Position SummaryThe VP, Risk & Compliance serves as Altana Federal Credit Union's senior executive responsible for enterprise-wide risk management and governance and reports directly to the CEO. As a member of the Senior Leadership Team, the VP partners with the CEO, Senior Team, and Board of Directors to establish risk strategy and governance practices that support Altana's mission, strategic plan, and long-term growth.
The VP provides independent oversight and leadership across regulatory compliance, Bank Secrecy Act (BSA) compliance, third-party risk management, operational risk, fraud risk, and emerging risks. Experience with information security governance, enterprise risk management and business continuity planning highly desirable as well. The position ensures risks are appropriately identified, assessed, monitored, communicated, and managed while enabling innovation and growth.
The VP serves as a strategic advisor to senior leadership and the Board, helping Altana balance member service, operational excellence, regulatory requirements, and organizational objectives.
Essential Duties and ResponsibilitiesCompliance Management- Administer the Credit Union's Compliance Management System.
- Ensure compliance with applicable federal and state laws, regulations, and regulatory guidance.
- Monitor & communicate legislative and regulatory developments and assess organizational impacts.
- Coordinate regulatory examinations and compliance audits.
- Execute corrective action plans and regulatory issue remediation.
BSA/AML and Financial Crimes Risk- Administer the Bank Secrecy Act/Anti-Money Laundering compliance program.
- Ensure ongoing monitoring of fraud, financial crimes, suspicious activity reporting, and related controls.
- Evaluate emerging financial crime risks and recommend mitigating strategies.
- Provide executive oversight of fraud prevention and detection activities.
Third-Party Risk Management- Adminster the Third-Party Risk Management Program.
- Establish and maintain governance and due diligence standards for vendors, service providers, and strategic partners.
- Evaluate operational, contractual, reputational, cybersecurity, and compliance risks associated with third-party relationships.
- Ensure effective monitoring and reporting of vendor performance and risk exposure.
Business Continuity and Organizational Resilience- Collaborate on business continuity and organizational resilience programs.
- Ensure continuity, recovery, crisis management, and incident response plans remain current and effective.
- Coordinate testing programs and readiness exercises.
- Lead enterprise response efforts during significant business disruption events.
Operational and Information Security Risk- Partner with Information Technology leaders to maintain effective cybersecurity governance.
- Assess operational risks across all organizational functions.
- Ensure risk considerations are incorporated into business processes, technology initiatives, and organizational change efforts.
- Support ongoing development of internal controls and risk mitigation practices.
Leadership and Strategic ResponsibilitiesBoard Governance and Reporting- Serve as management liaison to Board-level risk oversight activities.
- Prepare and present periodic reports on enterprise risk exposure, emerging risks, mitigation activities, and risk trends.
- Provide independent assessments regarding the adequacy of internal controls and risk management practices.
- Advise the Board and senior leadership regarding significant risk events and potential organizational impacts.
Strategic Leadership- Serve as a member of the Senior Leadership Team.
- Promote a culture that views risk management as a strategic business discipline rather than solely a compliance function.
- Participate in the development, execution, and evaluation of organizational strategy.
- Assists in the evaluation of enterprise risks associated with mergers, acquisitions, strategic partnerships, fintech relationships, emerging technologies, artificial intelligence initiatives, and major organizational change efforts.
- Advise leadership regarding organizational risk appetite and risk tolerance.
- Challenge assumptions and decisions when risk exposure exceeds established tolerances.
Enterprise Risk Management- Develop, implement, and maintain Altana's Enterprise Risk Management (ERM) framework.
- Establish a comprehensive process for identifying, assessing, measuring, monitoring, and mitigating enterprise risks.
- Maintain an enterprise risk inventory and risk register.
- Lead enterprise-wide risk assessments and risk reporting activities, as well as enterprise risk response and executive coordination during significant operational, fraud, cybersecurity, compliance, or reputational events.
- Develop and monitor Key Risk Indicators (KRIs) and risk dashboards.
- Facilitate regular risk discussions with senior leadership.
- Ensure enterprise risks are evaluated in conjunction with strategic planning processes.
- Maintains direct and unrestricted access to the Board of Directors and relevant Board Committees regarding significant risk matters.
Leadership and Culture- Foster a culture of accountability, transparency, and sound risk management throughout the organization.
- Build collaborative relationships with leaders across all departments.
- Develop, coach, and mentor risk, compliance, and governance professionals.
- Champion Altana's CARES values and leadership expectations.
- Promote ethical decision-making and organizational integrity.
Supervisory Responsibilities- Provides strategic leadership and direction for all assigned risk-related functions.
- Responsible for recruitment, development, coaching, performance management, succession planning, and employee engagement within assigned departments.
- Establishes departmental goals aligned with organizational objectives.
- Manages three direct reports.
Fiscal Responsibilities- Develop and manage departmental budgets.
- Evaluate and recommend investments in risk management technologies, monitoring tools, and governance resources.
- Ensure effective stewardship of departmental resources.
Minimum QualificationsEducation- Bachelor's degree in Business Administration, Finance, Accounting, Risk Management, Law, Economics, or related field required.
- Master's degree preferred.
Experience- Ten (10) or more years of progressively responsible experience in risk management, compliance, audit, enterprise risk, financial services, or related disciplines.
- Minimum three (3) years of executive or senior leadership experience.
- Experience presenting to executive leadership and governing boards.
- Credit union or banking experience required.
Preferred CertificationsOne or more preferred:
- Certified Bank Secrecy Act Professional (CBSAP)
- Certified Regulatory Compliance Manager (CRCM)
- Certified Anti-Money Laundering Specialist (CAMS)
- Certified Information Systems Auditor (CISA)
- Certified Risk and Information Systems Control (CRISC)
- Certified Internal Auditor (CIA)
- Certified Enterprise Risk Professional (CERP)
Knowledge, Skills, and AbilitiesEnterprise Risk Leadership- Strong understanding of enterprise risk management principles and governance frameworks.
- Ability to assess strategic, operational, financial, compliance, cybersecurity, reputational, and emerging risks.
- Ability to balance prudent risk management with organizational growth objectives.
Executive Leadership- Demonstrated ability to influence executive decision-making.
- Ability to communicate risk concepts in a practical, business-focused manner.
- Strong executive presence and board presentation skills.
Regulatory ExpertiseComprehensive knowledge of:
- NCUA regulations
- BSA/AML requirements
- Consumer financial protection regulations
- Fair Lending requirements
- Unfair, Deceptive, or Abusive Acts or Practices (UDAAP)
- Vendor Management guidance
- Information security and cybersecurity governance expectations
Communication and Collaboration- Exceptional written, verbal, and presentation skills.
- Ability to build partnerships and influence outcomes across all organizational levels.
- Ability to facilitate productive discussions regarding risk ownership and accountability
