SVP Enterprise Risk Office

Job Overview

Pen Fed is hiring a (Hybrid) SVP Enterprise Risk Office at our Tysons, Virginia location. This role establishes Pen Fed Credit Union's enterprise risk strategy and drives the design, implementation, integration and execution of the overarching Enterprise Risk Management framework and risk programs. This position plays a key role in championing a proactive risk‑aware culture that balances robust risk governance with agile, resilient, and member‑centric growth.

Serving as a trusted risk advisor and strategic partner to the executive team and management and Board committees, this position oversees the Enterprise Risk Office to ensure independent, second‑line effective challenge across Financial Risk (interest rate, liquidity, and capital), Capital Planning Stress Testing (CPST), Model Risk, Operational Risk, Data Governance, and emerging frontiers like AI. In addition, this leader manages second line engagement to ensure key business activities, technology transformation, and new strategic initiatives align with Board‑approved risk appetites.

• Chair and run the Enterprise Risk Management Committee (ERMC); participate as a voting member in the Credit Risk Committee, the Allowance for Credit Loss Committee, and the Asset and Liability Committee.
• Model, evangelize and educate the organization regarding a proactive Risk culture across the entire Enterprise.
• Establish and quantify the organization's risk appetite and recommend to the Board of Directors the amount of risk that the organization is able and willing to take on.
• Establish, enhance and monitor Key Risk Indicators to ensure adherence to board‑approved risk appetite; set appropriate risk acceptance levels across the Enterprise.
• At all times provide informed expert and independent second‑line challenge of risks related to Pen Fed strategies, performance and decision‑making.
• Work with cross‑functional business leaders to regularly identify key risks across all risk categories; assess risks based on impact and likelihood; quantify, aggregate, and prioritize risks; validate or challenge risk management strategies; and monitor/report on residual risk.
• Ensure all policies, processes, procedures, tools, technology infrastructure and information systems within the Enterprise Risk Office are current, accurate, and performing as intended.
• Establish or refine new policies, procedures and risk limits as required to ensure the Enterprise's continued safety, soundness and strategic resilience.
• Advance predictive risk measurement capabilities across the enterprise, and formulate strategic action plans to help minimize, manage, and mitigate primary risks and then monitor the progress of these efforts.
• Develop, analyze, monitor and communicate real‑time and data‑driven risk intelligence via key risk indicators (KRIs), key performance indicators (KPIs), and risk tolerance limits.
• Enhance and maintain Enterprise‑wide Risk and Controls Self‑Assessment program and risk inventories, ensuring appropriate risk reporting for stakeholders including employees, executives, Board of Directors and regulators.
• Ensure that risk management priorities are fully integrated into Pen Fed's strategic priorities and financial plans.
• Work with First‑Line controls teams to evaluate enterprise operational risks across business and technology domains which might disrupt or affect business processes and ensure appropriate remediation actions.
• Issue findings as appropriate to BUs outside of policy or risk appetite tolerances; collaborate across all 3
  
  LOD to improve Findings and Issues Management tracking, monitoring and resolution.
• Lead the Enterprise Risk Office's engagement in Enterprise CPST exercise as a primary second‑line challenger.
• Interact with regulators on all aspects of risk management at Pen Fed across all 7 NCUA risk categories.
• Provide quarterly Board updates on Enterprise Risk Programs, Key Risk Indicators, and emerging risk trends.
• Develop budgets for risk‑related requirements and projects and supervise their funding.
• Conduct risk assurance and due diligence on behalf of the organization for new or expanded activities and initiatives, including but limited…