Director, Enterprise Risk Management

Job Summary

The Director of Enterprise Risk Management (ERM) leads the execution and continuous improvement of the Bank’s ERM program. This role partners across the organization to proactively identify, assess, and manage risk while supporting strategic decision-making and Board-level oversight.

About the Role

This is a key leadership role responsible for advancing risk governance, strengthening risk culture, and enabling balanced, risk-informed growth.

Responsibilities

• Lead the design, execution, and continuous improvement of the ERM framework, policies, and methodologies
• Support the development, implementation, and monitoring of the Bank’s risk appetite framework
• Drive the ongoing maturation of enterprise risk capabilities, governance, and reporting
• Integrate risk culture considerations into ERM program design, measurement, and reporting
• Direct enterprise-wide risk assessments, including inherent risk, control effectiveness, and residual risk evaluation
• Maintain and enhance the enterprise risk inventory and taxonomy
• Develop, monitor, and report Key Risk Indicators (KRIs), dashboards, and scorecards
• Monitor emerging risks, regulatory changes, and industry trends impacting the Bank
• Ensure timely identification, escalation, and resolution of material risk issues
• Partner with business units to assess risks related to strategic initiatives, new products, technologies, and third-party relationships
• Lead ERM governance processes and coordinate risk-related committees
• Prepare and deliver risk reporting, analysis, and insights to executive leadership and Board committees
• Ensure risk reporting is accurate, consistent, timely, and decision-useful
• Maintain documentation supporting governance activities, decisions, and committee actions
• Serve as a visible champion of a strong, proactive risk culture that emphasizes accountability, transparency, and ownership at all levels of the organization
• Embed risk management into day-to-day business activities, reinforcing that risk ownership resides within the first line of defense
• Drive alignment between risk culture, organizational values, and strategic objectives
• Establish and monitor risk culture indicators (e.g., escalation timeliness, issue resolution, policy adherence, training completion)
• Design and deliver enterprise-wide risk education and awareness programs tailored to all organizational levels
• Conduct ongoing assessments of risk culture through surveys, feedback, and metrics; develop targeted action plans to address gaps
• Act as a trusted advisor to leadership, providing guidance on risk-informed decision-making and balanced risk-taking
• Reinforce tone-from-the-top alignment in partnership with the Chief Enterprise Risk Officer and executive leadership
• Partner closely with first and second line of defense functions to ensure coordinated risk management practices
• Oversee issue management, including root cause analysis, remediation tracking, and sustainable control improvements
• Evaluate audit findings, regulatory observations, and compliance matters for enterprise-wide impact
• Support development and execution of corrective action plans and control enhancements
• Advise on risks associated with growth initiatives, transformation efforts, new technologies, and operational changes
• Participate in major projects and change initiatives to ensure risks are appropriately considered and managed
• Contribute to enterprise resilience, business continuity, and operational risk preparedness
• Lead, coach, and develop ERM team members
• Foster a culture of collaboration, accountability, and continuous improvement
• Ensure ERM team members consistently model desired risk culture behaviors
• Manage resources and workload effectively to support organizational objectives

Requirements

• Bachelor’s degree in Finance, Business Administration, Risk Management, Accounting, Economics, Law, or related field required; Master’s degree preferred
• Minimum 10 years of experience in banking, financial services, risk management, audit, compliance, or a related field
• Minimum 5 years of progressive enterprise risk management experience
• Demonstrated experience leading enterprise risk assessments, governance, reporting, and risk-related support for executive leadership and Board-level committees
• Strong knowledge of enterprise risk management frameworks, banking regulations, and a broad range of risk disciplines, including operational, credit, market, liquidity, compliance, technology, cyber, and third-party risk
• Excellent analytical, critical thinking, problem-solving, project management, and organizational skills, with the ability to translate complex risk concepts into actionable business insights
• Prominent executive presence, sound judgment, and the ability to operate independently in a dynamic environment
• Exceptional verbal, written, and presentation skills, including executive and Board-level communication
• Advanced proficiency with Microsoft Office and risk reporting systems; experience with Power BI and Tableau highly preferred
• Minimum 6 years of people leadership experience required
• Professional certifications such as Certified Risk Manager (CRM), Certified Enterprise Risk Professional (CERP), Certified Internal Auditor (CIA), Certified Information Systems Auditor (CISA), or Project Management Professional (PMP) preferred

Physical Requirements

• Ability to remain in a stationary position for extended periods (e.g., sitting or standing)
• Frequent use of a computer and other office equipment
• Ability to communicate effectively with colleagues and stakeholders
• Occasionally move or lift items up to 10 pounds