VP- Enterprise Risk

Paycom - ATS; West Des Moines (IA); On-site; USD 180,000 - 280,000; Full time

Job summary

Paycom - ATS is seeking a Chief Risk Officer to lead enterprise risk management, internal audit, and third-party risk programs. You will partner with executives to identify and manage strategic, operational, financial, regulatory, and technology risks, while reporting to the Audit & Risk Committee and Board.

The role requires a deep understanding of ERM, internal controls, risk-based audits, and regulatory reporting, with strong communication and leadership to drive governance and resilience

Qualifications

• Bachelor's degree in Risk Management, Compliance, Legal, or related field.
• 10+ years of experience in the risk management field with finance and business compliance knowledge.
• Strong knowledge of ERM principles, internal controls, risk-based auditing, third-party risk management, insurance regulation, and corporate governance.
• Excellent written, verbal, facilitation, and presentation skills for executives and regulators.
• Discretion and confidentiality in handling sensitive information.

Responsibilities

• Lead and continuously improve Enterprise Risk Management governance and framework.
• Oversee internal audit activities and coordinate with Audit & Risk Committee.
• Manage third-party risk framework across vendor lifecycle and ensure timely risk identification.
• Coordinate ORSA reporting and risk disclosures with Finance, Legal, Compliance, and executives.
• Lead Business Continuity planning, testing, and incident response activities.
• Direct corporate insurance programs and loss-control efforts with brokers and insurers.

Skills

Analytical ability

Communication skills

Leadership

Project and vendor management

Decision making

Education

Bachelor's degree in Risk Management, Compliance, Legal, or related field

Tools

Microsoft Office

Job description

JOB PURPOSEThe Chief Risk Officer leads the Company’s enterprise risk management (ERM), internal audit, and third-party risk management programs. The Chief Risk Officer maintains an integrated framework for identifying, assessing, managing, monitoring, and reporting strategic, operational, financial, regulatory, technology, and other material risks. The position coordinates regulatory and rating-agency risk reporting, including the Own Risk and Solvency Assessment (ORSA), and provides management and the Board of Directors with independent, timely insight into the effectiveness of risk management, governance, and internal controls. The Chief Risk Officer also oversees business continuity, incident management, and corporate insurance activities including an internal audit function.CORE WORK RESPONSIBILITIESEnterprise Risk Management and GovernanceLeads and continuously improves the enterprise-wide ERM framework, including risk governance, policies, taxonomy, risk appetite and tolerances, assessment methodology, escalation criteria, and reporting.Serves as a permanent member of the Enterprise Risk Governance Team (ERGT); develops meeting content, facilitates the team’s work, and supports fulfillment of its charter.Partners with management and business leaders to identify and assess current and emerging risks and to integrate risk considerations into strategy, capital planning, operations, major initiatives, and decision-making.Maintains the enterprise risk register and facilitates periodic risk assessments, including evaluation of likelihood, impact, velocity, controls, mitigation plans, ownership, and residual risk.Internal AuditLeads and oversees the internal audit function, whether staffed internally, outsourced, or co-sourced, while maintaining appropriate independence and direct access and functional reporting to the Audit & Risk Committee.Develops risk-based audit plans, budgets, and resource models for Audit & Risk Committee approval and manages internal personnel and external providers, as applicable.Oversees audits, control reviews, and advisory engagements; communicates findings and tracks corrective actions through closure.Third-Party Risk ManagementOwns and continuously improves the third-party risk management framework across the vendor lifecycle, including risk tiering, due diligence, approval, contracting support, ongoing monitoring, issue management, renewal, and termination or transition planning.Partners with Procurement, Information Security, Legal, Compliance, Finance, and business owners to apply proportionate review requirements and confirm that material risks are identified, assigned, and addressed before and throughout an engagement.Regulatory and Rating-Agency Risk ReportingLeads or coordinates preparation of the Company’s annual ORSA Summary Report, including risk governance, material risk assessment, stress and scenario testing, prospective solvency assessment, and supporting documentation.Collaborates with Finance, Legal, Compliance, business leaders, and executive management to ensure ORSA assumptions, analysis, conclusions, and governance are complete, consistent, and supportable.Business Continuity and Incident ManagementLeads the Company’s business continuity program, including business impact analysis, continuity and recovery planning, exercises, corrective actions, and reporting; serves as Business Continuity Coordinator during plan activation and exercises.Coordinates with Information Technology, Information Security, Human Resources, Facilities, Marketing, Compliance, and business leaders to strengthen operational resilience and crisis response.Corporate Insurance and Loss ControlDirects the purchase and administration of corporate insurance programs and manages relationships with brokers, insurers, claims administrators, and other service providers.Identifies insurable exposures, analyzes loss experience, develops program and budget recommendations, coordinates insurance-related claims, and supports loss prevention activities.REQUIRED:Bachelor’s degree in Risk Management, Compliance, Legal, or another related field.10 years of experience in the risk management field, with practical knowledge of finance and business compliance regulations in the Property & Casualty insurance industry.Strong knowledge of ERM principles, internal controls, risk-based auditing, third-party risk management, insurance regulation, and corporate governance.Demonstrated judgment, independence, analytical ability, project and provider management, business acumen, and the ability to influence without direct authority.Excellent written, verbal, facilitation, and presentation skills, with the ability to communicate complex risk matters clearly to executives, Chief Risk Officers, regulators, and business leaders.Sound discretion and strict confidentiality.Proficiency with Microsoft Office products.PREFERRED:Previous experience with Fidelity and Surety lines of business.Experience with governance, risk, compliance, audit management, data analysis, or reporting tools.COMPETENCIESBuilding Rapport and Trust: Builds strong, credible relationships with internal partners and stakeholders; follows through on commitments to strengthen trust and long-term engagement.Organizational Strategy: Translates organizational strategy into clear priorities; aligns programs and initiatives to support growth and business objectives.Motivating Teams: Drives engagement and performance by connecting team initiatives to business outcomes.Builds Effective Teams: Builds and develops team capability; sets expectations, provides coaching, and ensures accountability for program execution and results.Manages Ambiguity: Provides clarity and direction amid evolving or uncertain conditions; adjusts strategies and priorities to meet changing business needs.Decision Quality: Makes timely, well-informed decisions within assigned authority; balances risk, business goals, and data-driven insights.Resource Allocation: Allocates time, budget, and resources across competing initiatives to maximize business impact.