AVP, Risk Management

Chevron Federal Credit Union is one of the top-run credit unions in the country – and one of the largest, with $5 billion in assets. Yet our corporate culture is not stuffy: the Team Spirit Committee runs fun activities and charitable events throughout the year, and work-life balance, mutual respect, diversity, and providing a voice for every employee are all important to us. As you might imagine, we provide competitive pay and great benefits, including:

• Bonus/incentives for all regular employees
• 401(k) with 8% company contribution
• Medical, dental, and vision insurance for employees and dependents paid at 80%
• PTO and paid sabbaticals
• Tuition reimbursement

GENERAL SUMMARY

Directly oversees the Credit Union’s Enterprise Risk Management, Business Information Security, and Vendor Management programs and associated risk management activities to ensure a comprehensive approach to the management of risk in all facets of our operation.

Position Duties & Functions

• Responsible for directing, executing, and managing the Credit Union’s Enterprise Risk Management (ERM) program, Business Continuity program (BCP), Business Information Security Program (BIS) and Vendor Management (VM).  Also responsible for assessment and mitigation of enterprise risk.
• Establishes and promotes the ERM risk framework and directs and coordinates an enterprise-wide risk management program that includes all aspects of risk to the organization.
• Develops and maintains a trusted, collaborative relationship with operational and senior management to promote an appropriate level of engagement in ERM, BCP, BIS and VM with a high level of credibility for the programs.
• Creates and delivers risk reporting presentations and activities of the ERM, BCP, BIS and VM to senior management and risk management committees and supports further risk reporting to the Supervisory Committee or Board of Directors.
• Directs and contributes to providing a comprehensive set of ERM, BCP, BIS and VM tools, practices, and policies to manage and report enterprise risks, including the analytical, systems, and data management capabilities to support the programs; consolidating and integrating tools and risk functions, and implementing a set of risk metrics and reports, included losses and incidents, key risk exposures and early warning indicators.
• Directs the development and delivery of ERM/BCP/BIS/VM training programs. Continuously assesses changes in the program content to ensure ongoing effectiveness.
• Directs the development and annual planning for ERM, BCP, BIS and VM activities, budgets, and resources.
• Chairs the ERM Risk Management Committee.
• Chairs or provides input into the Information Security Council.
• Manages risk incidents

Other duties as assigned

 POSITION REQUIREMENTS

 EXPERIENCE and EDUCATION

• 10 years’ professional experience with 6-7 years related enterprise risk management, audit, project management, or related experience with experience in developing and operating an ERM program and/or performing a broad-based risk management or strategic risk consulting role for senior management.
• Strong knowledge of enterprise risk management and internal control standards required (e.g. ERM frameworks).
• Experience with risk quantification preferred. Knowledge of education or regulatory industry operational processes and/or experience preferred.
• Excellent communication/influence skills to clearly communicate complex information both written and verbal, including reports, presentations, and groups facilitation.
• Ability to develop strong professional relationships and networking internally/externally.
• Experience supervising others.
• Bachelor’s degree in related field from four-year college or university required.
• Equivalent combination of education and experience may substitute for stated qualifications.
• Professional audit and/or project management experience are preferred.

KNOWLEDGE and SKILLS

• Continuously maintains working knowledge of information technology, particularly how systems and applications integrate with business processes and operations.
• Excellent communication/influence skills to clearly communicate complex information both written and verbal, including reports, presentations, and group facilitation and to develop strong professional relationships and networking internally/externally.
• Proper discretion and maturity in facilitating sometimes uncomfortable discussions with senior management on confidential and sensitive risk topics.
• Business acumen to grasp “big picture” of the organization with