ETX Governance, Risk & Compliance Team
Full-Time, Springfield/Boston
The Opportunity
As a Third-Party Risk Consultant, you will play a crucial role in implementing the third-party technology risk framework while collaborating with U.S., Romania, and India-based Digital Trust, Governance & Technology Assurance teams. This position is responsible for executing third-party risk assessments and due diligence activities across MassMutual's third-party ecosystem, including evaluating services, data flows, system integrations, controls, and evidence to identify and document risk exposure. Additionally, you will support the adoption of risk management practices across the ETX organization. As a key member of the ETX Third-Party Technology Assurance team, you will help drive change, collaborate effectively across global time zones, and enhance operational efficiency throughout the organization.
The Team
The Digital Trust, Governance & Technology Assurance Team is comprised of governance and risk professionals responsible for implementing governance processes and risk management practices for the ETX (Information Technology) organization. This role will operate as part of a globally distributed team and will work closely with U.S., Romania, and India-based business, technology, procurement, compliance, legal, enterprise risk, and audit partners to design practical and effective technology governance and risk management solutions that increase operational efficiency, improve transparency, and support informed decision-making.
The Impact
- Analyze third-party services, data flows, and system integrations to identify inherent and residual risk exposure
- Collaborate with issue management teams to ensure identified risks, including vulnerabilities, are appropriately tracked, communicated, and remediated
- Contribute to status reporting and metrics tracking for ongoing third-party risk activities
- Evaluate, document, communicate, and support breach event and incident response activities
- Execute risk evaluation procedures by reviewing evidence, documenting observations, and recording results in accordance with defined templates and quality standards
- Identify control gaps, weaknesses, or non-compliance issues and clearly document findings for further review and disposition
- Partner with senior practitioners to support risk rating determinations and escalation decisions
- Perform risk assessments to ensure third parties meet security and technology standards in alignment with established practices and procedures
- Proactively escalate delays, gaps in information, or emerging risks to the team lead
- Research and consult with internal subject matter experts to understand and document risk identified through risk assessments and due diligence practices, and communicate the findings to stakeholders
- Timely address asks, feedback, and comments provided by Digital Trust, Governance & Technology Assurance leadership, including collaboration across Romania, U.S., and India working hours
- Support onboarding, knowledge transfer, documentation, and process adoption activities needed to enable a smooth contract engagement and potential transition to full-time employment
The Minimum Qualifications
- 2+ years of experience in risk management and/or completing third-party risk assessments
- 2+ years of experience implementing metrics to track status, identify trends, and surface potential issues
- 2+ years of experience working in an enterprise GRC platform, including proficient use of Excel import/export functions
The Ideal Qualifications
- Associate's degree, preferably in technology, cybersecurity, risk management, or business-related field
- Minimum of 3 years of experience in third-party risk management, technology risk, cybersecurity, audit, or controls testing
- Foundational understanding of third-party risk domains, including:
- Cybersecurity and data protection
- Cloud/SaaS risk considerations
- Identity and access management (e.g., SSO vs. standalone access)
- Business continuity and resiliency
- Proficiency with SharePoint and related tools used to execute an effective regulatory compliance program
- Experience communicating regulatory requirements to technical and non-technical audiences, and facilitating discussions between ETX owners, Compliance, and Law to ensure a shared understanding and effective compliance
- Familiarity with industry frameworks such as NIST, ISO 27001, SOC 2, or similar
- Ability to interpret control evidence and assess adequacy relative to risk
- Strong written and verbal communication skills, with the ability to interact effectively with internal stakeholders, third parties, and globally distributed teams
- Experience working in a contract, consulting, managed services, or globally distributed team environment, with demonstrated ability to ramp quickly, document work clearly, and build trust with remote stakeholders across multiple regions, including U.S., Romania, and India teams
- Demonstrated ability to execute with limited guidance while meeting deadlines in a structured, process-driven environment
- Strong attention to detail and documentation discipline
#LI-RK1
MassMutual is an equal employment opportunity employer. We welcome all persons to apply.
If you need an accommodation to complete the application process, please contact us and share the specifics of the assistance you need.
California residents: For detailed information about your rights under the California Consumer Privacy Act (CCPA), please visit our California Consumer Privacy Act Disclosures page.
Salary Range: $86,200-$113,100
Skills Required
- 2+ years of experience in risk management and/or completing third-party risk assessments
- 2+ years of experience implementing metrics to track status, identify trends, and surface potential issues
- 2+ years of experience working in an enterprise GRC platform, including proficient use of Excel import/export functions
- Associate's degree, preferably in technology, cybersecurity, risk management, or business-related field
- Minimum of 3 years of experience in third-party risk management, technology risk, cybersecurity, audit, or controls testing
- Foundational understanding of cybersecurity and data protection, cloud/SaaS risk, identity and access management, and business continuity and resiliency
- Proficiency with SharePoint and related regulatory compliance tools
- Experience communicating regulatory requirements to technical and non-technical audiences and facilitating discussions among technology, compliance, and legal stakeholders
- Familiarity with NIST, ISO 27001, SOC 2, or similar industry frameworks
- Ability to interpret control evidence and assess adequacy relative to risk
- Strong written and verbal communication skills
- Experience working in contract, consulting, managed services, or globally distributed team environments
- Ability to execute with limited guidance while meeting deadlines in a structured, process-driven environment
- Strong attention to detail and documentation discipline
MassMutual Compensation & Benefits Highlights
How does MassMutual ensure its pay and bonus plans are competitive?
MassMutual provides market-competitive salaries and generous incentive pay opportunities for all employees. Whether an employee is just starting out, transitioning to a new career, or joining us as a seasoned leader — we value their contributions.
- Competitive Salary and Bonus offerings: MassMutual’s base salaries reward and recognize employees’ experience, skills and performance. Our salary ranges are regularly benchmarked within our industry and the broader job market to ensure competitiveness. Additionally, all MassMutual employees have the opportunity to receive competitive, performance-based bonuses, either annually or more frequently.
- Annual Incentive Plan (AIP): AIP awards are discretionary and based on individual and company performance, with opportunities to earn above-target bonuses in years with exceptional results. These awards consider not only what results a person achieved, but how they achieved them, rewarding behaviors that help create a productive and welcoming work environment for everyone.
- Employees in sales roles participate in our variable incentive compensation (VIC) program instead of AIP. VIC provides incentive pay awards commensurate with results for individuals in roles that directly influence sales.
- Employees in sales roles participate in our variable incentive compensation (VIC) program instead of AIP. VIC provides incentive pay awards commensurate with results for individuals in roles that directly influence sales.
- Pay transparency and pay equity: MassMutual publishes salary ranges in job postings and is committed to promoting pay equity. This includes providing pay equity training to managers, reviewing the pay of employees who perform similar work as a standard practice when making compensation recommendations, and partnering regularly with independent external experts to check our work.
- Benefits as part of Total Rewards: MassMutual invests in every aspect of their employees’ well-being, providing a rewards package that goes far beyond a paycheck to support them physically, mentally, and financially. Their robust healthcare, retirement and protection benefits provide a range of support through all of life’s big moments — and, over the years, they have expanded their pioneering leave programs so employees can better care for themselves and the people they love.
- Health benefits: MassMutual offers a comprehensive suite of health and wellness benefits, focusing on solutions that support holistic well-being, aimed at improving access and outcomes for all, and provide flexibility to meet our employees’ and their families’ unique needs. Employees value our wide array of benefits, with one sales assistant citing “great benefits and lots of flexibility,” and another employee describing the company’s “good leadership and benefits.” (MassMutual Careers Benefits; Glassdoor). In a 2026 employee survey, one employee noted “The organization offers a wide range of programs and benefits that meaningfully support employees and foster a positive, inclusive culture.”
- Retirement and financial benefits: MassMutual provides a 401(k) plan contribution of up to 10% of eligible compensation, including up to 5% company match on employee deferrals and, for all eligible employees, a 5% annual company contribution. The company also treats eligible student loan payments like 401(k) contributions for matching purposes. The company provides a Retiree Health Reimbursement Account to eligible employees; monthly credits start at age 45. (MassMutual Careers Benefits; MassMutual 2025 Annual Report)
- Additional health programs: MassMutual offers additional benefits such as a health savings account, access to a broad network of mental health resources and providers for employees and their family members, and resources like medical and surgery decision support, healthcare navigation services, and more. All employees also have access to a Well-Being Wallet, where they can be reimbursed for up to $1,250 per year for eligible physical, mental, or financial wellness related expenses.
- Other benefits: Employees have access to an array of resources to help strengthen their overall well-being and protect the ones they love, at every stage of life. Whether growing their family, volunteering in their community, planning their legacy, or looking to save on everyday expenses like pet or auto insurance, we offer financial benefits and corporate discounts to help.
- Employee Feedback on Benefits: MassMutual conducts regular employee surveys, and benefits continuously receive positive feedback. In their 2026 survey, one employee said “...the total benefits program here at MassMutual has to be one of the best, if not the very best. It seems this company goes out of its way to make sure their employees are well taken care of." With another employee sharing “The Well-Being Wallet, education reimbursement, time off & leave programs are top notch and unlike anything I've experienced”.
- Time off & leaves: MassMutual’s flexible time-off and leave programs support employees’ well-being, help them care for loved ones, and balance personal priorities. Offerings include inclusive caregiver, bereavement, and other essential leaves; generous parental leave and financial support for adoption and surrogacy; up to 24 hours of paid volunteer time annually; and generous vacation, flexible holidays, companywide paid holidays and remote work weeks, and five “take care days.”
- External signals:
- Benefits value: Employees on external review sites regularly highlight benefits as a strength, with reviews calling out “excellent benefits,” “great benefits” and a “great benefits package.” (Glassdoor; Indeed)
- Benefits and retention: Employees surveyed on external review sites rate MassMutual’s perks and benefits an A-, with 100% saying perks and benefits play a role in staying at the company. (Comparably)
Bottom line: MassMutual supports employee wellbeing through competitive salaries and bonus opportunities, strong retirement contributions, and benefits designed to support the financial, physical, and mental well-being of employees and their families.
MassMutual Insights
What We Do
Since 1851, MassMutual’s commitment has always been to help people protect their families, support their communities, and help one another. This is why we want to inspire people to Live Mutual. We’re people helping people. Together, we’re stronger.
Why Work With Us
MassMutual has the financial security and stability of a 170+ year old company, with the culture and energy of a startup. We work every day with the customer front of mind to build the best digital experience in the industry.
Gallery
MassMutual Teams
MassMutual Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
We believe in capitalizing on the best of being together in our offices as well as personal flexibility. Our workplace philosophy puts office collaboration first, combined with flexibility to work remotely.



