AVP Enterprise Risk Management Specialist

The Enterprise Risk Management Specialist supports the development, implementation, and ongoing maintenance of the bank’s Enterprise Risk Management (ERM) framework, with a focus on identifying, assessing, monitoring, and reporting risks across the bank’s operations, business lines, and fintech partnerships. The position works collaboratively with business units, Compliance, Information Technology, Finance, and Third-Party Risk Management (TPRM) to promote a consistent, risk-based approach to managing enterprise-wide exposures.

The Enterprise Risk Specialist assists with enterprise risk assessments, internal control evaluations, key risk indicator monitoring, issue remediation, and management reporting. The role also supports oversight of fintech partnerships by evaluating changes to products, services, technology, business operations, regulatory obligations, customer impacts, and third-party relationships that may affect the bank’s risk profile. This position operates within the bank’s second-line risk management structure, providing independent oversight, constructive challenge, and guidance to business units and fintech stakeholders.

It helps ensure that risks are appropriately identified, documented, escalated, and managed within the bank’s established risk appetite and applicable regulatory expectations.

• Support the development, implementation, and maintenance of the bank’s ERM framework, policies, procedures, and risk assessment methodologies.
• Identify, assess, monitor, and report enterprise-wide risks, including operational, compliance, strategic, financial, technology, reputational, cybersecurity, and third-party risks.
• Maintain and enhance the enterprise risk inventory, including risk descriptions, ownership, inherent risk ratings, control assessments, residual risk ratings, and mitigation strategies.
• Coordinate enterprise risk assessments with business units to identify emerging risks, control weaknesses, and opportunities for risk reduction.
• Evaluate new products, services, business initiatives, process changes, and strategic partnerships for potential enterprise risk implications.
• Support the development and monitoring of risk appetite measures, risk tolerances, and key risk indicators.
• Identify trends and concentrations of risk that could affect the bank’s financial condition, operational stability, regulatory standing, or customer relationships.
• Facilitate and support Risk and Control Self-Assessments (RCSAs) across business lines and support functions.
• Evaluate inherent risk, control design and effectiveness, and residual risk in accordance with established bank methodologies.
• Identify gaps in policies, procedures, controls, process documentation, and business continuity arrangements.
• Assess critical business processes for single points of failure, key-person dependencies, inadequate control coverage, and insufficient backup procedures.
• Partner with business owners to develop and monitor risk mitigation plans and strengthen the control environment.
• Support scenario analysis, operational risk assessments, and evaluations of potential business disruption and customer impact.
• Document assessment results, management responses, control deficiencies, and recommendations for risk mitigation.
• Support enterprise risk oversight of fintech partnerships, including risks associated with fintech products, services, technology platforms, operating models, and customer relationships.
• Assess whether changes to products, services, transaction flows, customer eligibility, delivery channels, geographic reach, or operational responsibilities warrant additional risk review or formal materiality assessment.
• Support the development and maintenance of fintech partnership materiality…