Careers

Posted: July 27, 2026

The Health Connector is seeking a Director of Risk Management to lead the agency’s enterprise risk management program, ensuring operational, financial, regulatory, cybersecurity, and reputational risks are identified, assessed, monitored, and mitigated effectively. This position will report to the General Counsel and will have significant responsibility for designing, implementing, and operating a practical risk management program across the organization.

This individual will help develop a risk management framework and work with business owners to ensure that risks are identified, cataloged, measured, and prioritized, and that appropriate controls are in place to manage them. Specific areas of risk will include compliance with federal and state regulations regarding the operations of health insurance exchanges, compliance with federal and state privacy and security requirements, and other factors that create risk for the Health Connector.

• Developing, implementing, and maintaining the enterprise risk management and acceptance framework
• Creating and maintaining a centralized risk register to categorize, measure, and prioritize risks across the enterprise
• Designing and implementing risk mitigation strategies and a program for monitoring both how effectively the Health Connector is reducing identified risks and is timely identifying emergent risks
• Using risk management strategies to support Health Connector compliance with federal and state regulations
• Coordinating scenario planning activities and tabletop exercises to identify risks and to improve the Health Connector’s readiness to respond to various potential events
• Working with the IT team, supporting the creation of a framework for ensuring the Health Connector is able to meet its compliance obligations under the federal Acceptable Risk Controls for ACA, Medicaid, and Partner Entities (ARC-AMPE) standards
• Developing, maintaining, and revising policies and procedures related to enterprise risk management
• Collaborating with business owners to document control expectations, monitor risk mitigation activities, support policy development where appropriate, and ensure that technology, data, privacy, and security risks are visible through the enterprise risk management process
• Supporting strategic planning with risk-informed decision making
• Supporting fraud detection and prevention strategies
• Supporting establishment of vendor risk assessment frameworks
• Providing reports and updates to federal regulatory agencies on risk management activities
• Supporting the procurement and management of business insurance policies, including commercial, directors and officers, employment practices, professional liability/errors and omissions, cyber, and umbrella
• Developing and implementing a strategy to centrally manage and report out on audits
• As necessary, procuring, managing, and directing external audits of Health Connector operations, working in coordination with the Health Connector financial, legal, and operations teams.
• Responding to inquiries or information requests, as they occur
• In collaboration with legal and learning and development staff, developing and delivering regular training and other activities to heighten employee awareness of employee standards of conduct, reporting obligations, and understanding of the Health Connector’s legal obligations and potential areas of risk
• Other duties as required

• A bachelor’s degree, preferably in Risk Management, Business Administration, Finance, Public Policy, IT, or a related field (Master’s preferred)
• A minimum of seven years’ experience in risk management, compliance, audit, or related field.
• Experience with health care, insurance, regulatory interpretation, and/or government operations strongly preferred.
• Strong understanding of enterprise risk frameworks
• Experience or familiarity with IT security or data management preferred.
• Ability to manage work in a project setting across departments
• Strong organizational skills and attention to detail
• Demonstrated ability to assume leadership and work independently.
• Strong ability to communicate effectively both orally and in writing.