Director, Enterprise Risk Management

Empowering members to achieve financial success.

Lead a sophisticated, proactive, and balanced risk management strategy that prioritizes member protection while enabling informed business decisions and competitive positioning.

The Director of Enterprise Risk Management (ERM) manages the Credit Union's ERM program and supports the consistent identification, assessment, monitoring, mitigation, and reporting of enterprise-wide risks. This role coordinates risk assessments, maintains risk dashboards, supports compliance and fraud risk oversight, and helps ensure policies, procedures, internal controls, and risk practices remain aligned with regulatory expectations and the Credit Union's risk appetite.

The Director works closely with senior leaders, department managers, internal audit, compliance, information security, operations, lending, finance, and vendor management partners to promote practical risk awareness and timely escalation of emerging issues. This role provides clear analysis, recommendations, and reporting to senior management while ensuring day-to-day risk management activities are organized, documented, and continuously improved.

Must meet our service standards as evaluated by internal and external members:

• I will greet you with a prompt, friendly welcome.
• I will treat you with courtesy and respect.
• I will offer you my undivided attention.
• I will take ownership of situations and follow through.
• I will provide accurate information and helpful solutions.
• I will do all I can to improve your financial life.
• I will thank you for your business.

• Zero material regulatory findings.
• Minimized losses and member complaints related to fraud events and mitigation processes.
• Effective follow-up and documentation of risk mitigation plans, audit findings, regulatory concerns, and management action items.
• Clear, practical communication of risk trends, emerging issues, and recommended actions to management.

• Enterprise Risk Management Program: Manage the ERM calendar, risk assessment process, key risk indicators, and related documentation to support consistent enterprise-wide risk monitoring.
• Risk Reporting and Escalation: Prepare concise, actionable reporting for senior management, including risk trends, open issues, mitigation progress, and matters requiring escalation.
• Compliance and Control Coordination: Partner with Compliance, Internal Audit, Information Security, Operations, Lending, Finance, and other departments to monitor regulatory issues, control gaps, audit findings, and corrective action plans.
• Fraud Risk Support: Coordinate with operational teams to monitor fraud trends, review mitigation processes, support member protection practices, and recommend process improvements.
• Third-Party and Vendor Risk Support: Support vendor management and third-party risk oversight by reviewing risk information, coordinating due diligence activities, tracking matters requiring follow-up, and escalating material concerns.
• Policy and Procedure Maintenance: Assist in developing, reviewing, and maintaining risk management policies, procedures, standards, and control documentation.
• Risk Culture and Training: Provide guidance, tools, and training to help departments understand risk responsibilities and embed practical risk-aware practices into daily operations.
• Team and Project Leadership: Supervise, coach, and develop assigned risk and compliance staff, if applicable, and lead cross-functional risk projects with clear timelines, accountability, and documentation.

• Monitor internal and external risk indicators, including operational, compliance, fraud, business continuity, cybersecurity, vendor, and strategic risk trends.
• Coordinate timely responses to significant incidents or control events and document root cause, remediation, lessons learned, and reporting needs.
• Maintain awareness of relevant industry, credit union, regulatory, and technology developments, including emerging risks related to cybersecurity, AI, fraud, and payments.
• Collaborate with department leaders during planning, budgeting, product changes, vendor reviews, and operational changes to identify and document risk considerations.
• Perform other risk management duties and special projects as assigned.

• Strong working knowledge of enterprise risk management, compliance, internal controls, operational risk, fraud risk, and vendor risk within a regulated financial institution.
• Ability to…