FVP Enterprise Risk Lead
Listed on 2026-02-01
-
IT/Tech
Cybersecurity -
Finance & Banking
Full-time on-site office setting in Los Angeles, CA
POSITION OVERVIEWThe Enterprise Risk Lead (FVP) is a hands-on role that partners with the CRO to design, implement, and oversee the Bank’s Enterprise Risk Management (ERM) framework. This position provides subject matter expertise across multiple risk disciplines, including BSA, Compliance, Business Continuity Planning (BCP), Third-Party Risk Management, Model Governance, and Enterprise-wide Risk Governance. The role ensures that risk programs are integrated, effective, and aligned with regulatory expectations and strategic objectives.
This position actively participates in risk-related committees and assists the CRO with requests from regulators, auditors, and senior management.
Adheres to Bank policies and procedures and complies with all State and Federal banking regulatory requirements, including but not limited to Sarbanes-Oxley Act, Bank Secrecy Act, Anti-Money Laundering, OFAC, Fair Lending, Customers Right to Privacy Act, Regulation D, Regulation DD/Truth in savings, USA Patriot Act, CIP, Elder Care, Sexual Harassment, Information Security and Privacy requirements as they pertain to this position.
This position is responsible for escalating suspicious activity to the BSA.
- Assist the CRO with the development, implementation, and continuous improvement of the ERM framework.
- Coordinate enterprise-wide risk assessments and maintain risk appetite statements.
- Prepare risk dashboards, heat maps, and reports to senior management and the Board.
- Assist the CRO with the risk governance processes, including policy development and compliance monitoring.
- Ensure timely remediation of findings and maintain strong relationships with regulators.
- Promote a strong risk and compliance culture across the organization.
- Direct QA reviews for BSA/AML compliance programs to ensure adherence to regulatory standards.
- Identify systemic issues and recommend corrective actions.
- Collaborate with Audit teams on remediation efforts.
- Own the Bank’s BCP program, including policy updates, scenario planning, and resilience strategies.
- Coordinate annual testing exercises and ensure readiness for operational disruptions.
- Provide guidance to business units on continuity planning and disaster recovery.
- Support the CRO in monitoring compliance with applicable laws, regulations, and internal policies.
- Review and update compliance-related policies and procedures to ensure alignment with regulatory changes.
- Partner with Compliance and Internal Audit teams to address findings and implement corrective actions.
- Provide guidance on regulatory requirements during product development and operational changes.
- Support the CRO in monitoring the Bank’s Information Security Risk Management program in coordination with IT Security.
- Ensure compliance with FFIEC cybersecurity guidelines and other regulatory requirements.
- Review and report on cyber risk metrics, vulnerability assessments, and incident response readiness.
- Participate in cybersecurity risk assessments and ensure remediation of identified risks.
- Support development of security awareness training for employees.
- Maintain the Bank’s Model Risk Management framework in compliance with regulatory guidance (e.g., SR 11-7).
- Review model inventory, validation, and performance monitoring processes.
- Coordinate independent model validations and ensure timely remediation of findings.
- Prepare model risk reports for senior management and regulators.
- Work with business units to ensure proper documentation, governance, and approval of models.
- Prepare comprehensive risk and compliance reports for executive leadership, committees, and regulators.
- Drive continuous improvement in risk processes, controls, and reporting.
- Chair or actively participate in risk-related committees (e.g., Enterprise Risk Committee, Vendor Risk Committee).
- Oversee vendor risk assessments, onboarding, and ongoing monitoring.
- Ensure compliance with internal policies and regulatory requirements for outsourcing.
- Partner with Procurement and Legal to mitigate…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).