Chief Risk Officer (CRO)

Role:A Chief Risk Officer (CRO) works to achieve the Credit Union's mission and member promise statement. The use of 'Chief' in this position title denotes functional/departmental leadership and is not intended to indicate membership in the Credit Union's top executive leadership tier. This position oversees all aspects of an organization's risk management functions. Risk management functions include regulatory compliance, business continuity, disaster recovery, fraud risk, vendor due diligence, and physical safety. The CRO is responsible for developing the organization's risk and compliance strategies. Also accountable to identify processes to mitigate the risk of asset and physical loss across the enterprise.Essential Functions & Responsibilities:Risk Management:Develop and manage risk policies, processes, and reporting across the Credit Union. Work with leaders to align risk efforts with business goals. Identify emerging risks, recommend action, and report key risks and mitigation plans to leadership and the board. Build a risk-aware culture and provide risk management training.Compliance and Regulatory Affairs:Maintain a compliance program that meets federal, state, and local requirements. Monitor regulatory changes, assess impact, and report key issues to leadership and the board. Lead policy updates, compliance risk assessments, and testing. Serve as liaison to Internal Audit and Supervisory Committee for policies, programs, and risk items, as well as coordinate compliance and risk management support for internal and external audits and examinations.Fraud Risk Management:Oversee fraud prevention, detection, investigation, recovery, reporting, and loss mitigation. Coordinate fraud training and work with law enforcement, regulators, insurers, and industry partners when needed.Vendor Risk Management:Create and support vendor due diligence strategies that help assess third-party controls, risks, and alignment with Alpena Alcona Area Credit Union's goals. Assess compliance and security risks related to key vendors, reviewing due diligence records and risk assessments, monitoring vendor performance and compliance, and ensure contracts include appropriate risk mitigation provisions.Business Continuity and Operational Resilience:Conduct business impact analyses and risk assessments. Report on operational resilience readiness to executive management and the board. Support the testing and validation of continuity plans, ensuring preparedness for operational disruptions and cyber incidents.Records Retention:Oversee records retention, storage, security, and disposal in line with legal and regulatory requirements. Maintain records policies and review the program regularly.Corporate Insurance:Oversee the Alpena Alcona Area Credit Union’s insurance program and ensure adequate coverage. Review insurance and bond coverage annually, recommend limits, and report coverage gaps. Coordinate claims and loss recovery.Team Leadership and Development:Lead and develop risk, compliance, and fraud teams. Set goals, track performance, and support succession planning. Support executive leadership in balancing growth, innovation, and risk management.Strategic Risk Leadership:Include risk considerations in strategic planning and decision-making. Review risks related to new initiatives, products, partnerships, and digital efforts. Recommend solutions that support innovation and align with Credit Union goals.Security & Internal Controls:Serve as the Credit Union’s Security Officer and maintain policies that protect employees, members, and physical assets. Work with the Credit Union’s Information Security Officer to monitor technology and cybersecurity programs, controls, compliance, risks, and incidents. Strengthen internal controls, identify gaps, and recommend fixes.Performs other duties as assigned.Performance Measurements:1.Ensures enterprise risk assessment completion and effectiveness.2.Successful management of audit findings and remediation progress.3.Reduction of operation loss trends.4.Active participation in the development and execution of AAACU's strategic plan.5.Fostering a culture where risk awareness supports innovation rather than inhibits it.6.Identification of trends before they become significant issues.7.Successful development of enterprise resilience strategies to ensure AAACU can continue serving members during disruptive events.Knowledge and Skills:Experience:Eight to ten years of similar or related experience.Education:(1) A bachelor's degree, or (2) achievement of formal certifications recognized in the industry as equivalent to a bachelor's degree (e.g., information technology certifications in lieu of a degree).Interpersonal Skills:Work frequently involves exercising advanced conflict resolution, giving material presentations, and resolving issues impacting multiple departments or divisions. Role also requires the ability to motivate or influence others as a material part of the role, with a significant level of diplomacy and trust. Obtaining cooperation (internally and/or externally) is an important part of the role and a high level of interpersonal skills is critical to the success of this position.