VP of Risk Management

Heritage Financial Credit Union • City of Middletown, NY

73d • $157,000 - $175,000 • Onsite

About The Position

Heritage Financial Credit Union is seeking a strategic visionary to lead its Enterprise Risk Management program as the Vice President of Risk Management. This role is crucial in shaping a comprehensive risk framework to protect the Credit Union's financial health, reputation, and regulatory standing, while also supporting its mission to empower members and foster growth. The Vice President will provide strategic leadership for operational, regulatory, vendor, liquidity, and strategic risks, ensuring alignment with growth objectives and a member-focused mission. Responsibilities include guiding policy and procedure changes, strengthening internal controls, supporting training and risk awareness, streamlining processes, mentoring staff, and promoting a proactive risk culture. This position is a member of the Senior Management team, advising on emerging risks and guiding the establishment of mitigation controls. The role reports to the CFO, serves as a strategic advisor to Executive Management, and oversees Risk, Compliance, Vendor Management, and Legal functions, while partnering on Business Continuity, Cybersecurity, and Data Governance initiatives.

Requirements

• 4-year college degree preferred plus 5-10 years of experience in bank compliance, security, AML/BSA/Fraud, and cybersecurity or a comparable combination of education and experience.
• Comprehensive knowledge of the federal regulatory framework governing federally chartered credit unions, including the Federal Credit Union Act, NCUA rules and regulations, and the CAMEL(S) rating system used in examinations.
• Fluency in key consumer compliance laws; including BSA/AML, OFAC, TILA, ECOA, FCRA, and TISA — as well as NCUA's prudential risk guidelines covering interest rate, liquidity, and concentration risk.
• Familiarity with NCUA's Prompt Corrective Action (PCA) framework, Supervisory Committee requirements, and applicable Dodd-Frank provisions.
• Working knowledge of FFIEC cybersecurity guidance, third-party vendor management expectations, and model risk management best practices.
• Experience navigating NCUA examinations is essential.
• Excellent communication/influence skills to clearly communicate complex information both written and verbally are required, including reports; presentations; group facilitation skills; ability to develop strong professional relationships and networking internally/externally.
• Experience providing leadership and influential oversight of others required.
• Ability to project a professional appearance and positive attitude at all times.

Nice To Haves

• Certified Fraud Examiner (CFE)
• Association of Certified Anti Money Laundering Specialist (ACAMS)
• Certified Information Security Manager (CISM)

Responsibilities

• Lead the development, implementation, and continuous enhancement of the Credit Union’s Enterprise Risk Management framework, including operational, regulatory, vendor, physical security, and strategic risk components.
• Establish and maintain risk assessment methodologies that identify, evaluate, and monitor enterprise-wide risk exposures.
• Develop tools, processes, and reporting mechanisms that allow leadership to measure, monitor, and communicate risk across the organization.
• Ensure alignment of risk management practices with regulatory expectations and industry best practices.
• Ensure enterprise risk management practices support the Credit Union’s ability to deliver consistent, secure, and high-quality services to members while maintaining operational resiliency and protecting member assets.
• Support the Credit Union’s ability to responsibly innovate, expand services, and deepen community relationships while maintaining a safe and sound operating environment.
• Partner with business leaders to identify, assess, aggregate, and document risks and controls across operational areas, including new or modified products, services, delivery channels, regulatory requirements, and third-party relationships.
• Evaluate operational and strategic risks associated with new products, services, delivery channels, and partnerships to ensure they are introduced responsibly and continue to deliver value to members and the communities the Credit Union serves.
• Monitor key risk indicators and performance metrics to identify emerging trends or potential areas of exposure.
• Communicate risk assessment results and recommendations to executive leadership, governance committees, and business unit leaders.
• Support the development and execution of stress testing and contingency planning activities in coordination with relevant departments.
• Recommend and guide policy and procedural changes that strengthen the Credit Union’s internal control environment and risk posture.
• Ensure enterprise policies and risk management practices remain aligned with regulatory guidance and organizational strategy.
• Collaborate with Information Technology leadership to strengthen cybersecurity controls and support data governance initiatives.
• Support enterprise governance practices that reinforce the Credit Union’s fiduciary responsibility to safeguard member assets and maintain institutional stability.
• Serve as a consultative partner to executive and senior leadership in evaluating business risks and implementing appropriate mitigation strategies.
• Provide guidance to business units in identifying, evaluating, and managing operational and regulatory risks.
• Provide risk advisory support for major initiatives including system implementations, vendor management initiatives, strategic projects, and potential mergers or acquisitions.
• Provide risk advisory support to leadership that balances prudent risk management with the Credit Union’s mission to deliver accessible financial services and meaningful value to its membership and communities.
• Serve as a liaison between the Credit Union and regulatory agencies regarding enterprise risk management matters.
• Support regulatory examinations and provide guidance to management on regulatory risk expectations.
• Assist leadership in maintaining a risk governance framework consistent with regulatory expectations and sound financial institution practices.
• Promote a strong and proactive risk culture throughout the organization through education, communication, and collaboration.
• Promote an organizational understanding that effective risk management strengthens the Credit Union’s ability to serve members, protect their financial well-being, and sustain long-term community impact.
• Identify and coordinate training initiatives to strengthen organizational awareness of risk management principles and responsibilities.
• Build strong working relationships across departments to facilitate effective risk identification and resolution.
• Provide leadership and development support to staff within the Risk Management and Compliance functions.

Benefits

• Paid Time Off & Paid Federal Holidays
• Medical, Dental, Vision & Life Insurance
• Employee Assistance Program
• Flexible Spending Accounts (FSA)/Health Savings Accounts (HSA)
• Supplement Benefits: Critical Illness Care, Identity Theft Protection, Pet Insurance, Legal Services
• BenefitsPlus+ perks program (travel, entertainment, gift cards and so much more)
• CareNet - benefits concierge service
• 401(k) with 5% Employer Match
• Educational Assistance
• Paid Time to Volunteer
• HFCU Logo-wear

What This Job Offers

• Job Type: Full-time
• Career Level: Executive