Senior Director Enterprise Risk

Overview

Hudson Valley Credit Union is currently recruiting for a Senior Director Enterprise Risk. Primary Function:
Serve as the enterprise leader responsible for the design, administration, coordination, and continuous enhancement of the Enterprise Risk Management (ERM) Program. The role provides independent second-line oversight and effective challenge while partnering with executive management to ensure material risks are appropriately identified, assessed, monitored, escalated, and reported consistent with the credit union's strategic objectives, risk appetite, and regulatory expectations.

This position serves as steward of the enterprise risk universe-the organization's inventory of material risks-and is responsible for aggregating risk information, facilitating enterprise-wide risk assessments, promoting effective risk governance, and providing decision-useful reporting to executive management and the Board. The role reports to the Chief Risk Officer & General Counsel and serves as a trusted advisor to executive leadership, management committees, and the Board Risk Committee.

• Lead the ERM Program and ensure alignment with strategic objectives, risk appetite, governance practices, and regulatory expectations.
• Maintain and enhance the ERM framework, risk taxonomy, policies, standards, methodologies, and governance routines.
• Serve as steward of the enterprise risk universe by maintaining the inventory of material risks and ensuring significant business activities, products, services, technologies, strategic initiatives, and third-party relationships are appropriately represented within the ERM framework.
• Coordinate and facilitate enterprise-wide risk assessments and risk identification activities performed by business and risk owners, ensuring consistent methodology, aggregation, reporting, and oversight.
• Promote clear risk ownership, accountability, escalation, and governance practices across the first and second lines of defense.
• Facilitate management risk committee activities and support effective communication of enterprise risks to executive leadership and the Board.
• Develop and maintain audience-appropriate reporting that provides a concise, meaningful view of enterprise risk exposures, emerging risks, key trends, and risk appetite performance.
• Aggregate risk information from across the organization to provide an integrated view of the overall risk profile.
• Develop dashboards, key risk indicators (KRIs), trend analyses, and other reporting tools that support governance and strategic decision-making.
• Escalate material risk exposures, control concerns, risk appetite exceptions, and significant emerging risks through appropriate governance channels.
• Translate complex risk information into practical and actionable business insights.
• Coordinate the development and maintenance of enterprise risk appetite statements, thresholds, tolerances, and escalation protocols.
• Facilitate oversight of enterprise KRIs and other metrics used to monitor risk exposures, concentrations, control concerns, and emerging trends.
• Support governance processes for risk acceptance, risk mitigation, issue tracking, remediation oversight, and closure validation.
• Provide independent challenge regarding risk assessments, residual risk determinations, remediation plans, due dates, and risk acceptance decisions.
• Monitor the status of significant risk issues and ensure appropriate escalation and governance attention when necessary.
• Provide second-line oversight, governance, and challenge across key enterprise risk disciplines, including operational risk, third-party risk, business continuity, operational resilience, model risk, fraud risk, information security risk, and emerging risks.
• Assess the effectiveness of risk management practices and governance processes implemented by business and functional owners.
• Coordinate risk information across risk programs to identify themes, concentrations, interdependencies, and emerging concerns.
• Support continued maturation of risk and control self-assessments, risk inventories, issue management practices, and governance reporting.
• Partner with Compliance, Bank Secrecy Act/Anti-Money Laundering (BSA/AML), Legal, Information Security, Finance, Internal Audit, Operations, Lending, and Technology leadership to promote consistent risk management practices.
• Evaluate risks associated with new products, services, strategic initiatives, significant third-party relationships, business transformation efforts, and emerging technologies.
• Monitor emerging risks associated with artificial intelligence (AI), automation, advanced analytics, digital transformation, and other evolving technologies.
• Partner with business, technology, legal, compliance, and information security stakeholders to support appropriate AI governance, risk assessment, and responsible adoption.
• Ensure emerging technology risks are incorporated into enterprise risk assessments, reporting, and governance processes.
• Monitor industry developments and…