Remote Enterprise Risk Lead — AI & Governance

CSAA; Rhode Island; Remote; USD 111,000 - 148,000; Full time

Benefits offered by this job

Remote-first culture

Annual bonus up to 10%

401(k) with company match

Job summary

CSAA Insurance Group invites an Enterprise Risk Management Lead to drive our risk framework remotely from anywhere in the United States. You will implement risk processes, monitor enterprise risks, and provide complex analyses to senior leadership, with focus on AI governance and responsible innovation.

You will coordinate cross-functional reviews, define risk priorities, and develop decision-ready materials for boards.

Qualifications

• Bachelor's degree in a related field or an equivalent combination of education and experience.
• 6+ years of proven experience in risk management, insurance, financial analysis, actuarial, underwriting, product management or related experience required.

Responsibilities

• Implement and continuously improve enterprise risk management processes, including risk identification, ownership, assessment, scoring, monitoring, reporting, mitigation quantification, and action planning across established and emerging risk areas.
• Support the annual ERM planning cycle by helping define risk priorities, assessment activities, reporting expectations, governance calendars, and areas requiring deeper review, including AI and emerging technology risks.
• Establish and maintain processes to monitor enterprise risks on an ongoing basis, with clear ownership, escalation paths, mitigation actions, approval conditions, and follow-up requirements.
• Identify and evaluate emerging risks and trends, including risks associated with generative AI, machine learning, AI-enabled workflows, autonomous or agentic systems, data use, cybersecurity, model performance, third parties, and technology architecture.
• Apply a consistent, proportionate risk methodology to evaluate business impact, autonomy, data sensitivity, external exposure, regulatory considerations, reversibility, control effectiveness, residual risk, and lifecycle stage.
• Manage risk intake and assessment activities for enterprise initiatives and AI use cases, including initial risk analysis, review routing, case readiness, documentation requirements, decision materials, and governance follow-up.
• Coordinate cross-functional risk reviews with Enterprise Risk Management, Compliance, Legal, Cybersecurity, Data Science, Model Governance, Data Governance, Enterprise Architecture, technology teams, and business partners.
• Help determine the appropriate level and pathway of governance review based on materiality and risk, including whether matters qualify for streamlined review or require broader committee, executive, or Board-level consideration.
• Distinguish controls appropriate for experimentation and pilots from requirements needed before production, external deployment, regulated use, or implementation of more autonomous capabilities.
• Assess whether proposed safeguards and human oversight are meaningful, timely, supported by appropriate information and authority, and sufficient for the nature and significance of the risk.
• Identify material evidence gaps, conflicting recommendations, unclear ownership, duplicative requirements, control weaknesses, and requirements that are not proportionate to the underlying risk or decision consequence.
• Develop timely, accurate, and decision-ready risk reports, analyses, dashboards, executive briefings, and recommendations that clearly describe risk exposure, safeguards, residual risk, required decisions, and accountable owners.
• Prepare standard Board and committee risk materials, including quarterly Audit Committee updates, annual reports to the full Board, and information related to material or emerging risks such as AI.
• Support the leader accountable for enterprise AI governance and coordinate the day-to-day activities of the cross-functional AI Council as part of the organization's broader risk-governance structure.
• Draft risk acceptance or approval conditions, escalation recommendations, decision records, and practical guidance for business and technical teams.
• Develop and maintain enterprise risk and AI governance policies, procedures, standards, playbooks, templates, risk tiers, intake criteria, review methods, and control documentation.
• Ensure governance documentation clearly distinguishes mandatory requirements, conditional controls, and informational guidance, and accurately reflects accountable owners, approval status, effective dates, version history, and superseded materials.
• Respond to external ERM compliance, information, and reporting requirements in coordination with accountable subject-matter experts, including requirements affecting AI and emerging technologies.
• Provide complex risk analysis and practical recommendations that support business decisions and responsible innovation while protecting the enterprise and avoiding unnecessary governance burden.
• Promote clear risk ownership, consistent governance practices, reusable evidence, meaningful accountability, and effective coordination across business, risk, compliance, legal, technology, and control functions.

Skills

Risk management

Project management

Analytical skills

Collaboration across teams

Education

Bachelor's degree

Job description

CSAA Insurance Group invites an Enterprise Risk Management Lead to drive our risk framework remotely from anywhere in the United States. You will implement risk processes, monitor enterprise risks, and provide complex analyses to senior leadership, with focus on AI governance and responsible innovation.

You will coordinate cross-functional reviews, define risk priorities, and develop decision-ready materials for boards.