Senior Director Enterprise Risk

Hudson Valley Credit Union•Poughkeepsie, NY

About The Position

Hudson Valley Credit Union is currently recruiting for a Senior Director Enterprise Risk. Primary Function: Serve as the enterprise leader responsible for the design, administration, coordination, and continuous enhancement of the Enterprise Risk Management (ERM) Program. The role provides independent second-line oversight and effective challenge while partnering with executive management to ensure material risks are appropriately identified, assessed, monitored, escalated, and reported consistent with the credit union's strategic objectives, risk appetite, and regulatory expectations. This position serves as steward of the enterprise risk universe—the organization's inventory of material risks—and is responsible for aggregating risk information, facilitating enterprise-wide risk assessments, promoting effective risk governance, and providing decision-useful reporting to executive management and the Board. The role reports to the Chief Risk Officer & General Counsel and serves as a trusted advisor to executive leadership, management committees, and the Board Risk Committee.

Requirements

Bachelor’s degree in Risk Management, Finance, Business Administration, Accounting, Economics, Law, Public Administration, or a related discipline required.
Minimum 10 years Progressive financial services risk management, regulatory, compliance, governance, audit, legal, consulting, or related experience required.
Minimum 5 years Leadership experience, including responsibility for developing people, programs, governance processes, and executive reporting required.

Nice To Haves

Advanced degree such as MBA, MS in Risk Management, JD, or equivalent graduate-level education preferred.
Professional certification such as Certification in Risk Management Assurance (CRMA), Certified Internal Auditor (CIA), Certified Regulatory Compliance Manager (CRCM), Certified Enterprise Risk Professional (CERP), Financial Risk Manager (FRM), Professional Risk Manager (PRM), Certified Information Systems Security Professional (CISSP), Certified Third Party Risk Professional (CTPRP), or comparable credential preferred.

Responsibilities

Lead the ERM Program and ensure alignment with strategic objectives, risk appetite, governance practices, and regulatory expectations.
Maintain and enhance the ERM framework, risk taxonomy, policies, standards, methodologies, and governance routines.
Serve as steward of the enterprise risk universe by maintaining the inventory of material risks and ensuring significant business activities, products, services, technologies, strategic initiatives, and third-party relationships are appropriately represented within the ERM framework.
Coordinate and facilitate enterprise-wide risk assessments and risk identification activities performed by business and risk owners, ensuring consistent methodology, aggregation, reporting, and oversight.
Promote clear risk ownership, accountability, escalation, and governance practices across the first and second lines of defense.
Facilitate management risk committee activities and support effective communication of enterprise risks to executive leadership and the Board.
Develop and maintain audience-appropriate reporting that provides a concise, meaningful view of enterprise risk exposures, emerging risks, key trends, and risk appetite performance.
Aggregate risk information from across the organization to provide an integrated view of the overall risk profile.
Develop dashboards, key risk indicators (KRIs), trend analyses, and other reporting tools that support governance and strategic decision-making.
Escalate material risk exposures, control concerns, risk appetite exceptions, and significant emerging risks through appropriate governance channels.
Translate complex risk information into practical and actionable business insights.
Coordinate the development and maintenance of enterprise risk appetite statements, thresholds, tolerances, and escalation protocols.
Facilitate oversight of enterprise KRIs and other metrics used to monitor risk exposures, concentrations, control concerns, and emerging trends.
Support governance processes for risk acceptance, risk mitigation, issue tracking, remediation oversight, and closure validation.
Provide independent challenge regarding risk assessments, residual risk determinations, remediation plans, due dates, and risk acceptance decisions.
Monitor the status of significant risk issues and ensure appropriate escalation and governance attention when necessary.
Provide second-line oversight, governance, and challenge across key enterprise risk disciplines, including operational risk, third-party risk, business continuity, operational resilience, model risk, fraud risk, information security risk, and emerging risks.
Assess the effectiveness of risk management practices and governance processes implemented by business and functional owners.
Coordinate risk information across risk programs to identify themes, concentrations, interdependencies, and emerging concerns.
Support continued maturation of risk and control self-assessments, risk inventories, issue management practices, and governance reporting.
Partner with Compliance, Bank Secrecy Act/Anti-Money Laundering (BSA/AML), Legal, Information Security, Finance, Internal Audit, Operations, Lending, and Technology leadership to promote consistent risk management practices.
Evaluate risks associated with new products, services, strategic initiatives, significant third-party relationships, business transformation efforts, and emerging technologies.
Monitor emerging risks associated with artificial intelligence (AI), automation, advanced analytics, digital transformation, and other evolving technologies.
Partner with business, technology, legal, compliance, and information security stakeholders to support appropriate AI governance, risk assessment, and responsible adoption.
Ensure emerging technology risks are incorporated into enterprise risk assessments, reporting, and governance processes.
Monitor industry developments and evolving regulatory expectations regarding AI, automation, analytics, and digital innovation.
Serve as a key ERM liaison during National Credit Union Administration (NCUA) examinations, independent reviews, audits, and other oversight activities.
Coordinate risk-related responses and remediation efforts arising from examinations, audits, independent reviews, and governance reviews.
Monitor industry developments, supervisory expectations, and emerging trends affecting ERM and financial services governance.
Maintain examiner-ready documentation demonstrating the design, operation, monitoring, and continuous improvement of the ERM Program.
Lead, coach, and develop enterprise risk personnel and build scalable practices, templates, reporting routines, and governance tools appropriate to the organization's size and complexity.
Promote a strong risk culture by reinforcing that business units own risk while ERM provides independent oversight, challenge, expertise, and governance support.
Provide ERM education and risk awareness support to executives, management, and staff as appropriate.
Model sound judgment, executive presence, ethical leadership, confidentiality, and sound governance practices.
Adhere to all Credit Union policies, procedures, and regulatory agency requirements. Participate in all required and recommended training and development including, but not limited to, Bank Secrecy Act training (BSA) and demonstrate attained knowledge. Participate on Credit Union teams, projects and strategic initiatives when the opportunity arises. Perform additional duties and special projects as assigned.
Embrace and apply HVCU’s guiding principles to all activities and responsibilities. This includes the Credit Union’s Mission, Vision, Core Values, Employee and Member Value Propositions, Sales and Service Model, and commitment to Lean Six Sigma practices. Support the Credit Union’s initiatives by demonstrating teamwork and professionalism.
Responsible for regular and predictable attendance including punctuality.