Senior Director, Internal Audit - Operational Risk
for section headings. Use - for any list of duties/requirements/benefits. Use
for prose.
We need to preserve all substantive information: responsibilities list, required experience, skills, certifications, location maybe? Location is not in allowed headings but could be folded into a short
under About the role or maybe under Requirements? Probably include location in About the role as a short p.
We must not include Pay/Schedule/Benefits unless posting actually states them. Pay is stated. Benefits are stated. Schedule not stated, so omit.
We must not include headings with filler like "commensurate with experience". Not present.
Let's extract content.
About the role: combine initial description + Who We Are? Might be better to have About the role include the role description and company info.
Responsibilities: list from "What You’ll Do". Items:
- Lead the enterprise Operational Risk Internal Audit function, establishing audit strategies, priorities, methodologies, and multi-year coverage plans.
- Develop and execute risk-based assurance strategies covering operational risk management, enterprise risk management, governance, and organizational resilience programs.
- Provide strategic oversight and direction for the planning, execution, reporting, and issue validation of complex audit and advisory engagements.
- Advise executive leadership and Board Committees on governance, operational risk, resilience, and emerging risk matters through independent assurance and risk insight.
- Direct audit coverage and independent assessments of: (list subitems)
- Enterprise Risk Management (ERM)
- Operational Risk Management
- Third-Party Risk Management (TPRM)
- Business Continuity & Disaster Recovery
- Operational Resilience
- Model Risk Management (MRM)
- Enterprise Issue Management
- Governance and Risk Committees
- Strategic Change and Transformation Management
- Incident and Event Management
- Evaluate enterprise risk governance frameworks and provide independent challenge regarding organizational risk appetite, risk reporting, issue management, and operational effectiveness.
- Lead interactions with regulators, external auditors, and executive stakeholders regarding operational risk governance, audit results, remediation activities, and emerging risks.
- Provide independent oversight of significant business initiatives, strategic transformations, mergers, technology modernization efforts, and enterprise-wide risk programs.
- Drive innovation and continuous improvement within Internal Audit through advanced analytics, risk assessment methodologies, automation, and emerging audit practices.
- Develop and execute talent strategies, succession planning, leadership development, and organizational capability initiatives across the Operational Risk Audit organization.
We need to format as
- . For the sublist under "Direct audit coverage and independent assessments of:" we could either keep as part of the li with a nested ul? The instruction: use
- for any list of duties/requirements/benefits. It doesn't forbid nested lists. We'll keep simple: each bullet as li; for that one we can include the colon and then list subitems maybe as a comma-separated? Better to keep as li with sub-ul.
We'll produce:
- Direct audit coverage and independent assessments of:
- Enterprise Risk Management (ERM)
- Operational Risk Management
- Third-Party Risk Management (TPRM)
- Business Continuity & Disaster Recovery
- Operational Resilience
- Model Risk Management (MRM)
- Enterprise Issue Management
- Governance and Risk Committees
- Strategic Change and Transformation Management
- Incident and Event Management
Now Requirements/Qualifications/Skills: The posting has "Essential Skills Required Experience: ..." includes required experience, deep expertise, etc. Also "Certifications: CIA, CRMA, CRISC, CISA, FRM, CRCM or PMP". Also "Preferred Location: ..." maybe not needed but could be included under Requirements as a short p.
We need to decide which headings to use: Requirements, Qualifications, Skills. We have content that overlaps. We could put all under Requirements (or Skills). But we need to avoid thin sections. Perhaps combine into one section "Requirements" that includes experience, expertise, certifications, location. Or we could split: Requirements (experience), Qualifications (certifications), Skills (skills). But we must ensure each heading has real specific content.
Let's extract:
Required Experience:
- 8+ years of internal audit standards, methodologies, and professional practices.
- 6+ years of experience leading a diverse team including hiring, coaching and performance management.
- Deep expertise in operational risk management frameworks, governance structures, and risk oversight practices.
- Demonstrated experience building and leading enterprise-wide audit programs and strategies.
- Strong understanding of financial services regulatory expectations, governance requirements, and emerging operational risks.
- Extensive experience evaluating enterprise risk management, operational resilience, third-party risk, business continuity, model risk, and issue management programs.
- Proven ability to influence executive leadership and provide effective independent challenge on complex risk and governance matters.
- Experience presenting to Boards, Audit Committees, Risk Committees, regulators, and executive leadership teams.
- Strong strategic thinking, organizational leadership, and change management capabilities.
- Exceptional communication, executive presence, relationship management, and stakeholder engagement skills.
- Demonstrated ability to lead through multiple layers of management and develop future leaders.
Certifications: CIA, CRMA, CRISC, CISA, FRM, CRCM or PMP
Preferred Location: Hillsboro Corporate Office | Hillsboro OR 97124 OR Marlborough Corporate Office | Marlborough, MA OR Chelmsford Corporate Office | Chelmsford, MA
We could put location under Requirements as a short p.
Now Benefits: list under "Employees Are Eligible For": Traditional medical, dental, and vision coverage; Generous 401(k) match; Paid Time Off: You'll accrue up to 15 days in your first year. In addition, you'll receive 40 hours of sick time and 3 personal days, which refresh annually; Paid federal holidays; Special employee pricing on lending products such as mortgage, auto, and personal loans (eligibility subject to standard account requirements and underwriting criteria).
We'll make a - for each.
Pay: "Target Compensation: $190,000 to $220,000 base pay + Annual Bonus". We'll put in a
.
Now About the role: combine initial description and Who We Are.
Initial description: "The Senior Director, Internal Audit - Operational Risk is responsible for leading the enterprise-wide internal audit strategy and assurance program for operational risk management, governance, and organizational resilience. This role serves as a key member of Internal Audit leadership and a trusted advisor to executive management, providing independent assurance over the effectiveness of governance, risk management, and control frameworks across the organization. The Senior Director establishes audit coverage strategies, directs the execution of complex risk-based assurance activities, and provides thought leadership regarding emerging operational risks, regulatory expectations, and governance practices. This role is accountable for ensuring Internal Audit delivers meaningful insights that strengthen organizational resilience, improve risk management capabilities, and support strategic objectives. The Senior Director partners closely with executive leadership, Board and Board Committee members, regulators, and external auditors while providing strategic leadership across the Internal Audit function."
Who We Are: "What makes First Tech different? Click here to learn more! Every great journey begins with a bold idea—and ours is no different. First Tech and DCU were founded on the belief that financial solutions should put people first. That belief has fueled decades of innovation and service, rooted in the tech sector and expanding to support members from all walks of life."
We could keep that as prose.
Now we must not include "Click here to learn more!" maybe it's a link; but it's part of the text. We'll keep as is.
Now produce HTML fragment:
About the role
...
Responsibilities
...
Requirements
... maybe combine experience and certifications and location as
or
? The instruction: use - for any list of duties/requirements/benefits. So for requirements list we should use
- . We'll list each requirement as li. Certifications could be a li as well. Location could be a li.
Thus:
Requirements
- 8+ years of internal audit standards, methodologies, and professional practices.
- 6+ years of experience leading a diverse team including hiring, coaching and performance management.
- Deep expertise in operational risk management frameworks, governance structures, and risk oversight practices.
- Demonstrated experience building and leading enterprise-wide audit programs and strategies.
- Strong understanding of financial services regulatory expectations, governance requirements, and emerging operational risks.
- Extensive experience evaluating enterprise risk management, operational resilience, third-party risk, business continuity, model risk, and issue management programs.
- Proven ability to influence executive leadership and provide effective independent challenge on complex risk and governance matters.
- Experience presenting to Boards, Audit Committees, Risk Committees, regulators, and executive leadership teams.
- Strong strategic thinking, organizational leadership, and change management capabilities.
- Exceptional communication, executive presence, relationship management, and stakeholder engagement skills.
- Demonstrated ability to lead through multiple layers of management and develop future leaders.
- Certifications: CIA, CRMA, CRISC, CISA, FRM, CRCM or PMP
- Preferred location: Hillsboro Corporate Office (Hillsboro, OR 97124), Marlborough Corporate Office (Marlborough, MA), or Chelmsford Corporate Office (Chelmsford, MA)
Now Benefits:
Benefits
- Traditional medical, dental, and vision coverage
- Generous 401(k) match
- Paid Time Off: accrue up to 15 days in first year; plus 40 hours sick time and 3 personal days, refreshed annually
- Paid federal holidays
- Special employee pricing on lending products such as mortgage, auto, and personal loans (eligibility subject to standard account requirements and underwriting criteria)
Pay:
Pay
Target Compensation: $
for prose. We need to preserve all substantive information: responsibilities list, required experience, skills, certifications, location maybe? Location is not in allowed headings but could be folded into a short
under About the role or maybe under Requirements? Probably include location in About the role as a short p. We must not include Pay/Schedule/Benefits unless posting actually states them. Pay is stated. Benefits are stated. Schedule not stated, so omit. We must not include headings with filler like "commensurate with experience". Not present. Let's extract content. About the role: combine initial description + Who We Are? Might be better to have About the role include the role description and company info. Responsibilities: list from "What You’ll Do". Items: - Lead the enterprise Operational Risk Internal Audit function, establishing audit strategies, priorities, methodologies, and multi-year coverage plans. - Develop and execute risk-based assurance strategies covering operational risk management, enterprise risk management, governance, and organizational resilience programs. - Provide strategic oversight and direction for the planning, execution, reporting, and issue validation of complex audit and advisory engagements. - Advise executive leadership and Board Committees on governance, operational risk, resilience, and emerging risk matters through independent assurance and risk insight. - Direct audit coverage and independent assessments of: (list subitems) - Enterprise Risk Management (ERM) - Operational Risk Management - Third-Party Risk Management (TPRM) - Business Continuity & Disaster Recovery - Operational Resilience - Model Risk Management (MRM) - Enterprise Issue Management - Governance and Risk Committees - Strategic Change and Transformation Management - Incident and Event Management - Evaluate enterprise risk governance frameworks and provide independent challenge regarding organizational risk appetite, risk reporting, issue management, and operational effectiveness. - Lead interactions with regulators, external auditors, and executive stakeholders regarding operational risk governance, audit results, remediation activities, and emerging risks. - Provide independent oversight of significant business initiatives, strategic transformations, mergers, technology modernization efforts, and enterprise-wide risk programs. - Drive innovation and continuous improvement within Internal Audit through advanced analytics, risk assessment methodologies, automation, and emerging audit practices. - Develop and execute talent strategies, succession planning, leadership development, and organizational capability initiatives across the Operational Risk Audit organization. We need to format as
- . For the sublist under "Direct audit coverage and independent assessments of:" we could either keep as part of the li with a nested ul? The instruction: use
- for any list of duties/requirements/benefits. It doesn't forbid nested lists. We'll keep simple: each bullet as li; for that one we can include the colon and then list subitems maybe as a comma-separated? Better to keep as li with sub-ul. We'll produce:
- Direct audit coverage and independent assessments of:
- Enterprise Risk Management (ERM)
- Operational Risk Management
- Third-Party Risk Management (TPRM)
- Business Continuity & Disaster Recovery
- Operational Resilience
- Model Risk Management (MRM)
- Enterprise Issue Management
- Governance and Risk Committees
- Strategic Change and Transformation Management
- Incident and Event Management
Now Requirements/Qualifications/Skills: The posting has "Essential Skills Required Experience: ..." includes required experience, deep expertise, etc. Also "Certifications: CIA, CRMA, CRISC, CISA, FRM, CRCM or PMP". Also "Preferred Location: ..." maybe not needed but could be included under Requirements as a short p.
We need to decide which headings to use: Requirements, Qualifications, Skills. We have content that overlaps. We could put all under Requirements (or Skills). But we need to avoid thin sections. Perhaps combine into one section "Requirements" that includes experience, expertise, certifications, location. Or we could split: Requirements (experience), Qualifications (certifications), Skills (skills). But we must ensure each heading has real specific content.
Let's extract:
Required Experience:
- 8+ years of internal audit standards, methodologies, and professional practices.
- 6+ years of experience leading a diverse team including hiring, coaching and performance management.
- Deep expertise in operational risk management frameworks, governance structures, and risk oversight practices.
- Demonstrated experience building and leading enterprise-wide audit programs and strategies.
- Strong understanding of financial services regulatory expectations, governance requirements, and emerging operational risks.
- Extensive experience evaluating enterprise risk management, operational resilience, third-party risk, business continuity, model risk, and issue management programs.
- Proven ability to influence executive leadership and provide effective independent challenge on complex risk and governance matters.
- Experience presenting to Boards, Audit Committees, Risk Committees, regulators, and executive leadership teams.
- Strong strategic thinking, organizational leadership, and change management capabilities.
- Exceptional communication, executive presence, relationship management, and stakeholder engagement skills.
- Demonstrated ability to lead through multiple layers of management and develop future leaders.
Certifications: CIA, CRMA, CRISC, CISA, FRM, CRCM or PMP
Preferred Location: Hillsboro Corporate Office | Hillsboro OR 97124 OR Marlborough Corporate Office | Marlborough, MA OR Chelmsford Corporate Office | Chelmsford, MA
We could put location under Requirements as a short p.
Now Benefits: list under "Employees Are Eligible For": Traditional medical, dental, and vision coverage; Generous 401(k) match; Paid Time Off: You'll accrue up to 15 days in your first year. In addition, you'll receive 40 hours of sick time and 3 personal days, which refresh annually; Paid federal holidays; Special employee pricing on lending products such as mortgage, auto, and personal loans (eligibility subject to standard account requirements and underwriting criteria).
We'll make a - for each.
Pay: "Target Compensation: $190,000 to $220,000 base pay + Annual Bonus". We'll put in a
. Now About the role: combine initial description and Who We Are. Initial description: "The Senior Director, Internal Audit - Operational Risk is responsible for leading the enterprise-wide internal audit strategy and assurance program for operational risk management, governance, and organizational resilience. This role serves as a key member of Internal Audit leadership and a trusted advisor to executive management, providing independent assurance over the effectiveness of governance, risk management, and control frameworks across the organization. The Senior Director establishes audit coverage strategies, directs the execution of complex risk-based assurance activities, and provides thought leadership regarding emerging operational risks, regulatory expectations, and governance practices. This role is accountable for ensuring Internal Audit delivers meaningful insights that strengthen organizational resilience, improve risk management capabilities, and support strategic objectives. The Senior Director partners closely with executive leadership, Board and Board Committee members, regulators, and external auditors while providing strategic leadership across the Internal Audit function." Who We Are: "What makes First Tech different? Click here to learn more! Every great journey begins with a bold idea—and ours is no different. First Tech and DCU were founded on the belief that financial solutions should put people first. That belief has fueled decades of innovation and service, rooted in the tech sector and expanding to support members from all walks of life." We could keep that as prose. Now we must not include "Click here to learn more!" maybe it's a link; but it's part of the text. We'll keep as is. Now produce HTML fragment:
About the role
...
Responsibilities
- ...
Requirements
... maybe combine experience and certifications and location as
or
- ? The instruction: use
- for any list of duties/requirements/benefits. So for requirements list we should use
- . We'll list each requirement as li. Certifications could be a li as well. Location could be a li.
Thus:
Requirements
- 8+ years of internal audit standards, methodologies, and professional practices.
- 6+ years of experience leading a diverse team including hiring, coaching and performance management.
- Deep expertise in operational risk management frameworks, governance structures, and risk oversight practices.
- Demonstrated experience building and leading enterprise-wide audit programs and strategies.
- Strong understanding of financial services regulatory expectations, governance requirements, and emerging operational risks.
- Extensive experience evaluating enterprise risk management, operational resilience, third-party risk, business continuity, model risk, and issue management programs.
- Proven ability to influence executive leadership and provide effective independent challenge on complex risk and governance matters.
- Experience presenting to Boards, Audit Committees, Risk Committees, regulators, and executive leadership teams.
- Strong strategic thinking, organizational leadership, and change management capabilities.
- Exceptional communication, executive presence, relationship management, and stakeholder engagement skills.
- Demonstrated ability to lead through multiple layers of management and develop future leaders.
- Certifications: CIA, CRMA, CRISC, CISA, FRM, CRCM or PMP
- Preferred location: Hillsboro Corporate Office (Hillsboro, OR 97124), Marlborough Corporate Office (Marlborough, MA), or Chelmsford Corporate Office (Chelmsford, MA)
Benefits
- Traditional medical, dental, and vision coverage
- Generous 401(k) match
- Paid Time Off: accrue up to 15 days in first year; plus 40 hours sick time and 3 personal days, refreshed annually
- Paid federal holidays
- Special employee pricing on lending products such as mortgage, auto, and personal loans (eligibility subject to standard account requirements and underwriting criteria)
Pay
Target Compensation: $
- . We'll list each requirement as li. Certifications could be a li as well. Location could be a li.
Thus:
- for any list of duties/requirements/benefits. So for requirements list we should use