Sr. Director, AI & Technology Risk Governance

Department and Job Description

Department: Information Technology Job Description: Lead the enterprise AI Systems Governance Program, with core accountability for governing AI Systems across The Mutual Group and its member insurance carriers. This role operates under delegated authority from the CIO to execute the AIS Program and leads the AIS / Security Governance Team, which assumes responsibility for AI governance activities defined in the AIS Program, while the CIO retains final approval authority. The role is responsible for ensuring that AI Systems used across multiple member organizations (insurance carriers) are governed consistently, responsibly, and in alignment with regulatory expectations. This includes working closely with member teams to assess, approve, monitor, and continuously improve AI usage in support of their business objectives. In addition to AI Systems Governance, the role provides oversight across Cyber Security Governance, Data Privacy, and IT Controls to ensure a cohesive Technology Risk framework.

Work Arrangement

Employees who live within 30 miles of the TMG home office are expected to follow a hybrid or in‑office schedule. The initial training period may require additional in‑office days.

Accountabilities

• AI Systems Governance Leadership (Primary Focus) Own and operate the AI Systems Governance Program across the full lifecycle: Intake, risk assessment, approval, monitoring, and retirement
• Lead the AIS / Security Governance Team, responsible for executing AI governance activities defined in the AIS Program, including: AI Risk Threshold Analysis AI system review and risk classification Governance recommendations for approval and escalation
• Ensure governance is executed as a continuous control function, with ongoing validation, monitoring, and improvement
• Partner with business and AI teams to ensure governance enables responsible AI adoption, not just compliance
• Multi-Member Governance Model Establish and operationalize a shared AI governance model across multiple member insurance carriers
• Ensure consistent application of: AI policies, standards, and controls Risk classification and escalation frameworks
• Partner with member organizations to: Understand AI use cases and business objectives Align governance with member-specific regulatory and risk requirements Support adoption of best practices, playbooks, and controls across members Drive consistency in AI inventory, reporting, and monitoring across all members
• Risk Oversight & Decisioning Provide executive oversight of AI risk assessments and governance decisions Review and approve low-risk AI systems; elevate mid/high-risk systems to CLO and AIS Committee Exercise judgment in risk classification ambiguity and escalation decisions Ensure appropriate governance for: Predictive models impacting underwriting, claims, and pricing Customer-facing AI use cases AI systems leveraging sensitive or regulated data
• Monitoring, Controls & Assurance Oversee ongoing monitoring and validation of AI Systems, including: Model performance Drift and bias detection Ensure AI Systems continue to meet: Regulatory expectations Ethical and fairness standards Oversee effectiveness of: Cyber security controls (NIST CSF, NYDFS) IT general controls and risk register Data privacy safeguards (CCPA, IT lens) Drive readiness for: Internal audit and regulatory exams External certifications (SOC 2)
• Vendor & Third-Party AI Governance Oversee vendor-wide AI governance across the enterprise and member organizations Ensure execution of: Vendor AI detection across the full vendor portfolio FactSheet review, validation, and updates Partner with Vendor Management and member teams to: Ensure vendors meet contractual, regulatory, and AI governance requirements Support member-specific vendor risk needs Governance, Reporting & Incident Management Lead AIS Committee engagement and Board-level reporting Provide bi-annual updates on: AI risk posture Cyber and technology risk posture Ensure consistent and transparent reporting across member organizations Oversee governance of AI-related incidents and anomalies, including: Cross-functional coordination Escalation and remediation
• Broader Technology Risk Governance Establish unified governance across: Cyber Security Governance Data Privacy (IT lens) IT General Controls and risk register Ensure alignment between AI governance and broader Technology Risk frameworks
• Cross-Functional Coordination Collaborate closely with technology and business teams across the organization Ensure effective coordination with the Architecture Review Board (ARB) where architectural alignment is required
• Team Leadership Build and lead a high-performing governance team Set operating cadence, priorities, and performance expectations Foster a service-oriented mindset focused on enabling member organizations

Qualifications

• 12+ years in technology risk, AI governance, cyber risk, or enterprise risk
• Experience operating in regulated environments (insurance or financial services preferred)
• Experience working in multi-entity / shared services / multi-carrier environments
• Deep understanding of AI Systems governance and model risk
• Strong familiarity with: NAIC AI Model Bulletin NYDFS Cybersecurity Regulation CCPA NIST CSF and NIST AI RMF SOC 2
• Experience with vendor risk management
• Experience with GRC platforms (e.g., Archer, ServiceNow, OneTrust)
• Strong executive communication, influencing, and leadership skills

Pay Range

Anticipated Hiring Range: $180,000 - $220,000 annual base salary depending on experience, qualifications, and geographic location

Benefits

• Competitive base salary plus incentive plans for eligible team members
• 401(K) retirement plan that includes a company match of up to 6% of your eligible salary
• Free basic life and AD&D, long-term disability and short-term disability insurance
• Medical, dental and vision plans to meet your unique healthcare needs
• Wellness incentives
• Generous time off program that includes personal, holiday and volunteer paid time off
• Flexible work schedules and hybrid/remote options for eligible positions
• Educational assistance

Bot-Filtering Mechanism

The Mutual Group uses a bot-filtering mechanism as part of its recruiting and hiring process. As a result, automated job applications or submissions may be rejected.

Equal Opportunity Employer

The Mutual Group is an Equal Opportunity Employer. It is our policy to recruit, hire, train and promote individuals in all job classifications without regard to race, color, religion, sex, national origin, age, veteran status, disability, sexual orientation, gender identity or any other characteristic protected by law. Know Your Rights: Workplace Discrimination is Illegal Your Rights Under USERRA Applicants requiring a reasonable accommodation due to a disability at any stage of the employment application process should contact View email address on click.appcast.io.

Employment Verification

The Mutual Group participates in the E-Verify program and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the U.S. You are protected from employment discrimination based on your citizenship status and national origin. All offers of employment are contingent upon the successful completion of a background check.