Senior Director, Internal Audit - Operational Risk

We need to produce HTML fragment with sections: About the role? The description includes description paragraphs. We need headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Use only sections that have real content. We need to parse the posting. First part: "Description The Senior Director, Internal Audit - Operational Risk is responsible for leading the enterprise-wide internal audit strategy and assurance program for operational risk management, governance, and organizational resilience. This role serves as a key member of Internal Audit leadership and a trusted advisor to executive management, providing independent assurance over the effectiveness of governance, risk management, and control frameworks across the organization. The Senior Director establishes audit coverage strategies, directs the execution of complex risk-based assurance activities, and provides thought leadership regarding emerging operational risks, regulatory expectations, and governance practices. This role is accountable for ensuring Internal Audit delivers meaningful insights that strengthen organizational resilience, improve risk management capabilities, and support strategic objectives. The Senior Director partners closely with executive leadership, Board and Board Committee members, regulators, and external auditors while providing strategic leadership across the Internal Audit function." That's a description. Could be "About the role". We'll put that in

About the role

then

with that text. Next: "Here’s what you can expect from the job and what you need to be successful: What You’ll Do Lead the enterprise Operational Risk Internal Audit function, establishing audit strategies, priorities, methodologies, and multi-year coverage plans. Develop and execute risk-based assurance strategies covering operational risk management, enterprise risk management, governance, and organizational resilience programs. Provide strategic oversight and direction for the planning, execution, reporting, and issue validation of complex audit and advisory engagements. Advise executive leadership and Board Committees on governance, operational risk, resilience, and emerging risk matters through independent assurance and risk insight. Direct audit coverage and independent assessments of: Enterprise Risk Management (ERM)Operational Risk ManagementThird-Party Risk Management (TPRM)Business Continuity & Disaster RecoveryOperational ResilienceModel Risk Management (MRM)Enterprise Issue ManagementGovernance and Risk CommitteesStrategic Change and Transformation ManagementIncident and Event ManagementEvaluate enterprise risk governance frameworks and provide independent challenge regarding organizational risk appetite, risk reporting, issue management, and operational effectiveness. Lead interactions with regulators, external auditors, and executive stakeholders regarding operational risk governance, audit results, remediation activities, and emerging risks. Provide independent oversight of significant business initiatives, strategic transformations, mergers, technology modernization efforts, and enterprise-wide risk programs. Drive innovation and continuous improvement within Internal Audit through advanced analytics, risk assessment methodologies, automation, and emerging audit practices. Develop and execute talent strategies, succession planning, leadership development, and organizational capability initiatives across the Operational Risk Audit organization." That's responsibilities. So

Responsibilities

then

• each bullet. Need to split sentences into list items. The text includes colon after "Direct audit coverage and independent assessments of:" then a list of items separated by no punctuation? Actually they are concatenated: "Enterprise Risk Management (ERM)Operational Risk ManagementThird-Party Risk Management (TPRM)Business Continuity & Disaster RecoveryOperational ResilienceModel Risk Management (MRM)Enterprise Issue ManagementGovernance and Risk CommitteesStrategic Change and Transformation ManagementIncident and EventManagement". We need to separate them. Probably each is a separate item. We'll split by capital letters? Could just list each as separate
• . We'll manually list them. Then after that: "Evaluate enterprise risk governance frameworks and provide independent challenge regarding organizational risk appetite, risk reporting, issue management, and operational effectiveness." Another bullet. "Lead interactions with regulators, external auditors, and executive stakeholders regarding operational risk governance, audit results, remediation activities, and emerging risks." "Provide independent oversight of significant business initiatives, strategic transformations, mergers, technology modernization efforts, and enterprise-wide risk programs." "Drive innovation and continuous improvement within Internal Audit through advanced analytics, risk assessment methodologies, automation, and emerging audit practices." "Develop and execute talent strategies, succession planning, leadership development, and organizational capability initiatives across the Operational Risk Audit organization." Now "Essential Skills Required Experience: 8+ yearsof internal audit standards, methodologies, and professional practices. 6+ years of experience leading a diverse team including hiring, coaching and performance management.Deep expertise in operational risk management frameworks, governance structures, and risk oversight practices.Demonstrated experience building and leading enterprise-wide audit programs and strategies.Strong understanding of financial services regulatory expectations, governance requirements, and emerging operational risks.Extensive experience evaluating enterprise risk management, operational resilience, third-party risk, business continuity, model risk, and issue management programs.Proven ability to influence executive leadership and provide effective independent challenge on complex risk and governance matters.Experience presenting to Boards, Audit Committees, Risk Committees, regulators, and executive leadership teams.Strong strategic thinking, organizational leadership, and change management capabilities.Exceptional communication, executive presence, relationship management, and stakeholder engagement skills.Demonstrated ability to lead through multiple layers of management and develop future leaders.Certifications: CIA, CRMA, CRISC, CISA, FRM, CRCM or PMP" That's qualifications/skills. Could split into Requirements and Qualifications? The instruction: Use headings for sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We need to decide what to put where. We have experience requirements, certifications, etc. Could put under Requirements (years of experience, leading team) and Qualifications (expertise, etc.) Or combine. We'll create Requirements for the numeric experience and leading team. Qualifications for expertise, understanding, etc. Skills for communication, leadership, etc. Certifications maybe under Qualifications or Skills. We'll put certifications under Qualifications. Now "Preferred Location: Hillsboro Corporate Office | Hillsboro OR 97124ORMarlborough Corporate Office | Marlborough, MAORChelmsford Corporate Office | Chelmsford, MA". This is location metadata; we can fold into a short

  maybe under About the role or separate? The instruction: do NOT put Job ID / requisition numbers as headings — fold minor metadata into a short

  or drop it. Location is minor metadata; we can include a short

  maybe after About the role. But we should not create a heading for it. We'll include a

  with locations. Next: "Target Compensation: $190,000 to $220,000base pay + Annual Bonus". That's Pay. So we need a Pay section with that info. Ensure we don't include filler like "not specified". It's specified. So

  Pay

  $190,000 to $220,000 base pay + Annual Bonus

  Benefits: later: "Who We Are What makes First Tech different? Click here to learn more! Every great journey begins with a bold idea—and ours is no different. First Tech and DCU were founded on the belief that financial solutions should put people first. That belief has fueled decades of innovation and service, rooted in the tech sector and expanding to support members from all walks of life. Employees Are Eligible For Traditional medical, dental, and vision coverage Generous 401(k) match Paid Time Off: You'll accrue up to 15 days in your first year. In addition, you'll receive 40 hours of sick time and 3 personal days, which refresh annually Paid federal holidays Special employee pricing on lending products such as mortgage, auto, and personal loans (eligibility subject to standard account requirements and underwriting criteria)". That's benefits. So

  Benefits

  • Traditional medical, dental, and vision coverage
  • Generous 401(k) match
  • Paid Time Off: accrue up to 15 days in first year, plus 40 hours sick time and 3 personal days annually
  • Paid federal holidays
  • Special employee pricing on lending products such as mortgage, auto, and personal loans (eligibility subject to standard account requirements and underwriting criteria)
  We should drop the "Who We Are" fluff before benefits? The instruction: remove boilerplate, duplicated lines, application instructions. The "Who We Are What makes First Tech different? Click here to learn more! Every great journey begins with a bold idea—and ours is no different. First Tech and DCU were founded on the belief that financial solutions should put people first. That belief has fueled decades of innovation and service, rooted in the tech sector and expanding to support members from all walks of life." That's fluff; we can drop it. Keep only the benefits list. Now Schedule: Not mentioned. So we omit Schedule section. Now we need to ensure we don't repeat job title as heading. Already not. Now produce HTML fragment. Let's craft.

  About the role

  The Senior Director, Internal Audit - Operational Risk is responsible for leading the enterprise-wide internal audit strategy and assurance program for operational risk management, governance, and organizational resilience. This role serves as a key member of Internal Audit leadership and a trusted advisor to executive management, providing independent assurance over the effectiveness of governance, risk management, and control frameworks across the organization. The Senior Director establishes audit coverage strategies, directs the execution of complex risk-based assurance activities, and provides thought leadership regarding emerging operational risks, regulatory expectations, and governance practices. This role is accountable for ensuring Internal Audit delivers meaningful insights that strengthen organizational resilience, improve risk management capabilities, and support strategic objectives. The Senior Director partners closely with executive leadership, Board and Board Committee members, regulators, and external auditors while providing strategic leadership across the Internal Audit function.

  Location paragraph:

  Preferred locations: Hillsboro Corporate Office (Hillsboro, OR 97124), Marlborough Corporate Office (Marlborough, MA), Chelmsford Corporate Office (Chelmsford, MA)

  Now Responsibilities. We need to list bullet items. Let's create list: - Lead the enterprise Operational Risk Internal Audit function, establishing audit strategies, priorities, methodologies, and multi-year coverage plans. - Develop and execute risk-based assurance strategies covering operational risk management, enterprise risk management, governance, and organizational resilience programs. - Provide strategic oversight and direction for the planning, execution, reporting, and issue validation of complex audit and advisory engagements. - Advise executive leadership and Board Committees on governance, operational risk, resilience, and emerging risk matters through independent assurance and risk insight. - Direct audit coverage and independent assessments of: - Enterprise Risk Management (ERM) - Operational Risk Management - Third-Party Risk Management (TPRM) - Business Continuity & Disaster Recovery - Operational Resilience - Model Risk Management (MRM) - Enterprise Issue Management - Governance and Risk Committees - Strategic Change and Transformation Management - Incident and Event Management - Evaluate enterprise risk governance frameworks and provide independent challenge regarding organizational risk appetite, risk reporting, issue management, and operational effectiveness. - Lead interactions with regulators, external auditors, and executive stakeholders regarding operational risk governance, audit results, remediation activities, and emerging risks. - Provide independent oversight of significant business initiatives, strategic transformations, mergers, technology modernization efforts, and enterprise-wide risk programs. - Drive innovation and continuous improvement within Internal Audit through advanced analytics, risk assessment methodologies, automation, and emerging audit practices. - Develop and execute talent strategies, succession planning, leadership development, and organizational capability initiatives across the Operational Risk Audit organization. Note: The sublist under Direct audit coverage could be nested
  . That's fine. Now Requirements.

  Requirements

  • 8+ years of internal audit standards, methodologies, and professional practices.
  • 6+ years of experience leading a diverse team including hiring, coaching and performance management.
  Qualifications.

  Qualifications

  • Deep expertise in operational risk management frameworks, governance structures, and risk oversight practices.
  • Demonstrated experience building and leading enterprise-wide audit programs and strategies.