Vendor Analyst, AI & Technology Risk

Department:
Information Technology Job Description

Execute day-to-day operations of AI and Technology Risk Governance, with primary responsibility for vendor AI governance and detection across The Mutual Group and its member insurance carriers. This is a fully hands‑on individual contributor role responsible for ensuring vendor AI usage is identified, tracked, and routed through the AIS Program governance process. The role also supports broader governance activities across AI Systems, Cyber Security, Data Privacy (IT lens), and IT Controls.

Employees who live within 30 miles of the TMG home office are expected to follow a hybrid or in‑office schedule. The initial training period may require additional in‑office days.

• Execute the vendor‑wide AI detection process across the full vendor portfolio.
• Conduct periodic vendor attestations.
• Track vendor disclosures, updates, and AI usage changes.
• Ensure vendors using AI are identified promptly, routed through the AIS Program review framework, and maintained in an inventory.
• Track and update Vendor AI inventory and Fact Sheet submissions.
• Support Vendor Management in aligning with third‑party risk requirements.

• Support execution of AI intake and governance workflows.
• Track AIA Forms and Fact Sheets, ensuring completeness and follow‑ups.
• Perform initial triage for low‑risk AI use cases.
• Assist the AIS / Security Governance Team with documentation and workflow tracking.
• Support twice‑annual AI system and vendor review cycles, tracking vendor AI changes and model updates requiring re‑review.
• Ensure monitoring outputs are captured, documented, and integrated into governance documentation and audit trails.
• Maintain evidence collection for audits and regulatory reviews.

• Track and document cyber security governance activities (NIST CSF, NYDFS).
• Track data privacy controls (CCPA, IT lens).
• Track IT general controls and risk register inputs.
• Assist with preparation of AIS Committee materials and governance and vendor risk reports.
• Coordinate with Vendor Management, AI / Technology teams, and Risk and Compliance teams.

• 3+ years in risk, compliance, IT, security, or vendor risk management.
• Experience with TPRM and GRC tools (e.g., Archer, Service Now, One Trust, Upguard).
• Experience supporting third‑party risk or audit processes (preferred).
• Familiarity with vendor risk management practices and AI governance concepts.
• Knowledge of NIST CSF, SOC 2, or similar frameworks.
• Data privacy concepts (CCPA preferred).
• Strong attention to detail and process discipline.
• Ability to manage multiple workflows and follow‑ups.

Annual base salary: $85,000 – $110,000, depending on experience, qualifications, and geographic location.

• Competitive base salary plus incentive plans for eligible team members.
• 401(k) retirement plan with up to 6% company match.
• Free basic life and AD&D, long‑term disability, and short‑term disability insurance.
• Medical, dental, and vision plans.
• Wellness incentives.
• Generous time off program, including personal, holiday, and volunteer paid time off.
• Flexible work schedules and hybrid/remote options for eligible positions.
• Educational assistance.

The Mutual Group is an Equal Opportunity Employer. We recruit, hire, train, and promote individuals in all job classifications without regard to race, color, religion, sex, national origin, age, veteran status, disability, sexual orientation, gender identity, or any other characteristic protected by law. Applicants requiring a reasonable accommodation due to a disability should contact  Employment verification is conducted through the E‑Verify program.