Chief Risk Officer

SF Fire Credit Union•San Francisco, CA

4d•$200,000 - $285,000

About The Position

The Chief Risk Officer (CRO) is a key member of the executive leadership team responsible for the overall management of risk across the credit union. This includes enterprise risk management, compliance, internal audit, vendor management, corporate insurance, business continuity management, records retention, and fraud risk management. The CRO will ensure that the credit union operates within its risk appetite, adheres to regulatory requirements, and protects its members' assets while supporting sustainable growth and innovation.

Requirements

A bachelor's degree in business administration, accounting or finance is required.
Minimum of 15 years of progressively responsible management experience in a financial institution setting.
A strong background in risk management, including direct experience in developing, assessing, and performing enterprise risk assessments are required.
Must also be familiar with risk management concepts and leading practices such as the COSO framework.
Extensive experience in a senior risk management role, preferably within a credit union, financial institution, or similarly regulated industry.
Proven track record of developing and implementing risk management and internal audit strategies.
Have previous hands-on experience with regulatory compliance, third-party risk management, business continuity planning, and corporate insurance program management.
Excellent leadership skills with experience managing and developing high-performing teams.
Exceptional communication and interpersonal skills, with the ability to engage effectively with both internal and external stakeholders.
Willingness to “roll-sleeves” up to help the credit union achieve its broader goals.
Analytical mindset with the ability to leverage data and insights to inform risk management decisions.
Commitment to the credit union’s mission, values, and member-first approach.
Adaptability and the ability to thrive in a dynamic and fast-paced environment.

Nice To Haves

A Master of Business Administration and Certified Internal Auditor is preferred.

Responsibilities

Develop and implement a robust enterprise risk management (ERM) framework that identifies, assesses, mitigates, and monitors risks across the credit union.
Advise the CEO and board of directors on risk exposures and mitigation strategies, providing clear and actionable insights.
Collaborate with executive team members and department leaders to integrate risk management practices into day-to-day operations and strategic planning.
Oversee the internal audit function, ensuring it operates independently and effectively to assess the adequacy and effectiveness of the credit union’s internal controls.
Manage co-sourcing partners to execute against the audit plan and to ensure that control deficiencies are identified in a similar and thorough manner.
Develop and execute a risk-based internal audit plan that addresses key operational, financial, and compliance risks.
Report audit findings and recommendations to the CEO and board, ensuring timely resolution of identified issues.
Manage the third-party risk management program, ensuring that third-party relationships are adequately assessed for sufficient controls (especially information security), risks and aligned with the credit union’s strategic goals.
Oversee the records retention program, ensuring that all records are maintained, stored, and disposed of in compliance with legal and regulatory requirements.
Develop and implement policies and procedures for records management, ensuring the security and confidentiality of sensitive information.
Conduct regular reviews of the records retention program to ensure ongoing compliance and operational efficiency.
Lead the development and maintenance of the business continuity plan (BCP) to ensure the credit union’s ability to operate during and after a crisis or disruption.
Coordinate and lead regular testing and training exercises to ensure preparedness and continuous improvement of the BCP.
Oversee the corporate insurance program, ensuring adequate coverage for all operational, financial, and liability risks.
Evaluate and select insurance providers, negotiate policy terms, and manage claims processes.
Regularly review and update insurance coverage to reflect changes in the credit union’s risk profile and operations.
Own the notification process to insurance carriers and other key stakeholders for potential or actual claims.
Ensure compliance with all applicable federal, state, and local regulations, including those specific to credit unions.
Stay informed about changes in the regulatory environment and assess their impact on the credit union’s operations.
Collaborate with the compliance team to develop and implement policies and procedures that meet regulatory requirements.
Lead, mentor, and develop the risk management, internal audit, and vendor management teams, fostering a culture of integrity, accountability, and continuous improvement.
Set clear goals and performance expectations for direct reports, providing guidance and support to achieve them.
Ensure effective succession planning within the risk management and related functions.
Serve as a key advisor to the CEO and board of directors on all risk-related matters, providing regular updates on risk exposures, mitigation strategies, and internal audit findings.
Collaborate with other senior executives to align risk management practices with the credit union’s overall business objectives.
Present reports and recommendations to the board’s audit and risk committees, ensuring transparency and accountability.
Participate in strategic planning and decision-making processes, ensuring that risk considerations are integrated into the credit union’s long-term plans.
Lead or contribute to special projects and initiatives that involve risk management, internal audit, or compliance considerations.
Support innovation and transformation initiatives by assessing risks and providing solutions that align with the credit union’s strategic goals.
Other duties as assigned.