• Responsible for establishing repeatable processes for identifying technologies adopted across the organization. • Assessing associated risks and onboarding technologies into operational management. • Improving visibility into the organization's technology ecosystem. • Works collaboratively with Security, IT, Enterprise Architecture, Procurement, Privacy, Legal, and business stakeholders. • Develops and implements processes that improve visibility into SaaS applications, cloud services, AI platforms, browser extensions, and other business-adopted technologies. • Analyzes telemetry from enterprise identity, endpoint, cloud, network, browser, and security platforms. • Investigates technology usage to determine business purpose, ownership, data sensitivity, regulatory considerations, operational dependencies, and associated security risks. • Partners with business stakeholders to understand technology adoption and facilitate secure onboarding into established operational processes. • Coordinates with IT and technology teams to ensure technologies are appropriately reviewed, documented, inventoried, and transitioned into operational ownership. • Establishes and maintains inventories of business applications, technology owners, integrations, data classifications, and associated risk information. • Performs technical risk assessments and recommend practical security controls and mitigation strategies that support business objectives. • Implements and optimizes capabilities supporting technology governance, technology inventory, and security posture management. • Develops automation using scripting, APIs, and workflow technologies to improve discovery, inventory synchronization, reporting, and lifecycle management. • Produces operational and executive reporting that communicates technology adoption trends, governance maturity, operational metrics, and technology risks. • Builds trusted relationships across technical and business teams to encourage secure technology adoption and effective governance. • Documents all implemented processes, workflows, and operational procedures to support long-term sustainability. • Performs other duties as assigned.

• Manages loss control/loss prevention activities based on the Facility risk profile and at the direction of the Market Risk Director, System Directors • Reports Risk Management issues and Claim information to the Facility/Functional Area Administrative and/or Clinical Leadership on a regular basis. • Conducts annual proactive risk assessments as part of the annual risk strategic plan; addresses and reports results, issues and associated action plans to supervising Risk Director and/or Home Office. • Timely identifies, investigates and reports to claims any events that may result in financial loss to the organization; keeps supervising Risk Director and Facility leaders apprised of events and trends. • Conducts proactive risk management surveys and studies and responsible for developing and implementing effective action plans to address risk exposures as directed by supervising Risk Director. • Implements departmental and facility policies and procedures that affect liability exposures as directed by Risk Leadership and as needed by facility. • Provides direction and oversight of risk activities within the assigned facility, and provides expert consultative services to staff at all levels.

• Lead the transformation and modernization of the ERM function, building new processes, structures, and tools aligned with enterprise objectives. • Reassess existing risk management frameworks, policies and tools to enhance visibility, agility and accountability across the organization. • Drives a strategic program that is proactive in monitoring and analyzing trends, identifying risks (threats and opportunities) and developing actionable insights or impacts to Humana’s objectives, growth and reputation. • Builds and establishes a proactive risk and resilience program that is adopted across Humana and drives value. • Champions and promotes a risk-aware culture throughout Humana, aligning Humana’s strategy with ERM’s objectives and risk appetite. • Establish an ERM roadmap, including program milestones, technology implementation, and staffing strategy. • Monitor changes in the regulatory environment and ensure the organization’s risk management practices are compliant with federal, state, industry and COSO requirements. • Enhance integrated risk reporting for executive leadership, the board and key governance committees, using dashboards, key risk indicators, and risk heat maps. • Partner closely with internal audit, compliance, legal, operational risk, IT and business partners to ensure a coordinated and risk-aware culture. • Build and manage a high-performing ERM team using a hybrid model of internal staff and the selected outsourced provider. • Collaborate closely with outsourced provider to ensure adherence to service-level agreements and performance standards. • Foster a collaborative, high-accountability environment where both internal and external staff contribute to program maturity. • Establish and lead effective enterprise risk management committee governance and reporting, providing valuable reporting and insights to the leadership team and Audit Committee. • Ensures process and tools are established to identify risk themes and effectively communicate and escalate those to leadership as applicable. • Present risk findings and recommendations to executive leadership and the Audit Committee. • Lead risk assessment activities, including risk identification, prioritization, and the establishment of risk appetite and tolerance levels. • Facilitate scenario planning sessions with key stakeholders. • Champion the development and execution of risk education and awareness programs across the enterprise to embed risk awareness into daily operations. • Develop a governance structure for approvals and oversight of new projects (transformation, systems, processes, etc.). • Lead execution of the developed governance structure to provide appropriate oversight for alignment with organizational risk tolerance and strategy.

• Conducts insurance risk management surveys on a range of moderate to complex risks • Execute risk management consultations at policyholders’ premises • Develop risk management programs recommendations based on observations • Provide quantitative/qualitative analysis with conclusions • Manage workload assignments to attain agency customer engagement activities