Manager of Enterprise Risk Management

Veridian Credit Union•Cedar Falls, IA

1d•Hybrid

About The Position

The Manager of Enterprise Risk Management (ERM) oversees Veridian Credit Union’s enterprise-wide risk management program, third-party/vendor management framework, and business continuity/disaster recovery program (BCP/DR). The role ensures risks across business units are identified, assessed, monitored, and reported, and manages the vendor lifecycle. This is a hybrid, full-time, exempt position requiring work at the Northeast, IA location two days per week. Limited travel is expected. The manager leads and mentors a team supporting ERM, vendor management, and BCP/DR. They provide coaching and career-development support, establish team expectations, interview and hire qualified applicants, and orient team members to the organization’s mission, vision, values, and leadership culture. The position attends Audit and Risk and Governance, Risk, Compliance and Management (GRCM) Committee meetings and makes decisions in support of members, the department, and the organization. Employees are expected to maintain security measures and comply with PCI and other highly secure data requirements. Duties and responsibilities may change with or without notice.

Requirements

Bachelor’s degree in business or another relevant field.
At least 5 years of work experience with a financial institution or equivalent.
Fluent computer skills in a Microsoft Windows environment.
Oral and written communication skills.
Member-service focus.
Attention to detail and accuracy.
Positive attitude that supports a team environment.
Dependability and punctuality, with flexibility during peak times.
High level of confidentiality.
Organizational skills.
Self-motivation and ability to work without close supervision.
Problem-solving and analytical skills.

Nice To Haves

Risk and/or vendor management experience.
Management experience.

Responsibilities

Lead the ongoing development, implementation, and maintenance of the ERM framework, policies, and procedures in alignment with the VCU strategic plan and regulatory guidance.
Facilitate identification, assessment, and prioritization of risks across business units, including compliance, credit, interest rate, liquidity, non-public data, operational, reputation, strategic, and transaction risks.
Partner with senior leadership, business units, and the Board to assess and enhance risk appetite statements annually as necessary.
Assess identified risks and recommend actions to mitigate and manage them.
Prepare quarterly ERM reports and monitor and enhance key performance indicators as necessary.
Support internal audits, regulatory examinations, and external assessments by providing risk-related documentation and responses.
Promote staff risk awareness through training, workshops, and communication strategies.
Oversee the VCU third-party/vendor management program to ensure compliance with regulatory guidance and internal policies.
Manage the vendor lifecycle, including due diligence, contract negotiation review, performance monitoring, and renewal or termination processes.
Conduct risk assessments of new and existing vendors and outsourced activities, ensuring appropriate controls and oversight.
Monitor vendor performance against service level agreements and escalate issues as needed.
Lead and coordinate BCP/DR programs, including risk assessments, testing, documentation, and updates, to support organizational resilience and readiness.
Lead and mentor the team supporting ERM, vendor management, and BCP/DR activities.
Attend Audit and Risk and GRCM Committee meetings.
Provide ongoing coaching to team members to encourage personal, professional, and career development.
Clearly define expectations for team members.
Interview and hire the most qualified applicants for open positions.
Provide initial orientation and ongoing support to team members regarding the organization's mission, vision, values, and leadership culture.
Plan proactively for the future and make decisions that support members, the department, and the organization financially and strategically.
Ensure security measures are in place and followed for PCI and other highly secure data compliance requirements.