Director of Enterprise Risk Management

Beneficial State Bank•Oakland, CA

2d•Hybrid

About The Position

The Director of Enterprise Risk Management (ERM) leads and maintains the Bank’s enterprise risk management framework, providing independent oversight and coordination of risk identification, assessment, monitoring, reporting, and mitigation. The role embeds risk management in strategic planning, decision-making, governance, and daily operations, and partners with department heads, Compliance, Audit, and other functions to develop, implement, maintain, review, and oversee an effective risk management framework. The position supports compliance with applicable laws and regulations, identifies gaps, recommends solutions to reduce losses related to inadequate processes, systems, or human error, and identifies, responds to, or escalates risks as appropriate. It serves as a liaison between business lines and the Lines of Defense and advises executive leadership, the Enterprise Risk Management Committee, and the Board of Directors on risk appetite, emerging risks, risk governance, and enterprise resiliency. The Director promotes a proactive risk culture in support of the Bank’s mission, strategic objectives, regulatory obligations, and stakeholder expectations. The risk framework encompasses credit, financial, liquidity, market, operational, reputational, strategic, and other relevant risks. The role provides independent risk analysis, constructive challenge, and recommendations on enterprise risk exposures and governance effectiveness, and escalates material risks, policy exceptions, control weaknesses, and emerging concerns through established governance channels. Risk ownership and acceptance remain with designated business leaders and executive management under approved delegated authorities. The position reports to the Chief Operating Officer or Chief Executive Officer, with direct access to and interaction with the Audit Committee and other board-level Risk Committees. The role leads the design, implementation, enhancement, and administration of the Bank’s ERM Program; maintains the enterprise risk framework; facilitates enterprise-wide risk assessments; develops risk scoring, prioritization, and aggregation methodologies; maintains risk appetite governance; and establishes key risk indicators, thresholds, and escalation protocols. It prepares risk reporting and Board materials, maintains the risk inventory and register, monitors mitigation plans, and integrates risk considerations into planning, budgeting, projects, vendor management, products, services, technologies, and strategic initiatives. The Director supports examinations, audits, and regulatory reviews; coordinates responses to findings; oversees risk dashboards, data governance, and risk technology solutions; and develops enterprise risk education and training. The position is based in a typical, non-confined office environment and is listed as hybrid in Oakland. Work may also be performed away from Bank worksites depending on business needs. Remote work requires dependable high-speed internet and a setting suitable for frequent phone and video calls that protects confidential information. The role involves writing, typing, speaking, listening, lifting up to 10 pounds, occasional driving, carrying, sitting, pulling, walking, standing, squatting, kneeling, reaching, and using close, color, and peripheral vision, depth perception, and focus adjustment. It may require use of a computer, cellular telephone, printer, fax, and other standard office equipment. The position requires reading and interpreting documents, detailed work, problem-solving, customer interaction, reasoning and mathematical skills, effective communication, presentations, analysis, management of concurrent tasks, adaptability, and effectiveness in a fast-paced environment with frequent interruptions. Reasonable accommodations may be made for qualified individuals with disabilities.

Requirements

Bachelor’s degree or certification in Business, Risk Management, or a related field.
At least 12 years of progressive experience in enterprise risk management, operational risk, compliance, audit, banking, financial services, or related disciplines.
At least 5 years of leadership experience.
Strong understanding of banking regulations and risk governance frameworks such as COSO ERM, ISO 3100, and Interagency guidance on sound risk management practices.
Experience presenting to executive leadership and Boards of Directors.
Demonstrated expertise in risk assessment methodologies, risk reporting, and governance practices.

Nice To Haves

Professional certification such as CRMA, CRCM, CERP, FRM, CFA, CIA, or CISA.
Experience within a regulated financial institution.
Experience supporting Board Risk Committees or Enterprise Risk Committees.
Experience implementing risk management platforms such as Logic Manager, AuditBoard, or other GRC tools.

Responsibilities

Lead the design, implementation, enhancement, and ongoing administration of the Bank’s Enterprise Risk Management Program.
Maintain a comprehensive enterprise risk framework aligned with regulatory expectations and industry best practices.
Facilitate enterprise-wide risk assessments and risk identification processes; develop methodologies for risk scoring, prioritization, and aggregation.
Provide independent risk analysis, oversight, and constructive challenge on risk exposures, mitigation strategies, governance effectiveness, and alignment with risk appetite.
Ensure material risks are identified, documented, monitored, and escalated; conduct emerging risk assessments and environmental scans.
Facilitate development, maintenance, monitoring, and periodic updates of the Bank’s Risk Appetite Statement.
Establish and monitor key risk indicators, thresholds, and escalation protocols; coordinate reviews of risk appetite metrics and tolerance levels.
Support executive management and the Board in evaluating adherence to approved risk appetite; maintain the ERM Policy and Charter and coordinate governance updates.
Recommend improvements to risk governance and oversight processes while recognizing that risk ownership and acceptance remain with designated business leaders and executive management.
Prepare enterprise risk reports, dashboards, trend analyses, executive summaries, and quarterly Board risk reporting packages.
Present risk assessments, emerging risks, and enterprise risk trends to executive leadership and Board committees; coordinate Enterprise Risk Management Committee materials and reporting.
Escalate material risks, significant control issues, policy exceptions, and emerging concerns through established governance channels.
Lead annual and periodic enterprise risk assessments and facilitate risk workshops with executive leadership and business units.
Maintain the enterprise risk inventory and risk register, including risk ownership, ratings, mitigation plans, and action-item tracking.
Monitor mitigation plans and management action items; validate risk ownership assignments and accountability structures.
Integrate risk management into strategic planning, capital planning, budgeting, project governance, vendor management, and major business initiatives.
Partner with Information Security, Compliance, Internal Audit, Finance, Human Resources, Operations, and Technology to ensure consistent risk oversight.
Support governance committees through risk analysis and reporting, and incorporate risk considerations into new products, services, technologies, and strategic initiatives.
Maintain awareness of relevant regulatory guidance and industry expectations; support examinations, audits, and regulatory reviews related to ERM.
Coordinate responses to risk governance recommendations and findings and assist in maintaining ERM-related policies, charters, procedures, and standards.
Complete assigned mandatory compliance training as scheduled.
Oversee development and maintenance of enterprise risk dashboards and reporting tools; champion centralization and governance of risk-related data.
Evaluate, lead, and support implementation of risk management technology solutions; ensure accuracy, completeness, and integrity of risk reporting information.
Promote accountability, collaboration, continuous improvement, and sound risk management across the organization.
Develop and deliver enterprise risk education and training programs; advise business leaders on risk management practices, governance requirements, and emerging risks.
Perform other position-specific duties and functions as assigned.