AVP Enterprise Risk Management

Hybrid 899
899 S Oyster Bay Rd
Bethpage, NY 11714, USA

Four Leaf's ultimate goal is to provide the best-in-class member and employee experience, and it all begins with two things: hiring incredible people and giving them a great place to work.

The Assistant Vice President of Enterprise Risk Management serves as business leader responsible for building, enhancing, and scaling the organization’s enterprise‑wide risk governance program. Reporting to the First Vice President of Enterprise & Third Party Risk Management, the AVP drives the build out and maturity of the Credit Union’s risk programs and framework, ensuring cohesive governance, strong risk culture, and alignment with strategic objectives and regulatory expectations.

This role leads a growing team and is accountable for executing on the strategy to develop a cohesive, forward‑looking risk program that strengthens financial, operational, technology, information security, vendor, and strategic risk oversight across the organization.

• Serve as the business leader responsible for the build‑out, maturity, and integration of all enterprise risk programs, ensuring cohesive oversight across financial, operational, technology, and third‑party risk domains.
• Lead and develop the Risk Team, fostering a collaborative, accountable, and high‑performing culture.
• Act as a trusted advisor to the business units s, providing strategic insights, effective challenge, and forward‑looking risk perspectives.
• Risk Governance & Framework Management
  • Support monthly Board and Committee reporting requirements.
  • Oversee the enterprise‑wide risk governance framework, including the Enterprise Risk Assessment, Risk Appetite Framework, and core governance components such as policies, standards, taxonomies, and risk methodologies.
  • Ensure all risk programs and frameworks remain aligned with regulatory expectations, industry standards, and organizational strategy, embedding consistent practices across business units and risk owners.
  • Maintain and enhance enterprise‑level visibility through KRIs, dashboards, and thematic reporting to support informed decision‑making.
• Provide oversight for key risk programs including enterprise, program and process risk assessments, specialty risk assessments, new product approvals, model and insurance oversight.
• Ensure risk programs effectively identify, assess, monitor, elevate, and remediate risks across the enterprise, including root‑cause analyses and sustainable action plans.
• Drive integrated monitoring and reporting across all risk domains to ensure timely identification of emerging risks and alignment with the Credit Union’s risk appetite.
• Regulatory & Audit Management
  • Monitor changes to industry standards, examination findings or regulatory expectations (e.g., Basel, COSO, NCUA, NYDFS, CFPB, OCC) and ensure appropriate implementation and alignment across the Risk Framework and governance documentation.
  • Support attestations, internal audits, regulatory submissions, and examinations to ensure compliance and continuous improvement of risk management practices.
  • Provide enterprise‑wide oversight to ensure operational, financial, technology, and information security risk functions maintain regulatory readiness and control alignment.
  • Oversee enterprise responses to audit and regulatory findings, ensuring timely remediation, sustainability, and cross‑functional accountability.
• Collaborate with the Reportable Events program management on the Credit Union’s Incident, Issue & Losses Program (Reportable Events) ensuring control deficiencies and key risk issues are properly identified, documented, escalated, and remediated.
• Assists in driving cross‑functional collaboration to ensure business areas conduct thorough impact assessments, root‑cause analysis, and corrective action planning.
• Ensure enterprise‑level trend analysis, thematic reporting, and systemic risk insights are developed and shared with senior leadership and relevant committees.
• Maintain governance standards for issue classification, severity rating, escalation protocols, and Board‑level transparency.
• Strengthen operational resilience through continuous refinement of…