About the RoleThe Director of Operational Risk leads the bank's enterprise non-technology operational risk program. The role provides independent oversight and effective challenge of first-line risk management. It works closely with the lines of business, technology, and operations to keep operational, data, payment, and process execution risks within the Board-approved risk appetite, consistent with OCC Heightened Standards (12 CFR Part 30, Appendix D) and interagency guidance.
Happen Bank has a foundation in place for operational risk; this role will be responsible for its next stage of growth and maturity. The role's first priorities will be building and operationalizing programs for process and execution risk, payment risk and data risk - and then extending oversight across Deposits, Personal Loans and other products (over time). The role's end goal is to deepen the existing capabilities and provide the Bank a stronger, independent view of operational risk and to work with business leaders to better understand and manage their operational risks.
What You'll Do- Lead and expand the second line operational risk program, building on the existing framework and policies with a multi-year roadmap
- Mature the operational risk taxonomy, risk appetite statements, limits and thresholds and key risk indicators (KRIs) and report the risk profile, top risks, and breaches to the Compliance and Operational Risk Committee and Board
- Develop process and execution risk frameworks, including strengthened minimum standards for process documentation, control design, and control testing, and lead independent thematic reviews that surface systemic weaknesses no single business line would see
- Expand second line data risk oversight across data governance, quality, lineage, records management, and end-user computing, and challenge first line data practices against policy and expectations (e.g., BCBS 239)
- Build out and operationalize a second line payments risk oversight function across all payment channels (e.g., ACH, wires, FedNow, remote deposit), including a payments risk standard, KRIs, and review of new rails and material changes
- Extend independent oversight to Deposits, Personal Loans, and additional products over time, starting where risk is highest, by challenging new products, process changes, issue remediation, and control design and performance
- Strengthen operational loss event capture, root cause analysis, and scenario analysis, and use RCSA results from the owning function as inputs, applying GRC tooling and AI where they improve monitoring, analysis, and reporting
- Partner with the owners of third-party risk, resiliency, fraud, and tech and cyber risk to align taxonomy, share loss and issue data, and deliver integrated reporting with no gaps or overlap, while serving as the primary second line contact for operational risk
About You- 10+ years of experience in operational risk, enterprise risk, or independent risk oversight at a regulated financial institution, and a bachelor's degree or higher, or equivalent combination of education and work experience
- You have led and scaled a second line risk function, including hiring, setting direction, and holding the team accountable for outcomes
- You know operational risk frameworks well, including risk appetite, KRIs, loss events, and scenario analysis, and you can translate Basel and US regulatory expectations into practical standards
- You have second line experience in data risk or data governance, and working knowledge of payment systems and their risks
- You have experience in deposits, payments, or consumer lending operations or oversight
- You challenge the first line with evidence and credibility while keeping the relationship constructive. You support growth within risk appetite and can partner with the first line to come to a pragmatic solution
- You build on what exists, turning a working foundation into a mature program with clear priorities, milestones, and measurable outcomes, and you take ownership of results
- You are an exceptional communicator and can effectively communicate with Executives and examiners. You have the innate ability to turn complex risk data into plain findings and decisions
- You have a clear perspective on where AI adds genuine leverage across your function, and you have translated that into how your teams operate. You foster a culture of innovation while keeping accountability sharp, and you bring stakeholders along as the work evolves
- You are clear-eyed about where AI can create efficiency and where it creates new risk surfaces. You stay engaged with evolving regulatory guidance on AI in financial services, including data governance, and turn it into practical guidance for teams. You see responsible AI adoption as part of your mandate, not a separate conversation
Nice to Have- Background at a bank subject to OCC Heightened Standards, or one growing toward them
- Certifications such as CRCM, CRISC, CDMP, CIA, PRM, CFE, APRP, or AAP
Work Location San Francisco, Lehi
The above locations are eligible offices for this role. The locations have been determined to foster in-person collaboration with this role's team or the related business lines. We utilize a hybrid work model, and our teams are in-office Tuesdays, Wednesdays, and Thursdays. In-person attendance is essential for this role's success, and remote placement will not be considered. Happen Bank offers relocation, based on actual job level.
Time Zone Requirements Local hours (PT, MT)
While the position will primarily work local hours, Happen Bank is headquartered in Pacific Time and our ideal candidate will be flexible working across time zones when necessary.
Travel Requirements As needed travel to Happen Bank offices and/or other locations, as needed.
Compensation The target base salary range for this position is 150,000-230,000. The base salary of the role will be determined by job-related knowledge, experience, education, skills, and location. Base salary is just one part of Happen Bank's Total Rewards package. You may also be eligible for long-term awards (equity) and an annual bonus (which is based on company performance, employee performance and eligible earnings).
We're creating new financial services solutions for our members based on fairness, simplicity, and heart, and we treat our employees the same way. We offer a competitive benefits package that includes medical, dental and vision plans for employees and their families, 401(k) match, health and wellness programs, flexible time off policies for salaried employees, up to 16 weeks paid parental leave and more.
#LI-Hybrid
#LI-HB1
