Enterprise Risk Management Lead - Remote

External candidates: In order for your application to be correctly processed please sign-in before you apply
Internal candidates: Please go to Workday and click "Find Jobs" link under Career
Thank you for considering opportunities with us!
Job Title
Enterprise Risk Management Lead - Remote
Requisition Number
R8036 Enterprise Risk Management Lead - Remote (Open)
Location
Arizona - Home Teleworkers
Additional Locations
Alabama - Home Teleworkers, Alabama - Home Teleworkers, Arkansas - Home Teleworkers, California - Home Teleworkers, Colorado - Home Teleworkers, Connecticut - Home Teleworkers, Delaware - Home Teleworker, District of Columbia - Home Teleworkers, Florida - Home Teleworkers, Georgia - Home Teleworkers, Idaho - Home Teleworkers, Illinois - Home Teleworkers, Indiana - Home Teleworkers, Iowa - Home Teleworkers, Kansas - Home Teleworker, Kentucky - Home Teleworkers, Louisiana - Home Teleworkers, Maine Home Teleworkers, Maryland - Home Teleworkers, Massachusetts - Home Teleworkers, Michigan - Home Teleworkers, Minnesota - Home Teleworkers, Mississippi - Home Teleworker, Missouri - Home Teleworker, Montana - Home Teleworkers {+ 21 more}
Job Information
CSAA Insurance Group (CSAA IG), a AAA insurer, is one of the leading personal lines property and casualty insurance groups in the United States. Here, every employee shapes our mission. We build innovative, human-centered solutions that help AAA members prevent, prepare for, and recover from life's uncertainties. You will join a collaborative, inclusive culture where your strengths have room to grow and your ideas can drive real impact. Step into a role where you can contribute to our shared success through meaningful work.
We are actively hiring for an
Enterprise Risk Management Specialist Lead
!
Your Role:
The Enterprise Risk Management Lead supports the organization’s risk management framework and provides complex risk analysis, reporting, and advisory support to senior management and internal stakeholders. Operating with a high degree of independence, the role applies sound judgment to medium- and high-complexity matters, including new and ambiguous situations where precedent may be limited.

The role’s primary emphasis is the implementation, monitoring, and continuous improvement of enterprise risk management processes. As a secondary accountability, the role supports the enterprise approach to responsible artificial intelligence by coordinating AI governance activities, facilitating cross-functional reviews, and helping ensure AI-related risks and controls are proportionate to each use case’s impact and maturity.
Your Work:
Implement and continuously improve enterprise risk management processes, including risk identification, ownership, assessment, scoring, monitoring, reporting, mitigation quantification, and action planning across established and emerging risk areas.
Support the annual ERM planning cycle by helping define risk priorities, assessment activities, reporting expectations, governance calendars, and areas requiring deeper review, including AI and emerging technology risks.
Establish and maintain processes to monitor enterprise risks on an ongoing basis, with clear ownership, escalation paths, mitigation actions, approval conditions, and follow-up requirements.
Identify and evaluate emerging risks and trends, including risks associated with generative AI, machine learning, AI-enabled workflows, autonomous or agentic systems, data use, cybersecurity, model performance, third parties, and technology architecture.
Apply a consistent, proportionate risk methodology to evaluate business impact, autonomy, data sensitivity, external exposure, regulatory considerations, reversibility, control effectiveness, residual risk, and lifecycle stage.
Manage risk intake and assessment activities for enterprise initiatives and AI use cases, including initial risk analysis, review routing, case readiness, documentation requirements, decision materials, and governance follow-up.
Coordinate cross-functional risk reviews with Enterprise Risk Management, Compliance, Legal, Cybersecurity, Data Science, Model Governance, Data Governance, Enterprise Architecture, technology teams, and business partners.
Help determine the appropriate level and pathway of governance review based on materiality and risk, including whether matters qualify for streamlined review or require broader committee, executive, or Board-level consideration.
Distinguish controls appropriate for experimentation and pilots from requirements needed before production, external deployment, regulated use, or implementation of more autonomous capabilities.
Assess whether proposed safeguards and human oversight are meaningful, timely, supported by appropriate information and authority, and sufficient for the nature and significance of the risk.
Identify material evidence gaps, conflicting recommendations, unclear ownership, duplicative requirements, control weaknesses, and requirements that are not proportionate to the underlying risk or decision consequence.
Develop timely, accurate, and decision-ready risk reports, analyses, dashboards, executive briefings, and recommendations that clearly describe risk exposure, safeguards, residual risk, required decisions, and accountable owners.
Prepare standard Board and committee risk materials, including quarterly Audit Committee updates, annual reports to the full Board, and information related to material or emerging risks such as AI.
Support the leader accountable for enterprise AI governance and coordinate the day-to-day activities of the cross-functional AI Council as part of the organization’s broader risk-governance structure.
Draft risk acceptance or approval conditions, escalation recommendations, decision records, and practical guidance for business and technical teams.
Develop and maintain enterprise risk and AI governance policies, procedures, standards, playbooks, templates, risk tiers, intake criteria, review methods, and control documentation.
Ensure governance documentation clearly distinguishes mandatory requirements, conditional controls, and informational guidance, and accurately reflects accountable owners, approval status, effective dates, version history, and superseded materials.
Respond to external ERM compliance, information, and reporting requirements in coordination with accountable subject-matter experts, including requirements affecting AI and emerging technologies.
Provide complex risk analysis and practical recommendations that support business decisions and responsible innovation while protecting the enterprise and avoiding unnecessary governance burden.
Promote clear risk ownership, consistent governance practices, reusable evidence, meaningful accountability, and effective coordination across business, risk, compliance, legal, technology, and control functions.
Required Experience, Education and Skills:
Bachelor’s degree in a related field or an equivalent combination or education and experience.
6+ years of proven experience in risk management, insurance, financial analysis, actuarial, underwriting, product management or related experience required.
What would make us excited about you?
Prior experience in Enterprise Risk Management strongly preferred.
Strong organizational and project management skills and ability to accurately complete complex projects within tight deadlines, including leading multiple projects simultaneously.
A solution-oriented problem solver with strong analytical skills. Able to quickly gain a solid understanding of the company's operations and overall business goals and objectives.
Experience working with operational / product / financial measures and models, including analysis of results.
Ability to collaborate with all levels of personnel from end users to executive management.
Ability to influence outcomes with or without formal authority, often delivering results through others.
Ability to build business case scenari