Risk Management - VP - Enterprise Risk Officer

VP - Enterprise Risk Officer

The Vice President – Enterprise Risk Officer (ERO) is responsible for establishing, leading, and overseeing the Credit Union's enterprise-wide risk management framework to ensure all material risks are identified, measured, monitored, managed, and reportedin alignment with strategic objectives, Board-approved risk appetite, and regulatory expectations. Reporting to the SEVP – Chief Administrative Officer, the ERO serves as a key independent advisor to executive leadership and the Board of Directors' Enterprise Risk Oversight Committee on risk-related matters.

This role strengthens the organization by reducing the potential for unexpected losses and managing volatility through the development and execution of effective risk management strategies. The ERO ensures that risk considerations are embedded into strategic planning, major initiatives, and decision-making processes while promoting a strong, risk-aware culture across the Credit Union. Acting independently from revenue-generating and operational functions, the role provides second-line oversight of operational risk, information technology and security risk, third-party risk management, fraud risk, and corporate governance, enabling sound, informed decisions consistent with the Credit Union's long-term goals and regulatory obligations.

Golden 1 Credit Union is among the top credit unions in the country. As a member-owned, not-for-profit cooperative, Golden 1 is guided by the credit union philosophy of "people helping people." We are committed to empowering our members and uplifting our communities as we create a more equitable and financially inclusive California. We welcome all who embrace our Core Values.

You lead enterprise risk with confidence and independence, ensuring material risks are identified, assessed, and managed in alignment with the Credit Union's strategy, risk appetite, and regulatory expectations.

You are a trusted executive advisor who brings objectivity, credibility, and sound judgment to high-stakes discussions.

You exercise disciplined, risk-based judgment, weighing regulatory, operational, reputational, and strategic impacts before decisions are made.

Golden 1 Responsibilities Include:

Enterprise Risk Management

• Design, implement, and maintain a comprehensive ERM framework consistent with regulatory expectations and industry best practices.
• Establish and oversee the Credit Union's risk appetite framework, including risk limits, tolerances, metrics, and escalation protocols.
• Ensure risk considerations are integrated into strategic planning, capital planning, major projects and initiatives, budgeting, and business decision-making.
• Conduct risk assessments, including but not limited to those related to technology, information security, operational, and project and major initiative risks.

Risk Oversight and Strategic Advisory

• Provide independent oversight of all major risk categories, including but not limited to: credit risk, interest rate risk, liquidity risk, operational risk (including fraud, third-party, and model risk), compliance, legal, and regulatory risk, technology and information security risk, reputational risk, and strategic risk.
• Monitor emerging risks and industry trends, assessing their potential impact on the institution and giving advice to affected business units on strategies for mitigating emerging and other risks.
• Provide second line oversight of numerous business functions, including model risk management, business continuity, enterprise fraud risk management, and information technology and security.
• Manage and oversee second-line functions and personnel relating to Operational Risk Management, Enterprise Fraud Risk Management, Third-Party Risk Management, Information Technology and Security Risk Management, and Corporate Governance.

Governance and Executive and Board Reporting

• Prepare and present clear, timely, and actionable risk reporting to the EROC, management committees, including the Risk Management and Remediation Committee and the Information Technology and Security Committee, as well as executive leadership.
• Escalate significant risk issues, breaches of risk appetite, and control weaknesses promptly.
• Ensure Board and Corporate policies are reviewed on a regular basis and updated and align to strategic and business objectives.
• Implement and maintain appropriate vendor management, business continuity, governance, risk, and compliance data and information management tools.

Regulatory and Compliance Coordination

• Ensure the Credit Union's risk management practices comply with applicable laws, regulations, and supervisory guidance.
• Support regulatory examinations, audits, and reviews related to risk management.
• Collaborate with Compliance, Internal Audit, and Legal functions while maintaining appropriate independence.

Risk Culture and Leadership

• Promote a strong risk-aware culture throughout the organization.
• Establish risk policies, standards, and training programs to enhance risk understanding and accountability.
• Other duties as assigned.

Develop and maintain an understanding of the pertinent regulatory requirements and risks inherent to job responsibilities, establish, and maintain control activities that mitigate those risks consistent with the Credit Union's risk appetite, and ensure operational integrity and compliance with applicable regulations.

Qualifications

Education: Bachelor's degree in business administration, finance, legal or related discipline. Master's degree (MBA, MS in Risk Management, Finance, or similar) preferred.

Experience: Ten or more years of progressive experience in risk management within a financial institution or regulated financial services environment.

Knowledge/Skills:

• Expert knowledge of enterprise-level risk management, e.g., credit risk, asset/liability, vendor & third-party risk, operational risk, strategic risk, reputational risk.
• Excellent communicator and influencer; ability to coordinate discussion across large groups, distill multiple views, drive consensus, and deliver valuable solutions.
• Working knowledge of various tools (risk assessments, key risk indicators, loss/event database or incident tracking, unexpected loss modeling).
• Ability to handle multiple projects simultaneously and work effectively under pressure.

Core Competencies:

• Strategic Thinking: Thinks beyond immediate issues to consider long-term outcomes, risks, and organizational impact
• Executive Presence: Demonstrates confidence, credibility, and composure to inspire trust, influence others, and represent the organization effectively
• Risk-Based Decision-Making: Evaluates complex risk scenarios and balances risk and opportunity to drive responsible, sustainable outcomes.
• Regulatory Acumen: Demonstrates a strong understanding of applicable laws, regulations, and regulatory expectations, and integrates them into executive decision-making, risk management, and operational oversight
• Collaboration and Independence: Collaborates effectively with peers and stakeholders while operating with autonomy and ownership
• Change Leadership: Drives and sustains organizational change by anticipating impacts, aligning stakeholders, and enabling adoption.

Organizational Contacts & Relationships

Internal: All levels of staff.

External: External auditors, regulatory and governmental agencies, financial institutions, trade organizations, and vendors.

Working Conditions

Work time includes weekend and after-hours time, based on organizational needs. This position works in-office where working conditions, lighting, temperature, audio, and workspace are all sufficient.

Physical Requirements

Work requires the ability to constantly operate a computer and the ability to read, type, and communicate. Work may require the ability to move work-related supplies weighing up to 10-15 pounds.

Disclaimer/Intent and Function of Job Descriptions

The above information on this description has been designed to indicate the general nature and level of work performed by team members within this classification. Because the nature of positions and job functions can change over time, this job description is not designed to contain or be interpreted as a comprehensive inventory of all essential functions, duties, responsibilities, and qualifications requirements of team members assigned to this job. Job duties may be changed or modified in the Credit Union's discretion. The Credit Union will keep team members updated on key functions, duties, and requirements of their position by communications from the Credit Union and by updating the job description from time to time. Any team member with questions about the nature of their job duties is encouraged to consult with their supervisor.