Chief Risk Officer (On-site)
About the role
The Chief Risk Officer (CRO) is a key member of the executive leadership team responsible for the overall management of risk across the credit union. This includes enterprise risk management, compliance, internal audit, vendor management, corporate insurance, business continuity management, records retention, and fraud risk management.
Responsibilities
Develop and implement a robust enterprise risk management (ERM) framework that identifies, assesses, mitigates, and monitors risks across the credit union.
Advise the CEO and board of directors on risk exposures and mitigation strategies, providing clear and actionable insights.
Collaborate with executive team members and department leaders to integrate risk management practices into day-to-day operations and strategic planning.
Oversee the internal audit function, ensuring it operates independently and effectively to assess the adequacy and effectiveness of the credit union’s internal controls.
Manage co-sourcing partners to execute against the audit plan and to ensure that control deficiencies are identified in a similar and thorough manner.
Develop and execute a risk-based internal audit plan that addresses key operational, financial, and compliance risks.
Report audit findings and recommendations to the CEO and board, ensuring timely resolution of identified issues.
Manage the third-party risk management program, ensuring that third-party relationships are adequately assessed for sufficient controls (especially information security), risks and aligned with the credit union’s strategic goals.
Oversee the records retention program, ensuring that all records are maintained, stored, and disposed of in compliance with legal and regulatory requirements.
Develop and implement policies and procedures for records management, ensuring the security and confidentiality of sensitive information.
Conduct regular reviews of the records retention program to ensure ongoing compliance and operational efficiency.
Lead the development and maintenance of the business continuity plan (BCP) to ensure the credit union’s ability to operate during and after a crisis or disruption.
Coordinate and lead regular testing and training exercises to ensure preparedness and continuous improvement of the BCP.
Oversee the corporate insurance program, ensuring adequate coverage for all operational, financial, and liability risks.
Evaluate and select insurance providers, negotiate policy terms, and manage claims processes.
Regularly review and update insurance coverage to reflect changes in the credit union’s risk profile and operations.
Own the notification process to insurance carriers and other key stakeholders for potential or actual claims.
Ensure compliance with all applicable federal, state, and local regulations, including those specific to credit unions.
Stay informed about changes in the regulatory environment and assess their impact on the credit union’s operations.
Collaborate with the compliance team to develop and implement policies and procedures that meet regulatory requirements.
Lead, mentor, and develop the risk management, internal audit, and vendor management teams, fostering a culture of integrity, accountability, and continuous improvement.
Set clear goals and performance expectations for direct reports, providing guidance and support to achieve them.
Ensure effective succession planning within the risk management and related functions.
Serve as a key advisor to the CEO and board of directors on all risk-related matters, providing regular updates on risk exposures, mitigation strategies, and internal audit findings.
Collaborate with other senior executives to align risk management practices with the credit union’s overall business objectives.
Present reports and recommendations to the board’s audit and risk committees, ensuring transparency and accountability.
Participate in strategic planning and decision-making processes, ensuring that risk considerations are integrated into the credit union’s long-term plans.
Lead or contribute to special projects and initiatives that involve risk management, internal audit, or compliance considerations.
Assess risks and provide solutions that align with the credit union’s strategic goals.
Qualifications
A bachelor's degree in business administration, accounting or finance is required.
A Master of Business Administration and Certified Internal Auditor is preferred.
Minimum of 15 years of progressively responsible management experience in a financial institution setting.
A strong background in risk management, including direct experience in developing, assessing, and performing enterprise risk assessments are required.
Must also be familiar with risk management concepts and leading practices such as the COSO framework.
Skills & Competencies
Extensive experience in a senior risk management role, preferably within a credit union, financial institution, or similarly regulated industry.
Proven track record of developing and implementing risk management and internal audit strategies.
Previous hands-on experience with regulatory compliance, third-party risk management, business continuity planning, and corporate insurance program management.
Excellent leadership skills with experience managing and developing high-performing teams.
Exceptional communication and interpersonal skills, with the ability to engage effectively with both internal and external stakeholders.
Willingness to “roll-sleeves” up to help the credit union achieve its broader goals.
Analytical mindset with the ability to leverage data and insights to inform risk management decisions.
Commitment to the credit union’s mission, values, and member-first approach.
Adaptability and the ability to thrive in a dynamic and fast-paced environment.
Benefits
We have a competitive compensation and benefits package, but the true reward of working for SF Fire Credit Union goes beyond what you’ll see on a pay-stub. We genuinely care our employees and we strive to invest in their professional and personal growth. We’re a relatively small organization at about 200 employees, so you can see the impact of your efforts and the value your contributions bring to our members and fellow employees.
401(k) and Employer Match
Health, Vision, Dental and Life Insurance
Annual Incentive/Bonus Program
Tuition Reimbursement Program
11 Paid Holidays + Competitive PTO package
Home & Consumer Loan Program (Discounted Rates)
Professional development and training programs
On-demand personal coaching resource
Wellness Program (Discounted Gym Membership)
Note: This job description is non-contractual, or an exhaustive list and it may be added to or changed to from time to time. Salary This compensation range takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. At SFFCU, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range for the San Francisco Market is an annual salary of $200,000 to $285,000.