Summary

The Director, Enterprise Risk will provide leadership for the development, implementation, and administration of the Company's Enterprise Risk Management (ERM) program. Establishes and maintains a consistent framework for identifying, assessing, monitoring, managing, and reporting enterprise risks across the organization. Partners with executive leadership and business unit leaders to evaluate strategic, operational, financial, regulatory, compliance, insurance, credit, and emerging risks that may impact achievement of corporate objectives. Responsible for facilitating the enterprise risk assessment process, maintaining the Company's risk appetite framework, and providing risk reporting and analysis to senior leadership, including through facilitation of the Executive Risk Committee, and to the Board of Directors. Serves as a trusted advisor to management on risk-related matters and promotes a culture of risk awareness and risk-informed decision making throughout the organization.

Minimum Requirements

• Bachelor's degree in Finance, Business Administration, Accounting, Economics, Risk Management, Engineering, or related discipline required.
• Master's degree in Business Administration or related field preferred.
• Requires ten (10) years or more of progressively responsible experience in enterprise risk management, finance, audit, regulatory affairs, insurance, compliance, energy markets, corporate planning, or related disciplines, including significant experience evaluating strategic and operational risks within a complex organization, within a regulated energy utility preferred.
• Requires five (5) or more years of management experience with responsibility for leading teams, developing staff, managing budgets, and directing enterprise-wide initiatives.
• Demonstrated knowledge of enterprise risk management principles, risk assessment methodologies, governance frameworks, internal control concepts, insurance and risk transfer strategies, credit risk management, and regulatory environments.
• Strong analytical, communication, facilitation, negotiation, and presentation skills required.
• Ability to build effective working relationships across all levels of the organization and communicate complex risk issues to technical and non-technical audiences.

Major Accountabilities

1) Provides leadership for the development, implementation, and continuous improvement of the Company's Enterprise Risk Management framework, policies, standards, and processes.

2) Establishes and maintains a consistent enterprise methodology for identifying, assessing, measuring, monitoring, prioritizing, and reporting risks across the organization.

3) Leads the enterprise risk assessment process and facilitates evaluations of strategic, operational, financial, regulatory, compliance, insurance, cybersecurity, and reputational risks.

4) Maintains the enterprise risk inventory, risk register, and related documentation to ensure risks are appropriately assessed, assigned, monitored, and mitigated.

5) Develops and administers the Company's risk appetite framework, including key risk indicators, risk tolerance thresholds, escalation processes, and risk reporting requirements.

6) Monitors emerging risks, external developments, market conditions, regulatory changes, and industry trends that may impact Company strategy, operations, or financial performance.

7) Prepares and presents enterprise risk reports, assessments, and recommendations to executive leadership, internal risk governance committees, Board Committees, and the Board of Directors.

8) Monitors compliance with all applicable risk policies, risk tolerances, and governance requirements and communicates significant risk exposures, exceptions, and trends to leadership as appropriate.

9) Provides independent risk evaluation and consultation on strategic initiatives, major projects, significant capital investments, business development transactions, and other matters that may materially impact the Company's risk profile.

10) Oversees enterprise credit risk activities, including the establishment of credit policies, exposure monitoring, risk reporting, counterparty assessments, and approval processes as applicable.

11) Oversees insurance and claims and risk transfer strategies, including evaluation of insurance coverage, captive insurance utilization, retained risk levels, and other risk financing mechanisms.

12) Overall responsibility for compliance with the Energy Risk Management Guidelines and facilitation of the Energy Risk Oversight Group.

13) Collaborates with Internal Audit, Legal, Compliance, Finance, Operations, Security, Human Resources, and other business areas to promote a coordinated approach to enterprise risk management.

14) Serves as the primary resource and subject matter expert for enterprise, credit, and energy risk management practices and provides education, guidance, and consultation to leadership, employees, and governance bodies regarding risk management principles and emerging issues.

15) Facilitates enterprise risk governance committees, including the Executive Risk Committee, and working groups, including development of meeting agendas, materials, presentations, and documentation.

16) Establishes goals, objectives, budgets, staffing plans, and performance expectations and ensures efficient and effective execution of departmental responsibilities.

17) Provides leadership, coaching, development, and performance feedback to staff to ensure organizational objectives are achieved and employee capabilities are strengthened

Hybrid: Employees in hybrid roles work both in their home offices (virtually) and alongside their colleagues (in person).

In order for employees to build strong relationships and to promote meaningful in-person interactions, hybrid employees are expected to work about 40% of their time in-person at an APS or other (non-home office) location.

• Employees are expected to reside in Arizona (or New Mexico for Four Corners-based employees).
• Working from a home office requires adequate technology and an appropriate ergonomic set up.
• Role types are subject to change based on business need.