VP of Technology and Data Risk, Credit Risk, and Risk Administration

Position Overview

The Vice President of Technology and Data Risk, Credit Risk, and Risk Administration is responsible for overseeing the Citadel Credit Union’s technology and data risk management, credit risk management, and risk support functions. This role involves developing and implementing strategies to mitigate risks across various areas, including technology, data, credit, regulatory compliance, business continuity, and third-party relationships. The Vice President will work closely with executive leadership, department heads, and external stakeholders to ensure the credit union’s financial stability and operational resilience in the following areas:

Responsibilities

Technology and Data Risk Management

• Develop and implement a comprehensive technology risk management program.
• Assess and mitigate risks related to technology infrastructure, systems, and applications.
• Engage on information security measures and incident response plans.
• Ensure compliance with relevant technology standards and regulations.
• Develop and implement a data risk management framework.
• Protect sensitive member data and comply with data privacy regulations (e.g., GDPR, CCPA).
• Engage on any data breaches and incidents.
• Ensure data governance and quality standards are met.

Business Continuity Risk Management

• Facilitate the development and maintenance of business continuity plans to ensure the credit union can continue operations in the event of a disaster.
• Facilitate disaster recovery tests and exercises.
• Assess and mitigate risks related to business interruptions.

Credit Risk Management

• Design and oversee Citadel Credit Union’s credit risk management framework, including risk identification, assessment, measurement, monitoring, and reporting.
• Conduct regular assessments of the credit union’s credit risk exposure, identifying emerging risks, and evaluating the effectiveness of risk mitigation strategies.
• Oversee the implementation and effectiveness of internal controls related to credit risk management
• Establish key credit risk metrics and reporting standards to track and monitor the bank's credit risk profile
• Prepare and distribute regular credit risk reports.
• Conduct stress tests to assess the bank's resilience to adverse economic conditions and credit events.
• Contribute to the credit union’s capital adequacy level calculations
• Provide guidance on credit portfolio management, including diversification, concentration limits, and risk-based pricing

Regulatory Relations & Exam Management

• Manage relationships with regulatory agencies (e.g., NCUA, state regulators).
• Prepare for and coordinate regulatory examinations.
• Ensure compliance with all applicable regulations.
• Manage and administer governance, risk, and compliance (GRC) tools.

Third-Party Risk Management Program

• Develop and implement a third-party risk management program.
• Conduct due diligence on third-party vendors and suppliers.
• Manage contracts and agreements with third parties.
• Monitor and assess third-party performance.

Audit

• Oversee the internal audit function.
• Manage the relationship with 3rd party internal auditors.
• Ensure the effectiveness of internal controls.
• Identify and address operational and financial risks.
• Coordinate with external auditors to ensure compliance with financial reporting standards.
• Manage the relationship with 3rd party internal auditors.
• Address audit findings and recommendations. 

Policy Management

• Establish Citadel Credit Union’s Meta Policy (Policy on Policies)
• Develop, maintain, and distribute corporate policies and procedures for the credit union.
• Provide oversight for business unit policies and procedures.
• Maintain credit union policy warehouse.
• Ensure policies are aligned with regulatory requirements and best practices.

Risk Inquiry/Management Intake/Legal Affairs

• Manage risk inquiries and complaints from members and employees.
• Address member complaints related to the credit union's products and services.
• Coordinate with regulatory agencies and legal counsel as needed.
• Distribute inquiries and complaints to the appropriate business unit for response and resolution.  Track intake and resolution.
• Conduct investigations and take appropriate corrective actions.
• Manage relationships with external legal counsel.
• Provide legal advice and support on risk-related matters.
• Track and report on risk assessments and mitigation efforts.

<