Director of Risk Management

Position Overview

Triad Financial Services is a leading provider of financial services and solutions, serving clients nationwide. The Risk Department is currently seeking an experienced Director to lead our organization's Risk Department. The Director will be responsible for overseeing and enhancing the company's internal controls and process improvement initiatives and ensuring that Triad adheres to legal standards and company policies through its control functions. This strategic role reporting directly to the General Counsel, involves overseeing the entire risk program, supporting effective Governance, Risk and Compliance ("GRC") processes, assessing risks and controls, process improvement and providing guidance on risk management. The ideal candidate will be instrumental in establishing robust controls and reporting, driving a culture of risk awareness, and maintaining the integrity of our operations. Join us in upholding the highest standards of compliance, risk management and process improvement excellence.

Responsibilities

Governance Oversight:

• Develop and enhance governance frameworks, programs, policies, and procedures to ensure compliance with applicable laws, regulations, and industry standards.
• Coordinate governance activities, including board meetings, committee meetings, and reporting to stakeholders.
• Facilitate communication between the board, executive management, and other stakeholders on risk, process improvement and governance matters.

Risk Management:

• Identify, assess, and prioritize risks across the organization, considering both internal and external factors.
• Manage all controls and their relationships to other elements of the GRC.
• Develop and maintain the centralized process and repository for issues and incidents as well as the system definitions for enterprise tracking, reporting and resolution.
• Develop and maintain the centralized control library, including mapping within GRC tool back to Policies, Procedures, QA/QC, Process maps, and legal requirements.
• Assess the effectiveness of the Control Environment.
• Lead and manage the Enterprise Risk assessment and related strategic planning exercises.
• Lead and manage Risk and Control Self Assessments and Consumer Compliance Risk Assessments.
• Guide and inform business areas on risk management best practices.
• Develop risk mitigation strategies and action plans in collaboration with business units and functional teams.
• Monitor risk exposure, track risk indicators, and report on risk management activities to senior management and relevant stakeholders.
• Recommend risk mitigation strategies and actions, including insurance, internal controls, or business continuity plans.
• Manage programs for New Products and Services and Incident response.
• Develop and maintain a Model Risk Management Program.
• Manage, hire, train, and develop risk department staff.
• Manage vendor and third-party risk, coordinate external audits.
• Partner with business managers to promote, enhance and maintain the three lines of defense model.

Compliance Management:

• Stay updated on regulatory requirements, industry trends, and best practices related to risk and compliance. Recommend appropriate actions or adjustments to GRC program.
• Conduct compliance risk assessments, audits, and reviews to ensure adherence to policies, regulations, and standards.
• Develop and deliver compliance training programs for employees to promote awareness. and adherence to compliance requirements.

Policy Development and Implementation:

• Draft, review, and update policies and procedures related to governance, controls, risk management, and compliance.
• Work with stakeholders to ensure effective implementation and enforcement of policies throughout the organization.
• Monitor policy compliance, conduct gap analysis, and recommend improvements as needed.

Reporting and Documentation:

• Design, prepare and present reports, dashboards, and metrics related to GRC activities for senior management and regulatory bodies.
• Maintain accurate and up-to-date documentation of GRC processes, policies, assessments, and remediation efforts, define and enforce system documentation, as well as the process.
• Assist in responding to inquiries, audits, and regulatory requests related to GRC matters

Continuous Improvement:

• Identify opportunities for process improvements, automation, and optimization within the GRC function.
• Lead process improvement projects to enhance operational efficiency and effectiveness.
• Collaborate with cross-functional teams to implement enhancements and streamline GRC workflows.
• Stay abreast of industry developments and emerging technologies to enhance GRC practices and capabilities.
• Perform other duties and responsibilities as assigned by the General Counsel or Management.

Qualifications

• Bachelor's degree in business administration, Finance, Risk Management, Engineering or related field; Master's of business administration (MBA), advanced degree or professional certification (e.g., CRISC, CISA, CISM, CISSP, CRCM, CAMS, etc.) is preferred.
• Proven experience (5 + years) in GRC process improvement or a related field, with a focus on developing and implementing GRC frameworks.
• Experience with Lean Six Sigma, Kaizen or other continuous improvement methodology.
• Strong knowledge of regulatory requirements, risk assessment methodologies, and compliance standards (e.g., GDPR, COSO, SOX, PCI DSS, etc.).
• Excellent analytical skills with the ability to assess complex situations, identify risks, and recommend effective solutions.
• Proficiency in Onspring GRC software, risk management software, and Microsoft Office Suite.
• Exceptional communication, interpersonal, and stakeholder management skills.
• Ability to work independently, prioritize tasks, and meet deadlines in a fast-paced environment
• Prior experience conducting risk and control self-assessments ("RCSA")
• Prior experience preparing reports and presenting to executive leadership.
• Prior experience leading teams of risk and compliance professionals.

#PM22

#ID

Equal Opportunity Employer

This employer is required to notify all applicants of their rights pursuant to federal employment laws.
For further information, please review the Know Your Rights notice from the Department of Labor.