Senior Director, Integrated Risk Management

VSP Vision Care•Cynthian, OH

2d•$126,000 - $191,625

About The Position

The Senior Director, Integrated Risk Management leads the Enterprise Risk Management and Business Resilience teams and is accountable for operating and continuously improving an integrated risk framework across the enterprise. The role brings the framework, taxonomy, scoring methodology, impact matrix, and resilience model to all four pillars and every enterprise function, and runs the associated assessment and resilience cycles. It sits in the Second Line of Defense, advising First Line business leaders while maintaining independent governance oversight. The role also coordinates the function’s Aligned Assurance Model, bringing assurance activity into a synchronized plan. The position leads and develops the teams responsible for enterprise risk, business continuity, and crisis management; establishes work standards; builds team depth and career development; and advocates for the function across the enterprise. It operates enterprise risk assessment, issue management, and resilience programs; maintains consistent framework standards; develops risk appetite and tolerance with business and finance leaders; and provides independent oversight and practical guidance to First Line leaders. The role directs business continuity and crisis management using a value-chain resilience model, oversees incident classification and escalation, and leads exercise and testing programs. It maintains enterprise dependency and loss scenario resources and ensures findings lead to systemic control improvements. It coordinates assurance work with Internal Audit and partners across information security, compliance, privacy, quality, and health and safety to align calendars, issue handling, reporting, and information collection. The Senior Director leads strategic risk management by identifying risks to enterprise objectives, coordinating risk input with Corporate Strategy, supporting transformation initiatives, and contributing to scenario and stress analysis for strategic and capital planning. The role turns risk and resilience information into actionable executive and Board reporting, presents to governance committees and the Audit and Risk Committee, and monitors regulatory developments and emerging exposures.

Requirements

Bachelor’s degree in a related field such as Risk Management, Finance, or Business, or equivalent experience.
Minimum of 3 additional years of experience related to the functional area.
Minimum of 6 years of management experience in risk, audit, or compliance.
Direct experience across Enterprise Risk Management, Business Continuity, Crisis Management, and Internal Audit, including having operated these programs.
Experience building, deploying, and working in an aligned assurance model based on the three lines of defense.
Experience presenting to and working with a Board and an Audit and Risk Committee.
Experience in a matrixed, ecosystem-oriented organization where influence and partnership are important.
Experience in strategic risk management and coordinating enterprise risk, corporate strategy, and enterprise transformation.
Deep understanding of global risk profiles, emerging risks, and interdependencies.
For remote or hybrid work, demonstrate a high level of engagement in virtual environments, including maintaining camera presence during meetings.

Nice To Haves

Five years of experience specifically within a Second Line of Defense capacity in a complex organization.
Experience in insurance, manufacturing, supply chain, retail, or technology industries.

Responsibilities

Lead and grow the Enterprise Risk Management and Business Resilience teams, covering enterprise risk, business continuity, and crisis management.
Set direction and standards of work for the teams.
Build team depth, own career development, create development opportunities, and advocate for the function across the enterprise.
Put the integrated risk framework into operation across all four pillars and every enterprise function, including enterprise risk assessment, issue management, and resilience.
Run the assessment lifecycle, including the full enterprise cycle, alternate-year refresh, quarterly maintenance, and event-triggered targeted assessments.
Continuously improve the program by strengthening effective practices, closing gaps, and incorporating improvements into routine work.
Protect consistent use of the framework, including a common taxonomy, scoring scale, register, and issue standard across entities and functions.
Build the enterprise risk appetite and tolerance framework with business and finance leadership and implement appetite monitoring.
Provide independent oversight of First Line risk activity and advise business leaders on strategic shifts, transactions, product launches, and operational changes.
Provide the First Line with tools, guidance, and training to meet its risk and control responsibilities.
Rebuild stakeholder confidence through plain-language communication, integration into business cycles, and follow-through on input received.
Run business continuity and crisis management using a value-chain resilience model based on value streams, critical processes, and dependencies.
Own incident classification and escalation against defined thresholds.
Direct the exercise and testing program and ensure findings drive systemic control improvement.
Keep the enterprise dependency register and loss scenario library current as exposure changes.
Coordinate the function’s Aligned Assurance Model by synchronizing assurance activity and maintaining a shared view of the control environment.
Partner with Internal Audit on testing schedules and shared assessment data so Second Line monitoring informs Third Line planning.
Work across information security, compliance, privacy, quality, and health and safety to align calendars, issue handling, and reporting.
Reduce assessment and audit fatigue by simplifying business information collection and governance reporting.
Identify risks to enterprise strategic objectives and surface risk-bearing planning assumptions not captured in the register.
Coordinate Enterprise Risk Management and Corporate Strategy so risk input informs decisions while they remain open.
Partner with enterprise transformation initiatives to provide risk and resilience input to major programs, integrations, and platform changes from the start.
Support scenario and stress analysis, including severe scenarios, and feed results into strategic and capital planning.
Turn risk and resilience information into reporting executives and the Board can act on.
Present to governance committees, the Board, and the Audit and Risk Committee.
Track regulatory developments and emerging exposures, including artificial intelligence, geopolitical and supply chain risk, and climate, and keep the framework current.
For remote or hybrid roles, maintain engagement in virtual environments, including camera presence during meetings.