Director - Enterprise Risk Management

churchmutual; Wisconsin; On-site; USD 180,000 - 230,000; Full time

Job summary

Church Mutual Insurance Company, S.I. seeks an experienced ERM leader to oversee enterprise risk management, business continuity, and risk governance. You will drive the ERM framework, align with regulatory requirements, and lead a team across risk disciplines.

This role requires 12–15 years in risk management, strong communication, and the ability to influence senior leadership. Some travel may be required to support risk initiatives.

Qualifications

• Bachelor's degree in business or a related field is required.
• Professional certification or designation in risk management, business continuity, audit, information security, compliance, or a related discipline is preferred.
• 12-15 years' risk management experience and governance experience or equivalent.

Responsibilities

• Staffing, onboarding, training, and performance management for ERM staff.
• Lead development, maintenance, and governance of ERM materials aligned with regulatory expectations.
• Monitor emerging strategic, operational, financial, regulatory, cyber, technology, third-party, and AI risks and propose mitigations.
• Oversee design, implementation, and enhancement of the ERM framework and business continuity program.
• Prepare ERM reporting and risk assessments for senior leadership, committees, regulators, and auditors.

Skills

ERM leadership

Stakeholder engagement

Regulatory reporting

Policy development

Strategic thinking

Project management

Communication

Education

Bachelor's degree in business or related field

Professional risk management certification (preferred)

Tools

ERM software

Governance, Risk & Compliance platforms

Data analytics tools

Job description

BASIC PURPOSE:

Responsible for the leadership, innovation, governance, and management necessary to identify, evaluate, mitigate, and monitor the company's enterprise risks. Evaluate emerging risks and trends that may impact the company's risk appetite and present mitigation strategies. Prioritize risks within the company's ERM framework, enterprise risk register, and risk profile to ensure risks are managed to minimize negative financial and operational impact. Manage tools, practices, and policies to analyze and report enterprise risks; evaluate new methodologies and risk technologies for continuous improvement. Responsible for creating organizational awareness of risk management through training and education. Develop, maintain, and administer the Business Continuity Program. Supervisor responsibilities to include staffing, training and development, performance management, and workforce planning.

PRIMARY JOB RESPONSIBILITIES:

• Supervisor/Manager responsibilities may include all of the following:
  • Staffing needs, to include interviewing and onboarding for new employees.
  • Training and development,as well as coaching and motivation,for staff.
  • Performance management, goal setting, employee engagement, and salary administration.
  • Workforce management to include: unit equipment, software, and space needs; approving time off and overtime usage; and budget recommendations.
• Lead or coordinate the development, maintenance, and governance of Own Risk and Solvency Assessment materials, ensuring alignment with regulatory expectations, capital adequacy considerations, the ERM framework, and enterprise risk appetite.
• Monitor emerging strategic, operations, financial, regulatory, cyber, technology, third-party data, and AI-related risks and recommend practical mitigation strategies that support risk-informed business decisions.
• Lead the design, development, implementation, and ongoing enhancement of CM Group's ERM framework. Responsible for the leadership, innovation, governance, and management necessary to identify, evaluate, mitigate, monitor, and report the company's enterprise risks.
• Facilitate the determination of the company's risk appetite, tolerances, and limits. Identify and report key regulatory changes, external factors, emerging risks, and trends that might impact the company's risk profile and present mitigation strategies for management's review.
• Develop, analyze, quantify, and prioritize risks within the company's risk universe, enterprise risk register, and risk profile. Develop and maintain Key Risk Indicators (KRIs), risk appetite metrics, and related reporting to actively monitor risk exposures and trends. Ensure risks are recognized and managed in a manner the minimizes negative financial and operational impact while supporting efficient, cost-effective mitigation strategies.
• Ensure the ERM framework is appropriate to the nature, scale, and complexity of the business. Work with cross‑functional business leaders to regularly identify key risks across all types and categories. Assess risks based on likelihood, impact, and level of mitigation.
  • Prepare and present ERM reporting, risk assessments, emerging risk updates, risk appetite results, ERI trends, and mitigation plans for senior leadership, management committees, the Risk Management Committee, Board-level audiences, regulators, and auditors, as appropriate.
• Lead the Business Continuity Program. Complete risk analysis, business impact analysis, assessment,and evaluation for all CMGroup internal departments and critical outsourcedpartners. Identify comprehensive strategic solutions to satisfy the various business, regulatory, and technology requirements.
• Manage the development and delivery of training that facilitates corporate ERM and Business Continuity awareness.
• Manage the development and implementation of tools, practices, policies, and risk technology solutions to analyze, monitor, and report enterprise risks.
• Leverage internal and external relationships of the ERMDepartment to deliver projects on time. Exerts influence appropriately on outside teams to meet project deliverables while creating positiveimpact within the organization.
• Professionally represent the company's position with regulators, auditors, rating agencies, external vendors, and other key stakeholders.

QUALIFICATIONS:

• Professional certification or designation in risk management, business continuity, audit, information security, compliance, or a related discipline is preferred.
• Bachelor's degree in business or a related field is required.

• 12-15 years' risk management experience developing and implementing enterprise risk management programs, including writing policies and procedures, producing executive materials, supporting risk committees/meetings, and instituting industry best practice risk management principles and practices.
  • Experience supporting insurance regulatory reporting, ORSA-related activities, risk appetite development, KRI reporting, enterprise risk assessments, and management or Board-level risk governance forums is preferred.

• Demonstrated management experience.

• Proficient in current ERM tools, risk reporting processes, and, where applicable, governance, risk, and compliance technology platforms. Able to add to and/or build complex models, tools, dashboards, or reporting solutions and monitor their effectiveness. .

• Excellent oralcommunicationandwriting skills to produce clear and concise materials.

• High‑level critical thinking skills, including strategic thinking, effective analysis of data, and the ability to aggregate information.

• Strong project management discipline and demonstrated success overseeing multiple projects to completion.

• Proven ability to foster productive relationships with diverse staff, including senior leadership.

• Strong ability to influenceand lead a successful team.

• Detail oriented, with a hands‑on approach.

• Ability to travel as necessary.

WORK ENVIRONMENT:

Professional office environment.

NOTE: This job description in no way states or implies that these are the only duties performed by this employee. Employees may be requested to perform job‑related tasks other than those specifically presented in this job description. The employer reserves the right to change or assign other duties to this position.

The CM Group is made up of Church Mutual Insurance Company, S.I., CM Regent Insurance Company, and CM Vantage Specialty Insurance Company.