Senior Director of Enterprise Risk Management

State of Oklahoma•Oklahoma City, OK

5d•Onsite

About The Position

The Senior Director of Enterprise Risk Management establishes and leads the Oklahoma Health Care Authority’s enterprise risk management function. The role develops an agency-wide view of risk by identifying risks that intersect, compound, or fall between functions and communicating the most important risks and their implications to Executive Staff. The position also leads Administrative Services, providing operational support across facilities, physical security, emergency preparedness, workplace safety, continuity operations, and Workers’ Compensation. The position designs and maintains the agency’s ERM framework, risk register, assessment processes, governance, and executive reporting. It leads business continuity and resilience planning, coordinates incident reviews and corrective actions, supports coordination of third-party risk information, and identifies emerging risks spanning multiple divisions. The Senior Director supervises and develops assigned staff, including the Administrative Services Director, manages the function’s workplan and budget, and serves as the agency’s point of contact for enterprise risk questions from executive leadership and, as directed by the CEO, the Board and external oversight entities. The role is based at the OHCA office at 4345 N Lincoln Blvd, Oklahoma City, Oklahoma. Work is typically performed in an office setting, and being present at the office is an essential function. Job-related travel is required.

Requirements

Bachelor’s degree in business administration, public administration, risk management, finance, or a related field, and 8 years of progressively responsible experience in enterprise risk management, internal audit, compliance, business continuity, or a closely related field, including at least four years in a leadership role with supervisory responsibility; an equivalent combination of education and experience may be considered.
Knowledge of enterprise risk management frameworks, risk assessment methodologies, business continuity planning, incident management, corrective action processes, and operational oversight of facilities, security, safety, and Workers’ Compensation programs.
Skill in strategic risk assessment; facilitating executive committees and cross-divisional collaboration; developing risk registers, dashboards, and executive briefings; and communicating complex risk information to support organizational decision-making.
Ability to provide strategic direction, lead and develop operational teams, influence stakeholders across organizational functions, establish credibility and trust, exercise sound judgment in risk escalation, maintain confidentiality, and align risk management initiatives with agency objectives.
Demonstrated Korn Ferry competencies of Strategic Mindset, Manages Complexity, and Instills Trust.
Resume/CV must include complete work and education history.
Must be willing to complete all job-related travel.
Must be present at the office as an essential function of the position.

Nice To Haves

Master’s degree in a related field.
Professional certification such as RIMS-CRMP, CBCP, or CIA.
Experience in state government, Medicaid, health care, or another regulated public-sector setting.
Experience establishing a new risk function or framework.
Working knowledge of COSO ERM or ISO 31000.

Responsibilities

Design, implement, and maintain the agency’s enterprise risk management framework, including risk categories, assessment methodology, and rating criteria.
Build and maintain the enterprise risk register, assign owners to risks, and track mitigation through completion.
Establish and facilitate the enterprise risk committee and define escalation thresholds for Executive Staff.
Conduct enterprise risk assessments and monitor risks on an ongoing basis.
Prepare executive reporting on top enterprise risks, trends, overdue mitigations, and decisions needed.
Identify critical agency functions and their dependencies on systems, vendors, and internal resources.
Lead the development, testing, and maintenance of continuity, recovery, and emergency preparedness plans.
Coordinate exercises with divisions and incorporate lessons learned into updated plans.
Provide leadership and direction to Administrative Services, including facilities, physical security and access, workplace safety, and space and assets.
Oversee Workers’ Compensation as a risk function, monitoring incident and claims trends, corrective actions, and financial and liability exposure.
Report Administrative Services activity in risk terms, tracking and escalating incidents, trends, and exposure.
Maintain a consistent agency-wide process for logging and reviewing significant incidents and systemic issues.
Lead or coordinate after-action reviews and ensure mitigation commitments are documented, assigned, and followed through.
Track unresolved corrective actions and escalate overdue or recurring items.
Coordinate identification and assessment of enterprise exposure associated with critical vendors, contractors, partners, and organizational dependencies.
Work with Contracts, Compliance, Technology/Cybersecurity, and Legal to share vendor risk information and reflect it in the risk register; this does not replace contract management or compliance monitoring.
Identify risks spanning multiple divisions or not visible from any single functional area, convene affected leaders, frame combined exposure, and present options and recommendations to Executive Staff.
Supervise, develop, and evaluate assigned staff, including the Administrative Services Director.
Manage the function’s workplan and budget.
Serve as the agency’s point of contact for enterprise risk questions from executive leadership and, as directed by the CEO, the Board and external oversight entities.
Perform other duties as assigned.