VP- Enterprise Risk

JOB PURPOSE The Chief Risk Officer leads the Company’s enterprise risk management (ERM), internal audit, and third-party risk management programs. The Chief Risk Officer maintains an integrated framework for identifying, assessing, managing, monitoring, and reporting strategic, operational, financial, regulatory, technology, and other material risks. The position coordinates regulatory and rating-agency risk reporting, including the Own Risk and Solvency Assessment (ORSA), and provides management and the Board of Directors with independent, timely insight into the effectiveness of risk management, governance, and internal controls.

The Chief Risk Officer also oversees business continuity, incident management, and corporate insurance activities including an internal audit function.

CORE WORK RESPONSIBILITIES Enterprise Risk Management and Governance Leads and continuously improves the enterprise-wide ERM framework, including risk governance, policies, taxonomy, risk appetite and tolerances, assessment methodology, escalation criteria, and reporting.

Serves as a permanent member of the Enterprise Risk Governance Team (ERGT); develops meeting content, facilitates the team’s work, and supports fulfillment of its charter.

Partners with management and business leaders to identify and assess current and emerging risks and to integrate risk considerations into strategy, capital planning, operations, major initiatives, and decision-making.

Maintains the enterprise risk register and facilitates periodic risk assessments, including evaluation of likelihood, impact, velocity, controls, mitigation plans, ownership, and residual risk.

Internal Audit Leads and oversees the internal audit function, whether staffed internally, outsourced, or co-sourced, while maintaining appropriate independence and direct access and functional reporting to the Audit & Risk Committee.

Develops risk-based audit plans, budgets, and resource models for Audit & Risk Committee approval and manages internal personnel and external providers, as applicable.

Oversees audits, control reviews, and advisory engagements; communicates findings and tracks corrective actions through closure.

Third-Party Risk Management Owns and continuously improves the third-party risk management framework across the vendor lifecycle, including risk tiering, due diligence, approval, contracting support, ongoing monitoring, issue management, renewal, and termination or transition planning.

Partners with Procurement, Information Security, Legal, Compliance, Finance, and business owners to apply proportionate review requirements and confirm that material risks are identified, assigned, and addressed before and throughout an engagement.

Regulatory and Rating-Agency Risk Reporting Leads or coordinates preparation of the Company’s annual ORSA Summary Report, including risk governance, material risk assessment, stress and scenario testing, prospective solvency assessment, and supporting documentation.

Collaborates with Finance, Legal, Compliance, business leaders, and executive management to ensure ORSA assumptions, analysis, conclusions, and governance are complete, consistent, and supportable.

Business Continuity and Incident Management Leads the Company’s business continuity program, including business impact analysis, continuity and recovery planning, exercises, corrective actions, and reporting; serves as Business Continuity Coordinator during plan activation and exercises.

Coordinates with Information Technology, Information Security, Human Resources, Facilities, Marketing, Compliance, and business leaders to strengthen operational resilience and crisis response.

Corporate Insurance and Loss Control Directs the purchase and administration of corporate insurance…