GRC Enterprise Risk Management Director

Western Alliance Bank•Phoenix, AZ

About The Position

As an ERM GRC Director you will lead a team that develops and implements programs to identify, measure, monitor, and control risks throughout the organization. You'll play a key role in the Bank's Enterprise and Operational Risk Management Team, who is responsible for several enterprise wide programs, including Integrated Risk Management/ Governance Risk and Compliance (GRC) and Policy Framework. The GRC Director is responsible for overseeing a team that develops and executes the bank’s enterprise-wide Integrated Risk Management strategy. This includes methodology, policies and standards, reporting, training, and continuous improvement. Provide enterprise ownership of integrated risk and governance capabilities. Own the enterprise GRC / Integrated Risk Management capabilities, setting clear governance, standards, and priorities to simplify how risk, controls, and risk program data are managed across the organization. Ensure the platform evolves in a way that reduces complexity, supports consistent execution, and delivers reliable enterprise insight. Enable a coordinated, enterprise wide approach to risk and assurance. Serve as a central connector across the Second Line of Defense teams and other stakeholders (SOX, Third Party Risk, First Line of Defense Testing, IT First Line Risk, and Internal Audit) to align needs, eliminate duplication, and enable a more streamlined, integrated risk operating model. Establish clear data, metrics, and reporting that support decision making. Lead GRC data and reporting strategy to ensure GRC information is complete, trusted, and decision useful. Translate risk and control information into clear, actionable insights for management, regulators, and risk management committees. Lead and develop a high performing GRC team and stakeholder model. Build and lead a strong GRC team and stakeholder network focused on clarity, consistency, and adoption. Drive effective communication, training, and change management so risk and governance processes are easy to understand and execute across the enterprise. Manage a medium to large team (6-16) and help develop, train, and drive continuous improvement.

Requirements

10+ years of related experience in Risk Management, Internal Audit, SOX, and Financial Institutions or similar field.
Bachelor's degree in related field required.
Previous leadership experience required.
Advanced to expert knowledge of general banking operations, including deposit operations, loan administration, treasury management and/or other commercial banking products and services.
Advanced to expert Knowledge of applicable regulatory and legal compliance obligations, rules and regulations, industry standards and practices.
Advanced to expert knowledge and experience with risk and control frameworks (COSO ERM Framework, Basel etc)
Advanced to expert knowledge of industry and professional experience across one or more of the three lines of defense (e.g., banking operations, information technology, SOX, compliance, risk management, audit).
Advanced to expert technical knowledge of risk frameworks and industry best practices related to COSO Risk Frameworks with advanced certifications in fields related to integrated risk management, technology, and risk data management.
Advanced to expert knowledge of data analysis tools and techniques and decision-making abilities.
Expert speaking and writing communication skills

Responsibilities

Develops and implements programs to identify, measure, monitor, and control risks throughout the organization.
Overseeing a team that develops and executes the bank’s enterprise-wide Integrated Risk Management strategy.
Provide enterprise ownership of integrated risk and governance capabilities.
Own the enterprise GRC / Integrated Risk Management capabilities, setting clear governance, standards, and priorities to simplify how risk, controls, and risk program data are managed across the organization.
Ensure the platform evolves in a way that reduces complexity, supports consistent execution, and delivers reliable enterprise insight.
Enable a coordinated, enterprise wide approach to risk and assurance.
Serve as a central connector across the Second Line of Defense teams and other stakeholders (SOX, Third Party Risk, First Line of Defense Testing, IT First Line Risk, and Internal Audit) to align needs, eliminate duplication, and enable a more streamlined, integrated risk operating model.
Establish clear data, metrics, and reporting that support decision making.
Lead GRC data and reporting strategy to ensure GRC information is complete, trusted, and decision useful.
Translate risk and control information into clear, actionable insights for management, regulators, and risk management committees.
Lead and develop a high performing GRC team and stakeholder model.
Build and lead a strong GRC team and stakeholder network focused on clarity, consistency, and adoption.
Drive effective communication, training, and change management so risk and governance processes are easy to understand and execute across the enterprise.
Manage a medium to large team (6-16) and help develop, train, and drive continuous improvement.