Job Title: Director, Enterprise Risk Management
Location: Green Bay or La Crosse, WI. Position is not fully remote and will need to reside in close proximity to Green Bay or La Crosse for frequent on site needs.
Department: Legal Services
Reports To: Co-Chief Legal Officer

POSITION SUMMARY:

We are seeking a Director of Enterprise Risk Management to lead and evolve our organization’s risk management function. This role is responsible for identifying, assessing, and mitigating risks across financial, operational, compliance, and strategic domains. The Director will oversee internal audit, corporate insurance programs, and enterprise risk frameworks, ensuring organizational resilience and informed decision-making. This position plays a pivotal role in shaping how we understand and address risk, from capital investments to cybersecurity and beyond.

EDUCATION:

• Required: Bachelor’s Degree in Business Administration, Management, Insurance, or related field.
• Preferred: Master’s Degree in Risk Management, Healthcare/Hospital Administration, Business (MBA), or related field.

EXPERIENCE:

• 5–7 years of progressively responsible leadership experience in risk management, internal audit, or compliance.
• Minimum 5 years in a healthcare or legal environment preferred.

• Lead enterprise-wide risk identification, assessment, and mitigation strategies.
• Develop and implement a comprehensive internal audit program focused on high-risk areas.
• Design and refine risk management frameworks, policies, and procedures.
• Collaborate with executive leadership and cross-functional teams to embed risk awareness into strategic planning.
• Provide actionable risk insights and reports to senior leadership and the board.
• Oversee corporate insurance strategy, including management of a wholly owned Captive Insurance Company.
• Ensure adequate coverage for liability, property, workers’ compensation, cyber risk, and other exposures.
• Analyze claims data and partner with insurers to implement loss control programs.
• Work with IT and cybersecurity teams to assess internal controls and ensure appropriate risk mitigation tools are in place.
• Partner with finance, legal, compliance, and operations to evaluate risks associated with new projects and capital investments.
• Maintain strong relationships with brokers, underwriters, and third-party consultants.