Vendor Analyst, AI & Technology Risk at The Mutual Group

, Iowa, United States -

Full Time

Start Date

Immediate

Expiry Date

19 Jul, 26

Salary

110000.0

Posted On

20 Apr, 26

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Vendor risk management, AI governance, IT risk management, Compliance, Cyber security, Data privacy, TPRM, GRC tools, Archer, ServiceNow, OneTrust, Upguard, NIST CSF, SOC 2, CCPA, Audit processes

Industry

Insurance

Description

Department: Information Technology Job Description: Execute day-to-day operations of AI and Technology Risk Governance, with primary responsibility for vendor AI governance and detection across The Mutual Group and its member insurance carriers. This is a fully hands-on individual contributor role responsible for ensuring vendor AI usage is identified, tracked, and routed through the AIS Program governance process. The role also supports broader governance activities across AI Systems, Cyber Security, Data Privacy (IT lens), and IT Controls. Work Arrangement: Employees who live within 30 miles of the TMG home office are expected to follow a hybrid or in-office schedule. The initial training period may require additional in‑office days. Accountabilities: Vendor AI Governance (Primary Focus) Execute the vendor-wide AI detection process across the full vendor portfolio: Conduct periodic vendor attestations Track vendor disclosures, updates, and AI usage changes Ensure vendors using AI are: Identified promptly Routed through the AIS Program review framework Maintain and track: Vendor AI inventory FactSheet submissions and updates Support Vendor Management in aligning with third-party risk requirements AI Governance Operations Support execution of AI intake and governance workflows: Track AIA Forms and FactSheets Ensure completeness and follow-ups Perform initial triage for low-risk AI use cases Support activities of the AIS / Security Governance Team, including documentation and workflow tracking Monitoring & Validation Support Support twice-annual AI system and vendor review cycles Track: Vendor AI changes Model updates requiring re-review Assist in ensuring monitoring outputs are captured and documented Documentation & Controls Maintain: AI system inventory Vendor AI tracking logs Governance documentation and audit trails Support: Evidence collection for audits and regulatory reviews Control documentation for IT and security governance Broader Technology Risk Support (Secondary) Support tracking and documentation for: Cyber security governance activities (NIST CSF, NYDFS) Data privacy controls (CCPA, IT lens) IT general controls and risk register inputs Reporting & Coordination Assist with preparation of: AIS Committee materials Governance and vendor risk reports Coordinate with: Vendor Management AI / Technology teams Risk and Compliance teams Qualifications: 3+ years in risk, compliance, IT, security, or vendor risk management Experience with TPRM and GRC tools (like Archer, ServiceNow, OneTrust, Upguard) Experience supporting third-party risk or audit processes preferred Familiarity with: Vendor risk management practices AI governance concepts (preferred) NIST CSF, SOC 2, or similar frameworks Data privacy concepts (CCPA preferred) Strong attention to detail and process discipline Ability to manage multiple workflows and follow-ups Pay Range: Anticipated Hiring Range: $85,000 - $110,000 annual base salary depending on experience, qualifications, and geographic location Benefits: We are proud to offer our full-time regular employees a robust benefits suite that includes: Competitive base salary plus incentive plans for eligible team members 401(K) retirement plan that includes a company match of up to 6% of your eligible salary Free basic life and AD&D, long-term disability and short-term disability insurance Medical, dental and vision plans to meet your unique healthcare needs Wellness incentives Generous time off program that includes personal, holiday and volunteer paid time off Flexible work schedules and hybrid/remote options for eligible positions Educational assistance Equal Opportunity Employer The Mutual Group is an Equal Opportunity Employer. It is our policy to recruit, hire, train and promote individuals in all job classifications without regard to race, color, religion, sex, national origin, age, veteran status, disability, sexual orientation, gender identity or any other characteristic protected by law. Know Your Rights: Workplace Discrimination is Illegal Your Rights Under USERRA Applicants requiring a reasonable accommodation due to a disability at any stage of the employment application process should contact Talent@themutualgroup.com. Employment Verification The Mutual Group participates in the E-Verify program and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the U.S. You are protected from employment discrimination based on your citizenship status and national origin. E-Verify Program Overview E-Verify Participation Poster All offers of employment are contingent upon the successful completion of a background check. #TMG The Mutual Group is an Equal Opportunity Employer. It is our policy to recruit, hire, train and promote individuals in all job classifications without regard to race, color, religion, sex, national origin, age, veteran status, disability, sexual orientation, gender identity or any other characteristic protected by law. Know Your Rights: Workplace Discrimination is Illegal Your Rights Under USERRA Applicants requiring a reasonable accommodation due to a disability at any stage of the employment application process should contact Talent@themutualgroup.com. The Mutual Group participates in the E-Verify program and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the U.S. You are protected from employment discrimination based on your citizenship status and national origin. All offers of employment are contingent upon the successful completion of a background check.

Responsibilities

The role involves executing vendor AI governance processes, including detection, tracking, and routing vendor AI usage through the AIS program. It also supports broader governance activities across cyber security, data privacy, and IT controls.