Head of Risk Business Management

Head of Operational Risk Assessments and Governance
FullTime
MassMutual is seeking a strategic and experienced risk leader to serve as Head of Operational Risk Assessments and Governance. This second line of defense role is responsible for the enterprisewide oversight and management of process execution risk, and provides independent oversight of operational resilience, which is owned and managed by the first line of defense.
The successful candidate will lead key second line programs including risk and control assessment, nonfinancial risk appetite, loss event tracking, and postincident analysis. This role plays a critical part in strengthening operational risk management practices, enhancing transparency, and driving accountability across the organization.
The Operational Risk team is a collaborative group of experienced risk managers and subject matter experts who oversee key enterprise risks, including thirdparty, financial reporting, fraud, business resilience, process execution, compliance, and reputation risk. Operating within a unified risk framework, they ensure consistent practices and effective oversight across the organization. Through close partnerships with business units and control functions, the team promotes a strong riskaware culture, supports strategic decisionmaking, and enhances organizational resilience.
Own and lead the enterprisewide risk & control assessment program, ensuring consistent and comprehensive identification and assessment of process execution risks.
Oversee the identification, assessment, and monitoring of process execution risks across business units and corporate functions.
Collaborate with risk owners, control owners, and enterprise risk partners to ensure internal controls are documented in the enterprise GRC system and are designed to effectively prevent and detect critical process risks.
Lead the development of scenario analysis, loss event data collection, and root cause analysis processes.
Ensure risk assessments are comprehensive and actionable, enabling prioritization and mitigation of risks.
Monitor emerging risks, regulatory developments, and industry trends to inform risk strategy.
Governance & Oversight
Maintain and enhance governance frameworks for process execution risk, ensuring alignment with enterprise risk management standards.
Partner with internal audit, compliance, legal, and technology risk teams to ensure a coordinated approach to process execution risk oversight.
Chair subcommittees chartered to govern and manage operational process risks across the firm.
Drive continuous improvement in operational risk frameworks, methodologies, and governance.
Develop and maintain risk appetite statements and key risk indicators (KRIs).
Partner with Risk Owners to document risk treatment decisions, owners, and target dates when appetite thresholds are exceeded.
Deliver timely, accurate, and insightful reporting to senior leadership and the Operational & Strategic Risk Committee on process execution and resilience risk exposures and trends.
Promote transparency and accountability across the organization through effective risk reporting.
Collaborate with operating units to evaluate and communicate the effectiveness of existing risk management practices.
Support integration of risk insights into strategic decisionmaking and operational planning.
Lead a team of operational risk professionals with expertise in process execution and resilience oversight.
Promote a strong riskaware culture by embedding risk management into daily operations and decisionmaking.
Partner with business leaders to embed risk management practices into daytoday operations, including selfreporting of issues, key risk indicators, and incident reporting.
Foster crossfunctional collaboration to strengthen enterprisewide risk capabilities and control discipline.
Champion continuous improvement in operational risk methodologies, tools, and practices.
Bachelors degree in Risk Management, Business, Operations, or related field.
~10+ years of experience in operational risk, enterprise risk, or internal controls, with at least 5+ years in a leadership role.
~ Expertise in risk & control assessment programs (RCSA) and postincident analysis.
~ Experience overseeing operational resilience programs or providing second line challenge to business continuity and crisis management.
~ Strong understanding of risk frameworks, regulatory expectations, and industry best practices.
~ Experience with GRC platforms and risk data analytics tools.

Masters degree or MBA preferred.