Vice President, Risk & Compliance

Altana Federal Credit Union•Billings, MT

About The Position

The Vice President, Risk & Compliance is Altana Federal Credit Union’s senior executive responsible for enterprise-wide risk management and governance. Reporting directly to the CEO and serving on the Senior Leadership Team, the VP works with the CEO, senior leaders, and the Board of Directors to establish risk strategy and governance practices that support Altana’s mission, strategic plan, and long-term growth. The position provides independent oversight across regulatory compliance, BSA compliance, third-party risk, operational risk, and fraud risk. Experience with information security governance, enterprise risk management, and business continuity planning is highly desirable. The VP serves as a strategic advisor to senior leadership and the Board, supporting balanced decisions on member service, operational excellence, regulatory requirements, and organizational objectives. The VP administers the credit union’s Compliance Management System and BSA/AML compliance program; monitors applicable laws, regulations, guidance, fraud, and financial-crime risks; coordinates examinations and audits; and oversees corrective actions and remediation. The role administers the Third-Party Risk Management Program, establishes vendor governance and due diligence standards, and oversees assessment and monitoring of risks and vendor performance. The VP collaborates on business continuity and organizational resilience, maintains effective continuity and incident-response plans, coordinates testing, and leads enterprise response during significant disruptions. The position develops and maintains Altana’s Enterprise Risk Management framework, risk inventory, and risk register; leads enterprise risk assessments and reporting; develops Key Risk Indicators and dashboards; and facilitates regular risk discussions with senior leadership. The VP advises leadership on risk appetite and tolerance, evaluates risk associated with strategic initiatives and organizational change, and maintains direct and unrestricted access to the Board and relevant committees on significant risk matters. The role also supports cybersecurity governance and internal controls, provides independent assessments of controls and risk practices, and reports on risk exposure, emerging risks, mitigation, and trends. The VP provides strategic leadership for assigned risk-related functions, including recruitment, employee development, coaching, performance management, succession planning, and engagement. The role manages three direct reports, establishes departmental goals, develops and manages budgets, and evaluates investments in risk technologies, monitoring tools, and governance resources. Altana describes its culture as relationship-focused and guided by CARES values: Connection, Altruistic, Revolutionary, Empowering, and Synergistic.

Requirements

Bachelor’s degree in Business Administration, Finance, Accounting, Risk Management, Law, Economics, or a related field.
At least 10 years of progressively responsible experience in risk management, compliance, audit, enterprise risk, financial services, or related disciplines.
At least three years of executive or senior leadership experience.
Experience presenting to executive leadership and governing boards.
Credit union or banking experience.
Strong understanding of enterprise risk management principles and governance frameworks.
Ability to assess strategic, operational, financial, compliance, cybersecurity, reputational, and emerging risks and balance prudent risk management with organizational growth objectives.
Demonstrated ability to influence executive decision-making and communicate risk concepts in a practical, business-focused manner.
Strong executive presence and board presentation skills.
Comprehensive knowledge of NCUA regulations, BSA/AML requirements, consumer financial protection regulations, Fair Lending requirements, UDAAP, vendor management guidance, and information security and cybersecurity governance expectations.
Exceptional written, verbal, and presentation skills; ability to build partnerships and influence outcomes across organizational levels; and ability to facilitate discussions about risk ownership and accountability.

Nice To Haves

Master’s degree.
One or more of the following certifications: Certified Bank Secrecy Act Professional (CBSAP), Certified Regulatory Compliance Manager (CRCM), Certified Anti-Money Laundering Specialist (CAMS), Certified Information Systems Auditor (CISA), Certified Risk and Information Systems Control (CRISC), Certified Internal Auditor (CIA), or Certified Enterprise Risk Professional (CERP).
Experience with information security governance, enterprise risk management, and business continuity planning.

Responsibilities

Administer the Credit Union’s Compliance Management System and ensure compliance with applicable federal and state laws, regulations, and regulatory guidance.
Monitor and communicate legislative and regulatory developments and assess their organizational impacts.
Coordinate regulatory examinations and compliance audits; execute corrective action plans and regulatory issue remediation.
Administer the Bank Secrecy Act/Anti-Money Laundering compliance program and oversee monitoring of fraud, financial crimes, suspicious activity reporting, and related controls.
Evaluate emerging financial-crime risks, recommend mitigating strategies, and provide executive oversight of fraud prevention and detection.
Administer the Third-Party Risk Management Program and establish vendor, service-provider, and strategic-partner governance and due diligence standards.
Evaluate third-party operational, contractual, reputational, cybersecurity, and compliance risks; monitor and report on vendor performance and risk exposure.
Collaborate on business continuity and organizational resilience programs; maintain continuity, recovery, crisis management, and incident-response plans; coordinate testing and readiness exercises; and lead enterprise responses during significant disruptions.
Partner with Information Technology leaders on cybersecurity governance, assess operational risks, and incorporate risk considerations into business processes, technology initiatives, and organizational changes.
Support development of internal controls and risk-mitigation practices and provide independent assessments of their adequacy.
Serve as management liaison to Board-level risk oversight activities and maintain direct, unrestricted access to the Board and relevant Board Committees regarding significant risk matters.
Prepare and present reports on enterprise risk exposure, emerging risks, mitigation activities, and risk trends; advise the Board and senior leadership on significant risk events and potential impacts.
Serve on the Senior Leadership Team; participate in organizational strategy development, execution, and evaluation; and promote risk management as a strategic business discipline.
Evaluate enterprise risks associated with mergers, acquisitions, strategic partnerships, fintech relationships, emerging technologies, artificial intelligence initiatives, and major organizational change efforts.
Advise leadership on organizational risk appetite and tolerance and challenge decisions when risk exposure exceeds established tolerances.
Develop, implement, and maintain the Enterprise Risk Management framework and processes for identifying, assessing, measuring, monitoring, and mitigating enterprise risks.
Maintain an enterprise risk inventory and risk register; lead enterprise-wide risk assessments, risk reporting, and risk response coordination during significant events.
Develop and monitor Key Risk Indicators and risk dashboards, facilitate regular risk discussions with senior leadership, and integrate risk evaluation with strategic planning.
Build collaborative relationships across departments and foster accountability, transparency, sound risk management, ethical decision-making, and organizational integrity.
Develop, coach, and mentor risk, compliance, and governance professionals; champion Altana’s CARES values and leadership expectations.
Provide strategic leadership and direction for assigned risk-related functions, manage three direct reports, and oversee recruitment, development, coaching, performance management, succession planning, and employee engagement.
Establish departmental goals aligned with organizational objectives; develop and manage departmental budgets; and recommend investments in risk technologies, monitoring tools, and governance resources.