Mutual Opportunities
Head of ETX Risk Management & Regulatory Compliance
Boston, Massachusetts; Springfield, Massachusetts; New York, New York
Thank you to our employees for voting us one of the top places to work in Massachusetts for seven consecutive years!
Overview
A career with us means you’ll work alongside exceptional people and be empowered to reach your professional and personal goals. Our employees are at the foundation of what enables MassMutual to deliver on our purpose to help people secure their futures and protect the ones they love.
We embrace the idea that we all are stronger and better through our support for one another. We strive to create a culture where employees feel valued and are celebrated for who they are.
“Since our founding in 1851, mutuality has put our policyowners at the center of everything we do. At our core, we’re a company of people helping people in their time of need, and that spirit extends to the culture we’ve built at our company. Our employees support and rely on each other each day, collaborating to deliver the best solutions for our customers and help millions more secure their future and protect the ones they love.”
Job Description
The Opportunity
As a senior leader within the ETX Governance, Risk & Compliance organization, responsible for architecting and operating an integrated risk and compliance program across Cyber, AI, Data, Technology, and Resilience domains. This role leads a multidisciplinary team to identify, assess, monitor, and report risks while ensuring the technology organization meets all applicable regulatory, legal and industry obligations.
The Head of Risk Management & Regulatory Compliance serves as a strategic advisor, translating complex risk and compliance requirements into actionable controls, providing risk quantification to support decision-ready insights. This leader ensures the organization maintains a strong risk posture, regulatory readiness, and a culture of accountability and transparency.
The Team
The ETX Governance, Risk & Compliance Team is comprised of governance and risk professionals responsible for implementing governance processes and risk management practices for the ETX (Information Technology) organization. We work closely with our business and technology partners and succeed together by designing practical and effective governance and risk management solutions to support innovation and increase operational efficiency.
The Impact
- Integrated Risk & Compliance Leadership
- Lead the enterprise-aligned Risk & Regulatory Compliance function across Cyber, AI, Data, Technology and Resilience domains
- Establish a unified risk taxonomy, risk assessment methodology, compliance gap assessment process and reporting structure that integrates with Enterprise Risk Management (ERM) and Compliance
- Serve as a trusted advisor on emerging risks, regulatory expectations, and strategic implications
- Governance & Oversight
- Ensure risk and compliance decisions follow defined governance pathways with clear ownership, escalation and documentation
- Maintain alignment with internal policies, external regulations, and industry frameworks
- Regulatory Compliance Management
- Oversee regulatory compliance obligations related to cybersecurity, data protection, AI governance, operational resilience, cloud and technology operations
- Maintain a regulatory inventory and ensure traceability from requirements to controls, testing and evidence
- Partner with Legal, Compliance, ERM and Audit to ensure readiness for examinations, attestations, certifications and regulatory inquiries
- In partnership with Compliance, monitor regulatory developments and translate them into actionable requirements, controls and implementation plans
- Risk Identification, Assessment & Quantification
- Oversee risk assessments across ETX-owned risk domains, including AI, cyber, data quality/privacy, operational technology and resilience risks
- Implement quantitative and qualitative risk measurement approaches to support prioritization and investment decisions
- Control Assurance & Continuous Compliance
- Partner with ETX teams to ensure controls are well-designed, tested and continuously improved
- Oversee remediation tracking and ensure timely closure of issues
- Embed risk and compliance expectations into technology and data lifecycle processes
- Emerging Risks
- Monitor emerging technologies and evolving threat landscapes to anticipate new risk and compliance requirements
- Resilience & Continuity Risk Oversight
- In partnership with Head of Enterprise Resilience, oversee risk and compliance assessments related to business continuity, disaster recovery, incident response, and operational resilience
- Ensure resilience metrics, testing, and scenario exercises are integrated into the broader risk and compliance program
- Reporting & Executive Communication
- Deliver clear, concise and actionable reporting to ETX leadership and other key stakeholders
- Translate technical risk and compliance insights into business-relevant narratives and recommendations
- Maintain, KRIs, KPIs, dashboards and heatmaps that reflect real-time risk and compliance posture
- Team Leadership & Talent Development
- Lead, mentor and develop a high-performing team of risk professionals across Cyber, AI, Data, Technology, Resilience and Regulatory Compliance domains
- Foster a culture of accountability, curiosity and continuous improvement
- Build a strong cross-functional partnership to strengthen risk and compliance awareness and ownership
The Minimum Qualifications
- Proven leadership experience managing multi-disciplinary risk and compliance teams
- Deep understanding of technology architectures and operations, cloud environments, data ecosystems and AI/ML systems
- Strong knowledge of regulatory and industry frameworks (NIST CSF, COBIT, privacy and cybersecurity regulations, AI governance standards, operational resilience requirements)
- 10+ years of experience in Technology Risk, Cybersecurity, Regulatory Compliance or related fields
- Exceptional communication skills with the ability to influence senior leaders and simplify complex topics
- Demonstrated ability to design and operationalize risk and compliance frameworks at scale
- Bachelor’s or master’s degree in computer science or related field
- Must be able to work in the US without sponsorship
The Ideal Qualifications
- Experience in financial services or other highly regulated industries
- Certifications such as CRISC, CISM, CISSP, CISA, CIPM or similar credentials
- Background in risk quantification, regulatory examinations, or model risk management
Success Measures
- A unified, transparent and actionable risk and compliance posture across all ETX-owned risk domains
- Strong leadership confidence in risk and compliance reporting
- Demonstrated regulatory readiness
- Measurable improvements in control effectiveness, risk management maturity and risk informed decision-making
- A high-performing, engaged team recognized as trusted advisors across the organization
What to Expect as Part of MassMutual and the Team
- Access to learning content on Degreed and other informational platforms
- Focused one-on-one meetings with your manager
- Networking opportunities including access to Asian, Hispanic/Latinx, African American, women, LGBTQIA+, veteran and disability-focused Business Resource Groups
- Your ethics and integrity will be valued by a company with a strong and stable ethical business with industry leading pay and benefits
#LI-MC1
MassMutual is an equal employment opportunity employer. We welcome all persons to apply.If you need an accommodation to complete the application process, please contact us and share the specifics of the assistance you need.
California residents: For detailed information about your rights under the California Consumer Privacy Act (CCPA), please visit our California Consumer Privacy Act Disclosures page.
MassMutual will accept applications on an ongoing basis until such time as a candidate has been offered employment. The job description includes the main duties of this position, which may evolve over time. You may be required to perform other duties not listed.
It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment.
Salary Range: $189,900-$249,200
Hiring Process
Explore
Explore our open jobs by clicking 'search jobs' to find a position that aligns with your experience and skills. You may also consider joining our Talent Network.
Apply
Click the “apply” button on that job posting to complete and submit your application. Your application will be reviewed by a recruiter, which, due to the volume of applications received, may take some time as we carefully consider each application.
Screen
After your application has been reviewed, if you meet the qualifications for the role, a recruiter will reach out to you to start a conversation.
Interview
If you are invited for an interview, you will be scheduled to meet with the hiring manager and hiring team.
Offer
If you are extended an offer to join MassMutual and accept, your start will be contingent upon a satisfactory background check.
Hire
If you accept the offer, we will be so excited to welcome you to the MassMutual community!
If you need an accommodation to complete the application process, please contact us and share the specifics of the assistance you need.
By the numbers*
- 85% of employee respondents say they are proud to work at MassMutual
-
90
% of employee respondents say the work they do at MassMutual is meaningful - 85% of employee respondents say they feel encouraged to come up with new and better ways of doing things
*Source: 2025 MassMutual employee engagement survey
Award-Winning Culture
MassMutual is guided by a single purpose: We help people secure their future and protect the ones they love. As a company operated for the benefit of our members and participating policyowners, we are defined by mutuality and our vision to provide financial well-being for all Americans. It’s more than our company structure — it’s our way of life. We are a company of people protecting people. Our company exists because people are willing to share risk and resources and rely on each other when it counts.
We strive to build a thriving community where everyone is valued, included, and feels that they belong.
At MassMutual, we Live Mutual.
How We Work
MassMutual’s flexible workplace approach combines the importance of connecting in person and the flexibility of working remotely. Our hybrid model puts collaboration first with employees coming in at least three days per week to our spectacular campus settings and also enjoying the flexibility of remote Fridays, company-wide remote weeks, and a bank of flexible remote weeks to use throughout the year.
Benefits for the whole you (and your loved ones)
There’s more to your life than your job and there’s more to your aspirations than a paycheck. We take a holistic view of compensation and benefits that provides the flexibility to create a healthy balance in your life for work, family, and community. We offer the benefits you’d expect, like medical, dental, 401(k), and generous vacation time, but we also offer ones you might not expect, like three paid days for volunteering, a $1,250 annual Well-Being Wallet, and up to 320 hours of caregiver leave.
Explore some of our offerings below. Benefit details can be found here.
Why MassMutual?
Candy
Marketing Consultant
Atsam
Head of Advisor/Client Experience & Business Excellence
Erica
Head of Procurement
where we work
Springfield Office
1295 State Street, Springfield, MA
Boston Office
10 Fan Pier Blvd, Boston, MA
New York Office
2 Park Ave,
New York, NY
Virtual
New Job Openings
Sign up for job alerts
Don't see what you're looking for? Sign up for job alerts and we'll notify you when jobs become available.
Job recruiter fraud is a scam by impostors posing as recruiters or representatives of a company promoting fake job opportunities to job seekers.
MassMutual will never ask job candidates to pay any kind of fee, make cash or check advancements, cash checks or make an investment in any product or service or provide information such as credit card numbers or banking PIN numbers as part of our hiring process.
If you are contacted by anyone asking for information outlined above, it is likely fraudulent. If you have any concerns about the veracity of a request, please contact us to verify its legitimacy.
Share This Job