Risk Management - VP - Enterprise Risk Officer

Golden 1 Talent Acquisition Team•Sacramento, CA

23h•Onsite

About The Position

The Vice President – Enterprise Risk Officer (ERO) is responsible for establishing, leading, and overseeing the Credit Union’s enterprise‑wide risk management framework to ensure all material risks are identified, measured, monitored, managed, and reported in alignment with strategic objectives, Board‑approved risk appetite, and regulatory expectations. Reporting to the SEVP – Chief Administrative Officer, the ERO serves as a key independent advisor to executive leadership and the Board of Directors’ Enterprise Risk Oversight Committee on risk‑related matters. This role strengthens the organization by reducing the potential for unexpected losses and managing volatility through the development and execution of effective risk management strategies. The ERO ensures that risk considerations are embedded into strategic planning, major initiatives, and decision‑making processes while promoting a strong, risk‑aware culture across the Credit Union. Acting independently from revenue‑generating and operational functions, the role provides second‑line oversight of operational risk, information technology and security risk, third‑party risk management, fraud risk, and corporate governance, enabling sound, informed decisions consistent with the Credit Union’s long‑term goals and regulatory obligations.

Requirements

Bachelor’s degree in business administration, finance, legal or related discipline.
Ten or more years of progressive experience in risk management within a financial institution or regulated financial services environment.
Expert knowledge of enterprise-level risk management, e.g., credit risk, asset/liability, vendor & third-party risk, operational risk, strategic risk, reputational risk.
Excellent communicator and influencer; ability to coordinate discussion across large groups, distil multiple views, drive consensus, and deliver valuable solutions.
Working knowledge of various tools (risk assessments, key risk indicators, loss/event database or incident tracking, unexpected loss modeling).
Ability to handle multiple projects simultaneously and work effectively under pressure.
Strategic Thinking: Thinks beyond immediate issues to consider long‑term outcomes, risks, and organizational impact
Executive Presence: Demonstrates confidence, credibility, and composure to inspire trust, influence others, and represent the organization effectively
Risk-Based Decision-Making: Evaluates complex risk scenarios and balances risk and opportunity to drive responsible, sustainable outcomes.
Regulatory Acumen: Demonstrates a strong understanding of applicable laws, regulations, and regulatory expectations, and integrates them into executive decision‑making, risk management, and operational oversight
Collaboration and Independence: Collaborates effectively with peers and stakeholders while operating with autonomy and ownership
Change Leadership: Drives and sustains organizational change by anticipating impacts, aligning stakeholders, and enabling adoption.

Nice To Haves

Master’s degree (MBA, MS in Risk Management, Finance, or similar) preferred.

Responsibilities

Design, implement, and maintain a comprehensive ERM framework consistent with regulatory expectations and industry best practices.
Establish and oversee the Credit Union’s risk appetite framework, including risk limits, tolerances, metrics, and escalation protocols.
Ensure risk considerations are integrated into strategic planning, capital planning, major projects and initiatives, budgeting, and business decision-making.
Conduct risk assessments, including but not limited to those related to technology, information security, operational, and project and major initiative risks.
Provide independent oversight of all major risk categories, including but not limited to: Credit risk Interest rate risk Liquidity risk Operational risk (including fraud, third-party, and model risk) Compliance, legal, and regulatory risk Technology and Information Security risk Reputational risk Strategic risk.
Monitor emerging risks and industry trends, assessing their potential impact on the institution and giving advice to affected business units on strategies for mitigating emerging and other risks.
Provide second line oversight of numerous business functions, including model risk management, business continuity, enterprise fraud risk management, and information technology and security.
Manage and oversee second-line functions and personnel relating to Operational Risk Management, Enterprise Fraud Risk Management, Third-Party Risk Management, Information Technology and Security Risk Management, and Corporate Governance.
Prepare and present clear, timely, and actionable risk reporting to the EROC, management committees, including the Risk Management and Remediation Committee and the Information Technology and Security Committee, as well as executive leadership.
Escalate significant risk issues, breaches of risk appetite, and control weaknesses promptly.
Ensure Board and Corporate policies are reviewed on a regular basis and updated and align to strategic and business objectives.
Implement and maintain appropriate vendor management, business continuity, governance, risk, and compliance data and information management tools.
Ensure the Credit Union’s risk management practices comply with applicable laws, regulations, and supervisory guidance.
Support regulatory examinations, audits, and reviews related to risk management.
Collaborate with Compliance, Internal Audit, and Legal functions while maintaining appropriate independence.
Promote a strong risk-aware culture throughout the organization.
Establish risk policies, standards, and training programs to enhance risk understanding and accountability.
Other duties as assigned.
Develop and maintain an understanding of the pertinent regulatory requirements and risks inherent to job responsibilities, establish, and maintain control activities that mitigate those risks consistent with the Credit Union’s risk appetite, and ensure operational integrity and compliance with applicable regulations.