JobDescription.org

Public Sector

Risk Manager

Last updated

Public Sector Risk Managers identify, assess, and mitigate the financial, operational, legal, and reputational exposures facing government agencies, municipalities, school districts, and public authorities. They design and administer self-insurance programs, manage third-party claims, oversee workers' compensation, and ensure the agency maintains adequate coverage and defensible loss-control practices across all departments.

Role at a glance

Typical education
Bachelor's degree in risk management, insurance, public administration, finance, or business
Typical experience
5-8 years
Key certifications
ARM-P, ARM, CRM, CPCU
Top employer types
Municipalities, county governments, school districts, state agencies, public entity risk pools
Growth outlook
Stable demand; hiring environment driven by retirements and increasing complexity of cyber and climate risks
AI impact (through 2030)
Largely unaffected; the role's reliance on legal judgment, political navigation, and vendor relationship management resists narrow task automation.

Duties and responsibilities

  • Conduct annual enterprise risk assessments across all agency departments and prepare a prioritized risk register for leadership review
  • Administer the agency's self-insurance and commercial insurance programs including general liability, property, workers' compensation, and cyber
  • Manage third-party claims from intake through resolution, coordinating with outside counsel and the agency's TPA on litigation strategy
  • Analyze workers' compensation loss trends, identify high-frequency injury departments, and implement targeted loss-control interventions
  • Review contracts, leases, and intergovernmental agreements for insurance requirements, indemnification clauses, and risk transfer provisions
  • Develop and maintain the agency's emergency preparedness, business continuity, and disaster recovery planning documentation
  • Oversee the certificate of insurance process, ensuring all vendors, contractors, and lessees provide compliant evidence of coverage before work begins
  • Prepare annual actuarial loss projections and funding recommendations for the self-insurance reserve fund presented to the governing board
  • Train department heads, supervisors, and front-line staff on incident reporting procedures, safety program requirements, and claim obligations
  • Monitor legislative and regulatory changes affecting public entity liability, cyber risk, and environmental exposure at state and federal levels

Overview

A Public Sector Risk Manager is the person accountable for making sure the agency doesn't get financially blindsided — by a slip-and-fall lawsuit at a city park, a workers' compensation spike in the public works department, a ransomware attack on the finance system, or a catastrophic property loss at a water treatment facility. The job spans insurance procurement, claims management, loss control, contract review, and emergency planning — all at once, with a governing board watching the budget.

On a typical week, a municipal Risk Manager might review a new construction contract's insurance requirements before the city attorney signs off, attend a claims committee meeting with outside counsel on a pending civil rights lawsuit, respond to a department head's request for guidance after a vehicle accident involving a city truck, pull loss-run data to prepare for a workers' compensation program renewal, and brief the city council's finance committee on reserve fund adequacy. The job is relentlessly cross-functional — risk managers need credibility with department directors, attorneys, finance officers, and union representatives simultaneously.

The claims side of the work is where the stakes are most visible. When a resident files a premises liability claim, or a police officer's use-of-force incident triggers § 1983 litigation, the risk manager is coordinating the agency's response from the first report through settlement or verdict. That means working with the TPA, outside defense counsel, and department supervisors to build a defensible record — while managing reserve requirements against the self-insurance fund.

Loss control is the part of the job with the clearest return on investment. A risk manager who analyzes injury data by department, identifies that the parks crew has three times the sprain rate of comparable agencies, and implements a targeted lifting and ergonomics program is directly reducing future liability. That analytical work — connecting loss data to operational root causes and then driving intervention — is increasingly what separates good risk managers from the ones who just process paperwork.

Public sector budgets constrain this role in ways private-sector counterparts don't experience. Every insurance premium, reserve deposit, and loss-control program purchase goes through a public appropriations process. Risk managers need to be able to present actuarial data and insurance market analysis to elected officials who may have no background in either subject.

Qualifications

Education:

  • Bachelor's degree in risk management, insurance, public administration, finance, or business (standard requirement)
  • Master's in public administration (MPA) or business administration (MBA) valued at larger agencies for senior roles
  • J.D. is an asset for risk managers at agencies with heavy litigation exposure, though not typically required

Certifications:

  • Associate in Risk Management for Public Entities (ARM-P) — the most targeted credential for this role
  • Associate in Risk Management (ARM) — The Institutes
  • Certified Risk Manager (CRM) — National Alliance
  • CPCU (Chartered Property Casualty Underwriter) — respected but less commonly required
  • PRIMA membership and participation signals genuine engagement with public entity risk community

Experience benchmarks:

  • 5–8 years of progressive experience in insurance, claims, risk management, or public entity administration for a manager-level role
  • Workers' compensation program management is the most universally valued prior experience
  • TPA or self-insurance fund administration background is a direct qualifier
  • Experience presenting to elected boards or public commissions is a practical differentiator

Technical knowledge:

  • Risk information management systems: Origami Risk, Riskonnect, RMIS platforms
  • Workers' compensation claims management and modified duty programs
  • Insurance coverage analysis: GL, auto, property, cyber, public officials' liability, law enforcement liability
  • Contract insurance requirements: additional insured endorsements, waiver of subrogation, primary/non-contributory language
  • Actuarial concepts: loss development factors, IBNR reserves, funding adequacy analysis
  • FEMA BCEGS ratings, property schedule management, and catastrophic loss modeling basics

Soft skills that matter here:

  • Political acumen — navigating relationships with elected officials, union leadership, and department directors simultaneously
  • Clear written communication — council memos and coverage summaries need to be legible to non-specialists
  • Composure during active litigation or post-incident scrutiny

Career outlook

Public sector risk management is not a high-growth field in headcount terms — most jurisdictions employ one to three risk management professionals regardless of agency size. But turnover from retirements, the consistent complexity of the role, and the scarcity of ARM-P certified professionals have created a hiring environment that favors candidates with the right credentials and experience.

The exposure environment is actively expanding. Cyber risk has moved from an emerging concern to a primary line item on every public agency's risk register. Local governments have been among the most visible ransomware targets — attacks on county governments, school districts, and water utilities have dominated insurance trade press for five years running. Risk managers who can assess cyber exposure, work with IT on controls, and negotiate cyber insurance terms are materially more valuable than those who cannot.

Police and public safety liability remains one of the most complex and politically sensitive areas in public entity risk. Civil rights litigation under § 1983, increased jury verdicts, and constrained insurance capacity for law enforcement liability are forcing cities and counties to think carefully about self-insurance retention levels and defense strategy. Risk managers at agencies with police departments need genuine fluency in this area.

Climate risk is also reshaping property exposure for many public agencies. Municipalities in flood-prone, wildfire-affected, and coastal regions are facing commercial property insurance capacity problems — some insurers are no longer writing coverage in certain geographies at any price. Risk managers are increasingly involved in asset hardening, FEMA flood map appeals, and the political conversation about what risks the public entity will ultimately bear itself.

For experienced professionals, advancement paths include Risk Management Director or Chief Risk Officer roles at larger counties, cities, or state agencies — positions that can reach $140K–$180K in major metropolitan governments. Public entity risk pools also hire senior staff from municipal risk management backgrounds. The PRIMA conference network and state chapter affiliations are the primary professional development and job market infrastructure for this specialization.

The role is unlikely to be automated or significantly restructured by AI in the near term. The combination of legal judgment, political navigation, and vendor relationship management that defines the job resists the kind of narrow task automation that is reshaping adjacent functions.

Sample cover letter

Dear Hiring Manager,

I'm applying for the Risk Manager position with [Agency]. I've spent seven years in public entity risk management, the last four as a Risk Analyst with [County/City], where I supported a self-insured workers' compensation program covering 2,400 employees across 18 departments.

In that role I owned the quarterly loss-trend analysis and the annual actuarial data submission to our TPA. Two years ago I noticed that our public works crew was generating 38% of our total indemnity claims despite representing 22% of the workforce. I worked with the department director to implement a mandatory pre-shift stretch program and revised the post-incident modified duty protocol so supervisors had a clearer process for placing injured workers. Over the next 18 months, lost-time claims in that department dropped by nearly a third.

I also managed the certificate of insurance process for approximately 400 vendor and contractor relationships annually and conducted insurance requirement reviews on all contracts over $50,000 before legal sign-off. I'm comfortable presenting risk program updates to elected officials — I've briefed our county board of supervisors twice on reserve adequacy and once on our cyber insurance renewal.

I hold the ARM designation and am currently completing the ARM-P coursework. I expect to sit for the exam this fall.

I'd welcome the chance to discuss how my background in loss control, claims coordination, and self-insurance program administration aligns with what you're looking for.

[Your Name]

Frequently asked questions

What certifications are most valued for Public Sector Risk Managers?
The Associate in Risk Management for Public Entities (ARM-P), offered through the Public Risk Management Association (PRIMA) and The Institutes, is the most directly relevant credential. The broader ARM and CPCU designations are also well-regarded. Many agencies additionally value the Certified Risk Manager (CRM) from the National Alliance for Insurance Education and Research.
How does public sector risk management differ from the private sector?
Public agencies face sovereign immunity limitations, open-records obligations, and political accountability that private companies do not. Claims against municipalities often involve civil rights exposure under 42 U.S.C. § 1983, police liability, and public works premises claims that require specialized defense strategies. Budgeting for self-insurance reserves must go through a public appropriations process, which removes the flexibility private risk managers take for granted.
Do most public agencies self-insure or buy commercial coverage?
Both approaches are common, and many agencies use a hybrid. Large cities and counties often self-insure general liability and workers' compensation up to a retention threshold, then buy excess coverage above that. Smaller jurisdictions frequently join public entity risk pools — like PRISM in California or CIRSA in Colorado — which pool risk across member agencies and provide coverage and loss-control services.
How is AI and data analytics changing this role?
Predictive analytics platforms now allow risk managers to identify workers' compensation claim patterns, flagging departments or job classifications with elevated injury probability before losses occur. AI-assisted contract review tools are accelerating the review of insurance requirements in procurement documents. Cyber risk quantification models have also matured significantly, making it easier to justify cyber insurance spending to budget-conscious governing boards.
What is the career path into Public Sector Risk Management?
Common entry points include insurance claims adjuster roles, municipal finance or budget analyst positions, and human resources with a workers' compensation focus. Some risk managers enter from law enforcement or public works administration, where operational risk exposure is direct. A bachelor's degree in risk management, finance, public administration, or a related field is standard, though the ARM-P designation can offset a non-traditional educational background.
See all Public Sector jobs →