Remote Enterprise Risk Lead – AI & Governance

CSAA; Vermont; Remote; USD 111,000 - 148,000; Full time

Job summary

CSAA Insurance Group is seeking an Enterprise Risk Management Lead to oversee the risk management framework, provide complex risk analysis, and advise senior management. This remote role emphasizes implementing ERM processes, AI governance, and cross-functional collaboration across compliance, legal, cybersecurity, data science, and technology teams.

The role requires 6+ years in risk management or related fields, and a bachelor’s degree.

Qualifications

• Bachelor's degree or equivalent combination of education and experience.
• 6+ years of proven experience in risk management, insurance, financial analysis, actuarial, underwriting, product management or related experience.

Responsibilities

• Implement and continuously improve enterprise risk management processes, including risk identification, ownership, assessment, scoring, monitoring, reporting, mitigation quantification, and action planning across established and emerging risk areas.
• Support the annual ERM planning cycle by helping define risk priorities, assessment activities, reporting expectations, governance calendars, and areas requiring deeper review, including AI and emerging technology risks.
• Establish and maintain processes to monitor enterprise risks on an ongoing basis, with clear ownership, escalation paths, mitigation actions, approval conditions, and follow-up requirements.
• Identify and evaluate emerging risks and trends, including risks associated with generative AI, machine learning, AI-enabled workflows, autonomous or agentic systems, data use, cybersecurity, model performance, third parties, and technology architecture.
• Apply a consistent, proportionate risk methodology to evaluate business impact, autonomy, data sensitivity, external exposure, regulatory considerations, reversibility, control effectiveness, residual risk, and lifecycle stage.
• Manage risk intake and assessment activities for enterprise initiatives and AI use cases, including initial risk analysis, review routing, case readiness, documentation requirements, decision materials, and governance follow-up.
• Coordinate cross-functional risk reviews with Enterprise Risk Management, Compliance, Legal, Cybersecurity, Data Science, Model Governance, Data Governance, Enterprise Architecture, technology teams, and business partners.
• Help determine the appropriate level and pathway of governance review based on materiality and risk, including whether matters qualify for streamlined review or require broader committee, executive, or Board-level consideration.
• Distinguish controls appropriate for experimentation and pilots from requirements needed before production, external deployment, regulated use, or implementation of more autonomous capabilities.
• Assess whether proposed safeguards and human oversight are meaningful, timely, supported by appropriate information and authority, and sufficient for the nature and significance of the risk.
• Identify material evidence gaps, conflicting recommendations, unclear ownership, duplicative requirements, control weaknesses, and requirements that are not proportionate to the underlying risk or decision consequence.
• Develop timely, accurate, and decision-ready risk reports, analyses, dashboards, executive briefings, and recommendations that clearly describe risk exposure, safeguards, residual risk, required decisions, and accountable owners.
• Prepare standard Board and committee risk materials, including quarterly Audit Committee updates, annual reports to the full Board, and information related to material or emerging risks such as AI.
• Support the leader accountable for enterprise AI governance and coordinate the day-to-day activities of the cross-functional AI Council as part of the organization's broader risk-governance structure.
• Draft risk acceptance or approval conditions, escalation recommendations, decision records, and practical guidance for business and technical teams.
• Develop and maintain enterprise risk and AI governance policies, procedures, standards, playbooks, templates, risk tiers, intake criteria, review methods, and control documentation.
• Ensure governance documentation clearly distinguishes mandatory requirements, conditional controls, and informational guidance, and accurately reflects accountable owners, approval status, effective dates, version history, and superseded materials.
• Respond to external ERM compliance, information, and reporting requirements in coordination with accountable subject-matter experts, including requirements affecting AI and emerging technologies.
• Provide complex risk analysis and practical recommendations that support business decisions and responsible innovation while protecting the enterprise and avoiding unnecessary governance burden.
• Promote clear risk ownership, consistent governance practices, reusable evidence, meaningful accountability, and effective coordination across business, risk, compliance, legal, technology, and control functions.

Skills

ERM governance

Risk assessment

AI governance

Stakeholder management

Regulatory compliance

Education

Bachelor's degree in a related field

Job description

CSAA Insurance Group is seeking an Enterprise Risk Management Lead to oversee the risk management framework, provide complex risk analysis, and advise senior management. This remote role emphasizes implementing ERM processes, AI governance, and cross-functional collaboration across compliance, legal, cybersecurity, data science, and technology teams.

The role requires 6+ years in risk management or related fields, and a bachelor’s degree.