Enterprise Risk Management Lead

About Gusto At Gusto, we're on a mission to grow the small business economy. We handle the hard stuff—like payroll, health insurance, 401(k)s, and HR—so owners can focus on their craft and customers. With teams in Denver, San Francisco, and New York, we’re proud to support more than 400,000 small businesses across the country, and we’re building a workplace that represents and celebrates the customers we serve. Learn more about our Total Rewards philosophy . About the Role: Gusto is scaling our AI-powered risk function to support a complex, multi-entity business operating in highly regulated environments. As the Enterprise Risk Management Lead, you will own and operate Gusto's Enterprise Risk and Third Party Risk Management programs — built AI-first, designed to scale, and built to enable the business to move fast without breaking things. This is a People Empowerer (manager) role. You balance hands-on program leadership with managing and developing a team of compliance professionals. You navigate the tension between "doing the work" and "leading the work" — contributing directly to complex, high-impact programs while ensuring your team delivers with excellence. You are a change agent who influences how automated risk management gets done at Gusto, models AI-enabled ways of working, and helps others grow their own capabilities in the process. You will champion the adoption of AI, machine learning, and process automation across risk monitoring, control testing, incident management, and reporting — and you will partner with Product, Data Science, and Engineering to make it explainable, adopted, compliant, and scalable. Here’s what you’ll do day-to-day: You manage initiatives that are complex in both scope and impact, influencing the strategic direction of Gusto's compliance risk management framework. You apply a deep understanding of the regulatory landscape and how it intersects with Gusto's business model to proactively design and lead cross-functional risk programs. You translate complex risk topics into clear, actionable guidance that senior leaders can immediately understand and operationalize. You lead cross-functional working groups, align divergent perspectives, and drive cohesive progress toward shared goals — with minimal oversight. As a PE, you balance individual risk and compliance contribution with team leadership. You manage operations, professional development, resource allocation, and performance — while staying close enough to the work to be a credible, hands-on partner to your team and stakeholders. You model responsible AI use, and act as a source of knowledge and mentorship — supporting your team's AI journey and helping others apply it responsibly and effectively. AI-Enabled Risk Operations, Innovation Transformation This is how you and your team operate — not a side project. Champion the adoption of AI, machine learning, process automation, and advanced analytics to improve risk monitoring, control testing, and reporting across ERM, TPRM, and broader compliance functions Lead the integration of AI and automation into every phase of the risk lifecycle: vendor assessments, document ingestion and analysis, continuous monitoring and alerting, risk scoring, prioritization, and trend analysis Build intelligent risk monitoring and evaluation systems — including auto-tagging for risk issues, audit requests, and regulatory changes — that improve real-time visibility and eliminate manual effort across the enterprise risk portfolio Drive the digitalization of risk tools including RCSAs, KRIs, incident reporting, and audit tracking — transforming periodic, reactive processes into continuous intelligence systems with live leading and lagging indicators that enable real-time decision-making Partner with Product, Data Science, and Engineering to define requirements for AI-driven workflows, decisioning engines, and dashboards — ensuring explainability, auditability, and regulatory defensibility of all AI-en ... (truncated, view full listing at source)