review requirements and confirm that material risks are identified, assigned, and addressed before and throughout an engagement.
Leads or coordinates preparation of the Company’s annual ORSA Summary Report, including risk governance, material risk assessment, stress and scenario testing, prospective solvency assessment, and supporting documentation.
Collaborates with Finance, Legal, Compliance, business leaders, and executive management to ensure ORSA assumptions, analysis, conclusions, and governance are complete, consistent, and supportable.
Leads the Company’s business continuity program, including business impact analysis, continuity and recovery planning, exercises, corrective actions, and reporting; serves as Business Continuity Coordinator during plan activation and exercises.
Coordinates with Information Technology, Information Security, Human Resources, Facilities, Marketing, Compliance, and business leaders to strengthen operational resilience and crisis response.
Directs the purchase and administration of corporate insurance programs and manages relationships with brokers, insurers, claims administrators, and other service providers.
Identifies insurable exposures, analyzes loss experience, develops program and budget recommendations, coordinates insurance-related claims, and supports loss prevention activities.