Job Information

The Senior Director, Enterprise Risk Programs & Intelligence, leads to the integration of enterprise-wide risk insights, monitoring, and strategic risk programs to support effective risk oversight and executive decision making.

This role is responsible for advancing the organization’s enterprise risk management capabilities through the development of risk indicators, analytics, scenario analysis, and enterprise-wide risk reporting while overseeing key risk programs such as third-party risk management, people risk, financial risk monitoring and emerging risk identification.

The Sr. Director will partner closely with leaders, technology and operations teams, finance, HR and risk program owners to develop a holistic view of enterprise risk exposure ensuring that leadership and the Board receive timely, actionable insights into emerging risks and risk reporting.

This role reports into the Chief Risk Officer and serves as key member of the Risk Leadership Team.

Key Job Functions

Enterprise Risk Programs:

• Lead the design, enhancement and integration of core ERM programs:
  • Risk Appetite: Develop and maintain the risk taxonomy and risk appetite for approval by ERC and Board.  This includes establishing and maintaining processes for Risk Appetite monitoring and escalation and leveraging appropriate systems and tools.
  • Key Indicator Program: Lead the development and monitoring of Key Indicator framework (Key Risk Indicators, Key Control Indicators, and Key Performance Indicators) and enterprise risk appetite metrics.
  • Scenario Analysis: Lead enterprise scenario analysis exercises (long tail & short tai) to assess potential risk event and emerging risk exposures.  Translate outputs into clear implications and action-oriented insights.
  • Enterprise Risk Profile Development
• Ensure alignment of risk programs to the enterprise strategy and regulatory expectations.
• Integrate outputs across programs to create a cohesive enterprise risk view, ensuring the view reflects both the current state and forward-looking risk outlook.

Risk Analytics and Reporting

• Own the development and execution of enterprise risk reporting, dashboard and analytic capabilities. Define the reporting standards, data requirements and visualization strategies.
• Translate complex risk data into clear actionable insights for Executive leadership, Committees, and the Board.
• Evolve reporting from static summaries to forward looking, insight driven analysis.

Risk Aggregation & Enterprise View

• Lead the development of risk aggregation methodologies across risk domains.
• Integrate data from KRIs, RCSAs, scenario analysis and risk assessments.
• Identify risk interdependencies, concentrations and systemic exposures.
• Produce enterprise level views that support decision making and prioritization.

Third & Fourth Party Risk Management Program

Oversee the Third and Fourth Party Risk Management (TPRM) Program, including monitoring and oversight of vendor risk exposure, concentration risk and systemic dependencies.  Additionally, ensure development and implementation of periodic Third-Party Risk Management reporting, to impacted business/corporate stakeholders, the Executive Committee, Enterprise Risk Committee, and Board.

Strategic, Financial and People Risk Oversight

Establish appropriate monitoring and oversight for the following risks, and partner with Finance, HR and business leaders to integrate these risks into the enterprise risk profile.

• People Risk: workforce, concentration, succession, culture, conduct risks, etc.
• Financial Risk: key financial exposures, concentration risks, and macroeconomic trends.
• Strategic Risk: alignment to strategy and external environment.

External and Emerging Risk Program

• Lead the Emerging Risk Program, including external risk review and internal risk signals.
• Support executive discussions with insightful, forward-looking perspectives.

Risk Culture & Training

• Training & Collaboration: Lead development of risk education and training programs to strengthen enterprise risk awareness and capabilities across the organization (e.g. trainings, newsletters and meetings to foster collaboration and awareness). Facilitate cross-functional collaboration across risk, compliance, technology, operations and corporate functions.
• Risk Culture: Drive continuous improvement of ERM practices and tools. Foster a culture of proactive risk management through business risk and control champions.  Establish strong partnerships across leaders from the organization to ensure risk insights and inform business decision making.

Leadership

• Build and lead a high performing team.
• Partner across all 3 LODs and key functions.
• Serve as a thought partner to the CRO and executive leadership.
• Drive a culture of data-driven risk management and continuous improvement.