Chief Risk Officer
Listed on 2026-02-01
-
Management
Risk Manager/Analyst -
Finance & Banking
Risk Manager/Analyst, Financial Compliance
Where it all began…
In 1951 SF Fire Credit Union first opened its doors from a modest 10′ × 15′ office space in 17 Engine. It was from those humble beginnings—where everyone pitched in to help one another in their community—that the organization forged its way of business forever. Today, the San Francisco-based credit union has grown to $1.7B in assets and a membership that extends from the regional firefighters we trace our roots back to throughout our many neighbors in San Francisco, San Mateo and Marin Counties.
Our members benefit from the ideas and principles that have shaped us:
Shared trust, continuous innovation of products and services, competitive rates, and excellent member service. These qualities foster a true sense of member‑ownership and strengthen the credit union’s bond with the people for whom this credit union was created.
There are a few things we look for those we hire at SF Fire Credit Union, regardless of role or team.
- Be Personal – Walk the Member/Employee Path
- Be a Leader – Empower, Collaborate, Own
- Be Outside the Box – Innovate, Educate, Engage
- Be Real – Integrity and Transparency Matter
- Be the Connection – Serve our Community
Second, will they thrive in a culture like ours, where we default to trust, embrace feedback, and desire to innovate? Finally, do they share our vision to help empower members to accomplish their dreams and build lasting financial security in whatever way is most relevant to their role?
What it feels like…Most days it feels more like going to work with a big family. Whether it’s a pot luck lunch, baking birthday cakes for colleagues in the kitchen, or after‑hours get together, we’re here to do a great job and have a good time while doing it! We value a good sense of humor, are motivated by a higher purpose, and always bring an “in‑this‑together” attitude.
While we’re driven to do great work, we also value real work/life balance.
The Chief Risk Officer (CRO) is a key member of the executive leadership team responsible for the overall management of risk across the credit union. This includes enterprise risk management, compliance, internal audit, vendor management, corporate insurance, business continuity management, records retention, and fraud risk management. The CRO will ensure that the credit union operates within its risk appetite, adheres to regulatory requirements, and protects its members’ assets while supporting sustainable growth and innovation.
WhatYou Get To Do:
- Develop and implement a robust enterprise risk management (ERM) framework that identifies, assesses, mitigates, and monitors risks across the credit union.
- Advise the CEO and board of directors on risk exposures and mitigation strategies, providing clear and actionable insights.
- Collaborate with executive team members and department leaders to integrate risk management practices into day‑to‑day operations and strategic planning.
- Oversee the internal audit function, ensuring it operates independently and effectively to assess the adequacy and effectiveness of the credit union’s internal controls.
- Manage co‑sourcing partners to execute against the audit plan and to ensure that control deficiencies are identified in a similar and thorough manner.
- Develop and execute a risk‑based internal audit plan that addresses key operational, financial, and compliance risks.
- Report audit findings and recommendations to the CEO and board, ensuring timely resolution of identified issues.
- Manage the third‑party risk management program, ensuring that third‑party relationships are adequately assessed for sufficient controls (especially information security), risks and aligned with the credit union’s strategic goals.
- Oversee the records retention program, ensuring that all records are maintained, stored, and disposed of in compliance with legal and regulatory requirements.
- Develop and implement policies and procedures for records management, ensuring the security and confidentiality of sensitive information.
- Conduct regular reviews of the records retention program to ensure ongoing compliance and operational…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).