Director, Enterprise Risk Management

Mountain America Credit Union•Sandy, UT

23h•Hybrid

About The Position

The Director of Enterprise Risk Management is an enterprise wide leader within Mountain America Credit Union’s Enterprise Risk Management (ERM) function, reporting to the Vice President of Enterprise and Operational Risk Management. The role is responsible for governing, executing, and advancing the ERM program to ensure enterprise risks are identified, assessed, monitored, and reported in alignment with strategic objectives and regulatory expectations. As part of the second line of defense, the Director leads enterprise risk governance, risk appetite and key risk indicator (KRI) processes, emerging risk monitoring, and enterprise risk reporting. The role partners closely with Compliance, Internal Audit, Legal, Technology, and business leadership to ensure enterprise risks are visible, consistently applied, and effectively embedded in decision making across the organization. This position will be a hybrid role with the expectation of 2-3 days a week in office. To be effective, an individual must be able to perform each essential duty successfully.

Requirements

5+ years of leadership experience in a management role, overseeing risk management teams
8+ years of progressive experience in enterprise risk management, operational risk, compliance risk, audit, or related disciplines within financial services
Bachelor’s degree in finance, economics, business, or a related field required
Demonstrated experience operating enterprise‑level risk frameworks, including risk governance, risk appetite, KRIs, and enterprise risk reporting
Experience working in a second line of defense role within a regulated financial institution
Knowledge of GRC / Integrated Risk Management platforms, including risk analytics, dashboards, and reporting capabilities, with the ability to oversee and direct platform use and development
Enterprise risk management expertise, including governance practices, risk domains, and regulatory expectations (e.g., NCUA, FFIEC, CFPB)
Advanced analytical skills to synthesize complex risk information, apply sound judgment in ambiguity, and produce decision‑ready narratives
Executive‑level communication and influencing skills.
Technology fluency related to GRC / IRM platforms, workflow enablement, data quality, and reporting automation
Ability to lead and develop professional teams through coaching, prioritization, and capability building
Ability to operate effectively in a second‑line role, balancing independence with collaboration across functions

Nice To Haves

Master’s degree preferred or equivalent experience
Hands-on experience with GRC / Integrated Risk Management platforms preferred
Preferred certifications include CUERME, CRM, CRCMP, or similar risk‑related credentials

Responsibilities

Govern and execute the Enterprise Risk Management program, including the enterprise risk taxonomy, top‑down identification of enterprise risks, emerging risk monitoring, and enterprise‑level risk reporting.
Establish and maintain effective enterprise risk governance, including committees, charters, operating models, cadence, and escalation practices to support consistent risk oversight and decision‑making.
Manage the enterprise risk appetite framework, including periodic updates, supporting KRIs, thresholds, escalation criteria, and executive and Board‑level materials.
Aggregate, analyze, and synthesize enterprise risk information across business units and second‑line functions to deliver clear, decision‑ready insights for senior leadership and governance forums.
Design and oversee enterprise‑level risk assessment processes supporting strategic initiatives, new products, and material changes, enabling early risk identification and alignment with governance expectations.
Lead the evolution of ERM capabilities, tools, and infrastructure, including GRC / Integrated Risk Management platforms, workflows, data quality, and reporting, in partnership with Technology and other stakeholders.
Monitor regulatory and supervisory expectations related to enterprise risk management and serve as the primary point of contact for enterprise risk‑related examinations, coordinating planning, responses, and thematic issue tracking.
Provide credible challenge and thought leadership by applying sound judgment, structured analysis, and an enterprise perspective to risk prioritization and decision support.
Lead and develop the enterprise risk team, setting priorities, allocating work, and building capability to deliver consistent, high‑quality ERM outcomes through strong cross‑functional partnership.