Who We Are – MassMutual Romania

MassMutual Romania – in partnership with MassMutual in the United States – will help shape a culture of innovation and to create the digital products and technology solutions that help people secure their future and protect the ones they love. Positioning MassMutual for its next 20 million customers and remaining innovative in a digital-first world led to the creation of MassMutual Romania in 2020. With offices in Bucharest and Cluj, MassMutual Romania was established to build an in-house team with expertise in application development and support, quality assurance and data science. For 170 years, MassMutual has put its customers at the heart of what it does by providing holistic financial solutions, guidance, and education on their terms. Its long-term strategy helps ensure that policyowners and their loved ones can rely on them to be there when they need them most. If this vision excites you, come join us and become a MassMutual Romania team member. This is a great opportunity to be part of the transformational journey at MassMutual Romania. As we continue to grow our business and look for new ways to engage with customers, technology will be one of the most important enablers to our success and you can be a part of it.

The Opportunity

Do you want to be part of a team that encourages your growth, supports your ambitions, and makes it a priority for you to reach your goals? Is helping people part of who you are? At MassMutual Romania, we help millions of people find financial freedom, offer financial protection and plan for the future. We do this by building trust with our customers by being knowledgeable problem solvers and prioritize their needs above all else. We Live Mutual. If this sounds like a fit, come join our team.

Job Description

MassMutual has recognized the importance of an Enterprise Privacy, Data and AI Governance program and we are looking for a skilled and highly motivated individual with strong business acumen to join this Enterprise Privacy, Data and AI Governance team within the Enterprise Technology Experience organization. The team embodies a culture of working collaboratively, cross-functionally, and using new technologies all in support of a culture of innovation and collaboration.

A career with us means you will work alongside exceptional people and be empowered to reach your professional and personal goals. Our employees are the foundation of what makes MassMutual a strong stable and ethical business. We seek and value unique and varied perspectives and experiences because we believe we are stronger when all voices are heard.

We invite you to bring your bright, innovative ideas to MassMutual as we continue to help millions of Americans rely on each other.

The main goals of The Security Risk and Compliance Specialist  are to apply governance and technical skills, work with members of the business and technology areas to develop a controls governance and assessment strategy for AI Governance, to consult on controls best practices, to execute internal controls, and to help create innovative solutions to both business and technical challenges.

The ideal candidate must be team-oriented and possess excellent written, verbal, and communication skills.

Key Responsibilities:

• Develop strategy for governing and reporting on control execution, coverage, and issues, leveraging reporting and dashboarding tools.
• Develop and manage task-level work plans for execution of more complex controls-related efforts.
• Build knowledge of internal controls, systems, and process landscape to enable clear understanding of impact.
• Support mapping of internal Standards and Controls to industry frameworks (NIST, COBIT) and to regulatory requirements.
• Assess controls to provide assurance of control performance.
• Advise control owners on control design that is both scalable and sustainable.
• Monitor control implementation and execution, escalating when issues are identified.
• Execute AI Governance internal controls, based on AI Governance playbook for both internally developed and supplier AI products.
• Adapt to evolving business needs, while maintaining robust solutions that strengthen the control environment.

Mandatory Qualifications:

• 5+ years’ experience in risk management, IT auditing, IT governance, business analysis, or IT internal controls
• Strong understanding of risk and IT controls
• Energized by change and solution oriented
• Good communicator, quick thinker & confident decision maker
• Can work independently, while still a strong team player
• Enthusiastic, self-starting and thrives in changing, agile environments
• Good organizational and time management skills
• Accuracy and attention to detail

Nice to have:

• Knowledge of NIST AI RMF, SR 11-7 is a strong advantage, but not mandatory
• Knowledge on COBIT/NIST is a strong advantage, but not mandatory
• Familiar with ServiceNow, Jira tools (or similar) is a plus, but not mandatory
• Desirable: AI governance certification, but not mandatory.
• Desirable: CISA or other audit certification, but not mandatory.

#LI-CD2