We help people secure their future and protect the ones they love.
The Role
The Opportunity
As a senior leader within the ETX Governance, Risk & Compliance organization, responsible for architecting and operating an integrated risk and compliance program across Cyber, AI, Data, Technology, and Resilience domains. This role leads a multidisciplinary team to identify, assess, monitor, and report risks while ensuring the technology organization meets all applicable regulatory, legal and industry obligations.
The Head of Risk Management & Regulatory Compliance serves as a strategic advisor, translating complex risk and compliance requirements into actionable controls, providing risk quantification to support decision-ready insights. This leader ensures the organization maintains a strong risk posture, regulatory readiness, and a culture of accountability and transparency.
The Team
The ETX Governance, Risk & Compliance Team is comprised of governance and risk professionals responsible for implementing governance processes and risk management practices for the ETX (Information Technology) organization. We work closely with our business and technology partners and succeed together by designing practical and effective governance and risk management solutions to support innovation and increase operational efficiency.
The Impact
The Minimum Qualifications
The Ideal Qualifications
Success Measures
What to Expect as Part of MassMutual and the Team
#LI-MC1
MassMutual is an equal employment opportunity employer. We welcome all persons to apply.
If you need an accommodation to complete the application process, please contact us and share the specifics of the assistance you need.
California residents: For detailed information about your rights under the California Consumer Privacy Act (CCPA), please visit our California Consumer Privacy Act Disclosures page.
Salary Range: $189,900-$249,200
As a senior leader within the ETX Governance, Risk & Compliance organization, responsible for architecting and operating an integrated risk and compliance program across Cyber, AI, Data, Technology, and Resilience domains. This role leads a multidisciplinary team to identify, assess, monitor, and report risks while ensuring the technology organization meets all applicable regulatory, legal and industry obligations.
The Head of Risk Management & Regulatory Compliance serves as a strategic advisor, translating complex risk and compliance requirements into actionable controls, providing risk quantification to support decision-ready insights. This leader ensures the organization maintains a strong risk posture, regulatory readiness, and a culture of accountability and transparency.
The Team
The ETX Governance, Risk & Compliance Team is comprised of governance and risk professionals responsible for implementing governance processes and risk management practices for the ETX (Information Technology) organization. We work closely with our business and technology partners and succeed together by designing practical and effective governance and risk management solutions to support innovation and increase operational efficiency.
The Impact
- Integrated Risk & Compliance Leadership
- Lead the enterprise-aligned Risk & Regulatory Compliance function across Cyber, AI, Data, Technology and Resilience domains
- Establish a unified risk taxonomy, risk assessment methodology, compliance gap assessment process and reporting structure that integrates with Enterprise Risk Management (ERM) and Compliance
- Serve as a trusted advisor on emerging risks, regulatory expectations, and strategic implications
- Governance & Oversight
- Ensure risk and compliance decisions follow defined governance pathways with clear ownership, escalation and documentation
- Maintain alignment with internal policies, external regulations, and industry frameworks
- Regulatory Compliance Management
- Oversee regulatory compliance obligations related to cybersecurity, data protection, AI governance, operational resilience, cloud and technology operations
- Maintain a regulatory inventory and ensure traceability from requirements to controls, testing and evidence
- Partner with Legal, Compliance, ERM and Audit to ensure readiness for examinations, attestations, certifications and regulatory inquiries
- In partnership with Compliance, monitor regulatory developments and translate them into actionable requirements, controls and implementation plans
- Risk Identification, Assessment & Quantification
- Oversee risk assessments across ETX-owned risk domains, including AI, cyber, data quality/privacy, operational technology and resilience risks
- Implement quantitative and qualitative risk measurement approaches to support prioritization and investment decisions
- Control Assurance & Continuous Compliance
- Partner with ETX teams to ensure controls are well-designed, tested and continuously improved
- Oversee remediation tracking and ensure timely closure of issues
- Embed risk and compliance expectations into technology and data lifecycle processes
- Emerging Risks
- Monitor emerging technologies and evolving threat landscapes to anticipate new risk and compliance requirements
- Resilience & Continuity Risk Oversight
- In partnership with Head of Enterprise Resilience, oversee risk and compliance assessments related to business continuity, disaster recovery, incident response, and operational resilience
- Ensure resilience metrics, testing, and scenario exercises are integrated into the broader risk and compliance program
- Reporting & Executive Communication
- Deliver clear, concise and actionable reporting to ETX leadership and other key stakeholders
- Translate technical risk and compliance insights into business-relevant narratives and recommendations
- Maintain, KRIs, KPIs, dashboards and heatmaps that reflect real-time risk and compliance posture
- Team Leadership & Talent Development
- Lead, mentor and develop a high-performing team of risk professionals across Cyber, AI, Data, Technology, Resilience and Regulatory Compliance domains
- Foster a culture of accountability, curiosity and continuous improvement
- Build a strong cross-functional partnership to strengthen risk and compliance awareness and ownership
The Minimum Qualifications
- Proven leadership experience managing multi-disciplinary risk and compliance teams
- Deep understanding of technology architectures and operations, cloud environments, data ecosystems and AI/ML systems
- Strong knowledge of regulatory and industry frameworks (NIST CSF, COBIT, privacy and cybersecurity regulations, AI governance standards, operational resilience requirements)
- 10+ years of experience in Technology Risk, Cybersecurity, Regulatory Compliance or related fields
- Exceptional communication skills with the ability to influence senior leaders and simplify complex topics
- Demonstrated ability to design and operationalize risk and compliance frameworks at scale
- Bachelor's or master's degree in computer science or related field
- Must be able to work in the US without sponsorship
The Ideal Qualifications
- Experience in financial services or other highly regulated industries
- Certifications such as CRISC, CISM, CISSP, CISA, CIPM or similar credentials
- Background in risk quantification, regulatory examinations, or model risk management
Success Measures
- A unified, transparent and actionable risk and compliance posture across all ETX-owned risk domains
- Strong leadership confidence in risk and compliance reporting
- Demonstrated regulatory readiness
- Measurable improvements in control effectiveness, risk management maturity and risk informed decision-making
- A high-performing, engaged team recognized as trusted advisors across the organization
What to Expect as Part of MassMutual and the Team
- Access to learning content on Degreed and other informational platforms
- Focused one-on-one meetings with your manager
- Networking opportunities including access to Asian, Hispanic/Latinx, African American, women, LGBTQIA+, veteran and disability-focused Business Resource Groups
- Your ethics and integrity will be valued by a company with a strong and stable ethical business with industry leading pay and benefits
#LI-MC1
MassMutual is an equal employment opportunity employer. We welcome all persons to apply.
If you need an accommodation to complete the application process, please contact us and share the specifics of the assistance you need.
California residents: For detailed information about your rights under the California Consumer Privacy Act (CCPA), please visit our California Consumer Privacy Act Disclosures page.
Salary Range: $189,900-$249,200
MassMutual Compensation & Benefits Highlights
How does MassMutual ensure its pay and bonus plans are competitive?
MassMutual supports competitive compensation through salary and bonus opportunities, retirement contributions, pay transparency practices and a broad benefits package that adds value beyond base pay. The company also uses long-running pay equity reviews and employee feedback to evaluate whether rewards are supporting employees across roles and life stages.
- Competitive pay and bonus opportunities: MassMutual describes its total rewards approach as holistic and flexible, with competitive salaries and bonuses designed to support employees’ financial well-being. Employees also point to compensation as part of the value proposition, with one sales assistant citing “great benefits and lots of flexibility,” and another employee describing the company’s “good leadership and benefits.”
- Retirement and financial benefits: MassMutual provides a 401(k) benefit of up to 10% of eligible compensation, including a 5% company match and a 5% annual company contribution. The company also treats eligible student loan payments like 401(k) contributions for matching purposes and begins monthly retirement healthcare account contributions for employees starting at age 45.
- Pay transparency and pay equity: MassMutual posts salary ranges in most job postings and has used an independent HR risk management firm to conduct annual adjusted pay gap reviews for 17 years. That approach connects compensation competitiveness with equity and accountability across the employee experience.
- Benefits as part of total rewards: MassMutual’s compensation includes health, dental and mental health benefits, caregiver leave, parental leave, bereavement leave, paid volunteer time, flexible holidays and a Well-Being Wallet of up to $1,250 annually. A head of human resources said, “It’s not about industry standards — it’s about supporting all employees’ well-being in ways that are meaningful to them.”
- External signals:
- Benefits value: Employees on external review sites regularly highlight benefits as a strength, with reviews calling out “excellent benefits,” “great benefits” and a “great benefits package.” (Glassdoor; Indeed)
- Compensation and retention: Employees surveyed on external review sites rate MassMutual’s perks and benefits an A-, with 100% saying perks and benefits play a role in staying at the company. (Comparably)
- Financial stability: MassMutual reported more than $10 billion in insurance and annuity benefits paid in 2025 and total adjusted capital above $34 billion, reinforcing the company’s long-term financial foundation. (MassMutual 2025 Annual Report)
Bottom line: MassMutual supports competitive pay through salary and bonus opportunities, strong retirement contributions, pay transparency, recurring pay equity reviews and benefits designed to support employees’ financial, physical, mental and family well-being.
MassMutual Insights
Similar Jobs
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Since 1851, MassMutual’s commitment has always been to help people protect their families, support their communities, and help one another. This is why we want to inspire people to Live Mutual. We’re people helping people. Together, we’re stronger.
Why Work With Us
MassMutual has the financial security and stability of a 170+ year old company, with the culture and energy of a startup. We work every day with the customer front of mind to build the best digital experience in the industry.
Gallery
MassMutual Teams
MassMutual Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
We believe in capitalizing on the best of being together in our offices as well as personal flexibility. Our workplace philosophy puts office collaboration first, combined with flexibility to work remotely.
Typical time on-site:
3 days a week
