Vendor Analyst, AI & Technology Risk
Des Moines, Polk County, Iowa, 50319, USA
Listed on 2026-07-10
-
IT/Tech
Information Security & Data Protection, IT Business Analyst, Cybersecurity
Overview
Execute day‑to‑day operations of AI and Technology Risk Governance, with primary responsibility for vendor AI governance and detection across The Mutual Group and its member insurance carriers.
Work ArrangementEmployees who live within 30 miles of the TMG home office are expected to follow a hybrid or in‑office schedule. The initial training period may require additional in‑office days.
Responsibilities- Vendor AI Governance (Primary Focus)
- Execute the vendor‑wide AI detection process across the full vendor portfolio, including conducting periodic vendor attestations, tracking vendor disclosures, updates, and AI usage changes.
- Ensure vendors using AI are identified promptly and routed through the AIS Program review framework.
- Maintain and track vendor AI inventory, Fact Sheet submissions and updates.
- Support Vendor Management in aligning with third‑party risk requirements.
- AI Governance Operations
- Support execution of AI intake and governance workflows, tracking AIA Forms and Fact Sheets, ensuring completeness and follow‑ups.
- Perform initial triage for low‑risk AI use cases.
- Support activities of the AIS / Security Governance Team, including documentation and workflow tracking.
- Monitoring & Validation Support
- Support twice‑annual AI system and vendor review cycles.
- Track vendor AI changes and model updates requiring re‑review.
- Assist in ensuring monitoring outputs are captured and documented.
- Documentation & Controls
- Maintain AI system inventory, vendor AI tracking logs, governance documentation and audit trails.
- Support evidence collection for audits and regulatory reviews, and control documentation for IT and security governance.
- Broader Technology Risk Support (Secondary)
- Support tracking and documentation for cyber security governance activities (NIST CSF, NYDFS), data privacy controls (CCPA, IT lens), and IT general controls and risk register inputs.
- Reporting & Coordination
- Assist with preparation of AIS Committee materials and governance and vendor risk reports.
- Coordinate with Vendor Management, AI / Technology teams and Risk and Compliance teams.
- 3+ years in risk, compliance, IT, security, or vendor risk management.
- Experience with TPRM and GRC tools such as Archer, Service Now, One Trust, Upguard.
- Experience supporting third‑party risk or audit processes preferred.
- Familiarity with vendor risk management practices and AI governance concepts (preferred).
- Familiarity with NIST CSF, SOC 2, or similar frameworks.
- Familiarity with data privacy concepts (CCPA preferred).
- Strong attention to detail and process discipline.
- Ability to manage multiple workflows and follow‑ups.
- $85,000 - $110,000 annual base salary depending on experience, qualifications, and geographic location.
- Competitive base salary plus incentive plans for eligible team members.
- 401(k) retirement plan with a company match of up to 6% of eligible salary.
- Free basic life and AD&D, long‑term disability and short‑term disability insurance.
- Medical, dental and vision plans.
- Wellness incentives.
- Generous paid time off program, including personal, holiday and volunteer PTO.
- Flexible work schedules and hybrid/remote options for eligible positions.
- Educational assistance.
The Mutual Group is an Equal Opportunity Employer. We recruit, hire, train and promote individuals in all job classifications without regard to race, color, religion, sex, national origin, age, veteran status, disability, sexual orientation, gender identity or any other characteristic protected by law.
Applicants requiring a reasonable accommodation due to a disability at any stage of the employment application process should contact .
Employment VerificationWe participate in the E‑Verify program and will provide the federal government with Form I‑9 information to confirm eligibility to work in the U.S. You are protected from employment discrimination based on citizenship status and national origin.
All offers of employment are contingent upon the successful completion of a background check.
#J-18808-Ljbffr(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).