AVP Enterprise Risk Management Specialist

Summary:

The Enterprise Risk Management Specialist supports the development, implementation, and ongoing maintenance of the bank's Enterprise Risk Management (ERM) framework, with a focus on identifying, assessing, monitoring, and reporting risks across the bank's operations, business lines, and fintech partnerships. The position works collaboratively with business units, Compliance, Information Technology, Finance, and Third-Party Risk Management (TPRM) to promote a consistent, risk-based approach to managing enterprise-wide exposures.

The Enterprise Risk Specialist assists with enterprise risk assessments, internal control evaluations, key risk indicator monitoring, issue remediation, and management reporting. The role also supports oversight of fintech partnerships by evaluating changes to products, services, technology, business operations, regulatory obligations, customer impacts, and third-party relationships that may affect the bank's risk profile. This position operates within the bank's second-line risk management structure, providing independent oversight, constructive challenge, and guidance to business units and fintech stakeholders. It helps ensure that risks are appropriately identified, documented, escalated, and managed within the bank's established risk appetite and applicable regulatory expectations.

Job Functions:

• Support the development, implementation, and maintenance of the bank's ERM framework, policies, procedures, and risk assessment methodologies.
• Identify, assess, monitor, and report enterprise-wide risks, including operational, compliance, strategic, financial, technology, reputational, cybersecurity, and third-party risks.
• Maintain and enhance the enterprise risk inventory, including risk descriptions, ownership, inherent risk ratings, control assessments, residual risk ratings, and mitigation strategies.
• Coordinate enterprise risk assessments with business units to identify emerging risks, control weaknesses, and opportunities for risk reduction.
• Evaluate new products, services, business initiatives, process changes, and strategic partnerships for potential enterprise risk implications.
• Support the development and monitoring of risk appetite measures, risk tolerances, and key risk indicators.
• Identify trends and concentrations of risk that could affect the bank's financial condition, operational stability, regulatory standing, or customer relationships.
• Facilitate and support Risk and Control Self-Assessments (RCSAs) across business lines and support functions.
• Evaluate inherent risk, control design and effectiveness, and residual risk in accordance with established bank methodologies.
• Identify gaps in policies, procedures, controls, process documentation, and business continuity arrangements.
• Assess critical business processes for single points of failure, key-person dependencies, inadequate control coverage, and insufficient backup procedures.
• Partner with business owners to develop and monitor risk mitigation plans and strengthen the control environment.
• Support scenario analysis, operational risk assessments, and evaluations of potential business disruption and customer impact.
• Document assessment results, management responses, control deficiencies, and recommendations for risk mitigation.
• Support enterprise risk oversight of fintech partnerships, including risks associated with fintech products, services, technology platforms, operating models, and customer relationships.
• Assess whether changes to products, services, transaction flows, customer eligibility, delivery channels, geographic reach, or operational responsibilities warrant additional risk review or formal materiality assessment.
• Support the development and maintenance of fintech partnership materiality questionnaires, risk assessment tools, scoring methodologies, and escalation criteria.
• Coordinate with Compliance, Legal, Operations, Information Technology, Information Security, and TPRM to incorporate relevant risk considerations into partnership assessments.
• Support ongoing risk reviews of fintech relationships to identify changes in risk exposure, control effectiveness, business performance, and regulatory expectations.
• Escalate material changes, emerging risks, and significant control concerns through established governance and risk acceptance processes.
• Support the documentation, tracking, and remediation of regulatory, compliance, and control-related issues.
• Maintain assessment records and supporting documentation for management review, internal audit, and regulatory examination purposes.
• Develop, maintain, and monitor Key Risk Indicators (KRIs) and other risk metrics to identify emerging trends and potential risk exposure.
• Prepare risk dashboards, heat maps, trend analyses, and management reporting for senior leadership and applicable risk committees.
• Communicate material risk exposures, breaches of established thresholds, and significant adverse trends to appropriate stakeholders.
• Ensure risk reporting is accurate, timely, consistent, and aligned with the bank's risk taxonomy and reporting standards.
• Support the identification, documentation, risk rating, assignment, and tracking of enterprise risk issues.
• Monitor corrective action plans arising from risk assessments, internal audits, regulatory examinations, operational incidents, control testing, and fintech partnership reviews.
• Evaluate remediation plans to determine whether proposed actions address root causes and reduce identified risk exposure.
• Challenge incomplete or insufficient remediation plans and escalate overdue or ineffective corrective actions.
• Coordinate with business owners and control functions to validate closure evidence and support appropriate issue resolution.
• Maintain accurate documentation of enterprise risk assessments, risk decisions, materiality reviews, control evaluations, and mitigation activities.
• Support the development and enhancement of risk management policies, procedures, standards, templates, and reporting tools.
• Provide risk guidance and constructive challenge to business units and fintech stakeholders while maintaining appropriate second-line independence.
• Promote consistent application of the bank's risk assessment methodology and escalation standards.
• Identify opportunities to improve risk management processes, automate reporting, strengthen controls, and enhance risk visibility.
• Support regulatory examinations, internal audits, independent reviews, and management inquiries related to enterprise risk and fintech partnerships.
• Monitor regulatory developments and supervisory expectations that may affect the bank's enterprise risk profile or fintech partnership model.
• Perform other risk management responsibilities as assigned.
• Must complete all required training, including Bank Secrecy Act/Anti-money Laundering training, suitable to their position within the bank.

Education/Experience:

• Bachelor's degree in business administration, finance, risk management, information technology, accounting, or a related field preferred. Additional relevant work experience may be substituted on a year-for-year basis for the formal education requirement.
• Minimum of 3 years of relevant experience in enterprise or operational risk, compliance, audit, information security, banking operations, or a related risk or control function, preferably within financial services or another highly regulated industry.
• Experience with fintech, banking-as-a-service, embedded finance, payments, or other technology-enabled financial services relationships preferred.

Skills and Competencies:

• Ability to assess whether risks are adequately understood and controlled while keeping responsibility for day-to-day risk ownership with the first line of business.
• Strong analytical and problem-solving skills with the ability to assess risk across multiple domains, identify relevant control considerations, distinguish material issues from routine exceptions, and document well-supported conclusions.
• Strong written and verbal communication skills with the ability to clearly communicate risk observations, information requests, assessment conclusions, and escalation items to business and control-function stakeholders.
• Strong organizational and documentation skills, with the ability to manage multiple assessments, reviews, and follow-up activities while maintaining accuracy and attention to detail.
• Ability to work independently within established frameworks and procedures, exercise sound judgment, and seek guidance or escalate matters when risk significance, complexity, or uncertainty warrants additional review.
• Professional certification related to risk management, audit, or compliance is preferred but not required.
• A commitment to continuous learning and professional development in risk management, fintech risk, and risk and control assessment practices.
• Must be able to be bonded.

Physical Requirements:

• Prolonged periods sitting at a desk and working on a computer.
• Must be able to lift up to 25 pounds at times.

Work Arrangement:

• This position is remote.
• Occasional travel may be required for in-person training or meetings.

Other Duties:

Please note that this job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities required of the employee for this job. Duties, obligations, and activities may change at any time, with or without notice.

Compensation is based on geographic location and individual pay decisions will vary based on demonstrated job related skills, knowledge, experience, education, certifications, etc.

Benefits:

• 401(k)
• 401(k) matching
• Health insurance
• Dental insurance
• Life insurance
• Paid time off
• Vision insurance
• Short- and Long-term disability
• Company-paid holidays

For Advertising Purposes Only: #LI-DNI