Director, Enterprise Risk Management (ERM)

Visa•Atlanta, GA

3h•Hybrid

About The Position

The Director, Enterprise Risk Management (ERM), will be providing leadership and strategic oversight of enterprise‑wide risk management capabilities, ensuring risk insights are integrated into business and strategic decision‑making. This role will be responsible for shaping, executing, and continuously enhancing ERM programs, with a focus on effectiveness, scalability, and decision relevance. In addition, the role will be expected to lead cross‑functional initiatives, influence senior stakeholders, and proactively identify and respond to emerging and systemic risks. This role will be based in San Francisco or Atlanta

Requirements

10 or more years of work experience with a Bachelor’s Degree or at least 8 years of work experience with an Advanced Degree (e.g. Masters/ MBA/JD/MD) or at least 3 years of work experience with a PhD
Strong understanding and knowledge of ERM methodologies and systems with hands-on experience in application of risk management standards (COSO, PFMIs, IIA, OCC guidance).
Prior experience in a second-line of defense role driving maturity and providing oversight to a dedicated 1st line of defense team.
Bachelor’s degree in finance, Accounting, Mathematics, Statistics, or Business field preferred.
Experience analyzing and managing operational, regulatory, legal, fraud, reputation, compliance, strategic, technology and/or transaction risks.
Experience in building and operationalizing an ERM Foundation, including policy development, assessments, Frameworks, Risk scoring and rating, Standards, Guidance, Training, and Reporting Standards.
Business/financial acumen, translating risks into quantitative business impact.
Strong organizational skills with proven ability to collaborate in a global, matrix environment.
Strong execution skills with the ability to independently work across broad range of stakeholders and topics.
Excellent communication skills: verbal and written, and executive presence.
Proficiency in MS Word, Excel, Access, PowerPoint.

Nice To Haves

12 or more years of work experience with a Bachelor’s Degree or 8-10 years of experience with an Advanced Degree (e.g. Masters, MBA, JD, MD) or 6+ years of work experience with a PhD
Experience in Payments industry.

Responsibilities

Partner with regions to embed ERM frameworks including Policy, Risk Appetite Framework, ERM Framework globally to drive a stronger first-line of defense.
Own ERM methodology and maturity, including enterprise self‑assessments that inform Corporate Risk priorities and remain aligned with regulatory expectations and industry best practices.
Provide end‑to‑end ownership of ERM program performance, ensuring effectiveness, simplification, strong governance, and measurable impact across key ERM programs.
Manage key quarterly ERM operating rhythms, including development of the corporate risk profile, assessment of enterprise KRIs, and oversight of regional risk and control scorecards.
Act as a trusted risk advisor to senior leaders, synthesizing risk insights across domains, facilitating constructive challenge, and driving alignment on risk responses.
Identify, assess, and escalate emerging and systemic risks, including areas such as AI, advanced analytics, brand and reputation, and complex third‑party ecosystems.
Own the quality and clarity of enterprise risk reporting, including quantitative risk indicators, trends, and scenario analysis for executive and governance forums.
Engage, coach, and influence stakeholders across the three lines of defense to embed risk management practices and strengthen enterprise risk culture.
Partner closely with first‑line leaders, Internal Audit, and other second‑line teams to ensure coherent, consistent, and effective risk oversight.
Ensure preparedness for and participation in regulatory, internal audit, and external reviews, including topics such as risk appetite monitoring, risk acceptance, and KRI effectiveness.
Maintain awareness of external risk developments, including regulatory guidance, industry standards, and emerging best practices, and integrate relevant insights into ERM approaches.
Partner with ERM leadership to leverage and deploy technology and AI to enhance risk management capabilities, efficiency, and decision support.