Director, Enterprise Risk Management

Organization's Mission

Empowering members to achieve financial success.

Your Mission

Lead a sophisticated, proactive, and balanced risk management strategy that prioritizes member protection while enabling informed business decisions and competitive positioning.

Position Summary

The Director of Enterprise Risk Management (ERM) manages the Credit Union's ERM program and supports the consistent identification, assessment, monitoring, mitigation, and reporting of enterprise-wide risks. This role coordinates risk assessments, maintains risk dashboards, supports compliance and fraud risk oversight, and helps ensure policies, procedures, internal controls, and risk practices remain aligned with regulatory expectations and the Credit Union's risk appetite.

The Director works closely with senior leaders, department managers, internal audit, compliance, information security, operations, lending, finance, and vendor management partners to promote practical risk awareness and timely escalation of emerging issues. This role provides clear analysis, recommendations, and reporting to senior management while ensuring day-to-day risk management activities are organized, documented, and continuously improved.

Service Standards

Must meet our service standards as evaluated by internal and external members:

• I will greet you with a prompt, friendly welcome.
• I will treat you with courtesy and respect.
• I will offer you my undivided attention.
• I will take ownership of situations and follow through.
• I will provide accurate information and helpful solutions.
• I will do all I can to improve your financial life.
• I will thank you for your business.

Key Success Measures

• Zero material regulatory findings.
• Minimized losses and member complaints related to fraud events and mitigation processes.
• Effective follow-up and documentation of risk mitigation plans, audit findings, regulatory concerns, and management action items.
• Clear, practical communication of risk trends, emerging issues, and recommended actions to management.

Key Activities

• Enterprise Risk Management Program: Manage the ERM calendar, risk assessment process, key risk indicators, and related documentation to support consistent enterprise-wide risk monitoring.
• Risk Reporting and Escalation: Prepare concise, actionable reporting for senior management, including risk trends, open issues, mitigation progress, and matters requiring escalation.
• Compliance and Control Coordination: Partner with Compliance, Internal Audit, Information Security, Operations, Lending, Finance, and other departments to monitor regulatory issues, control gaps, audit findings, and corrective action plans.
• Fraud Risk Support: Coordinate with operational teams to monitor fraud trends, review mitigation processes, support member protection practices, and recommend process improvements.
• Third-Party and Vendor Risk Support: Support vendor management and third-party risk oversight by reviewing risk information, coordinating due diligence activities, tracking matters requiring follow-up, and escalating material concerns.
• Policy and Procedure Maintenance: Assist in developing, reviewing, and maintaining risk management policies, procedures, standards, and control documentation.
• Risk Culture and Training: Provide guidance, tools, and training to help departments understand risk responsibilities and embed practical risk-aware practices into daily operations.
• Team and Project Leadership: Supervise, coach, and develop assigned risk and compliance staff, if applicable, and lead cross-functional risk projects with clear timelines, accountability, and documentation.

Additional Activities

• Monitor internal and external risk indicators, including operational, compliance, fraud, business continuity, cybersecurity, vendor, and strategic risk trends.
• Coordinate timely responses to significant incidents or control events and document root cause, remediation, lessons learned, and reporting needs.
• Maintain awareness of relevant industry, credit union, regulatory, and technology developments, including emerging risks related to cybersecurity, AI, fraud, and payments.
• Collaborate with department leaders during planning, budgeting, product changes, vendor reviews, and operational changes to identify and document risk considerations.
• Perform other risk management duties and special projects as assigned.

Qualifications

• Strong working knowledge of enterprise risk management, compliance, internal controls, operational risk, fraud risk, and vendor risk within a regulated financial institution.
• Ability to manage ERM program activities, risk assessments, risk maps, control documentation, committee materials, and action-item tracking with accuracy and consistency.
• Sound analytical judgment with the ability to translate risk information into clear summaries, practical recommendations, and timely escalation points.
• Experience coordinating audit, examination, compliance, or risk remediation activities and tracking management action plans through completion.
• Strong written and verbal communication skills, including the ability to prepare clear reports and present information to management.
• Ability to influence without direct authority and work effectively with executives, managers, and frontline teams.
• Demonstrated organizational skills, attention to detail, follow-through, and ability to manage multiple priorities.
• People leadership, project leadership, or program management experience preferred.
• Credit union or financial institution experience strongly preferred.

Education

• Bachelor's degree in Finance, Business Administration, Risk Management, or a related field required.
• Advanced degree and/or professional certification (e.g., CRCM, CERP, ARM) preferred.

Experience

• Seven or more years of progressive experience in risk management, compliance, internal audit, or a related field.
• Five or more years in a leadership role, preferably within a credit union, bank, or other regulated financial institution.

Physical Requirements

Sedentary work performed primarily in an office environment, including regular computer use, repetitive hand and finger movements, and frequent participation in meetings, presentations, and collaborative work activities. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform the essential functions of the position.