Senior Director, Integrated Risk Management

This is a fully remote position, open to applicants in United States.

📋 Description

• Lead and develop the Enterprise Risk Management and Business Resilience teams, encompassing enterprise risk, business continuity, and crisis management.

• Establish direction and work standards while enhancing team capabilities.

• Take charge of team career growth and create impactful development opportunities.

• Promote the function throughout the enterprise and enhance visibility with leadership and business partners.

• Implement the integrated risk framework across all four pillars and every enterprise function.

• Oversee the enterprise risk assessment lifecycle, including complete enterprise cycles, biennial refreshes, quarterly maintenance, and event-driven assessments.

• Continuously enhance the risk program and address gaps through regular operations.

• Ensure consistent application of the taxonomy, scoring scale, register, issue standard, and framework across entities and functions.

• Develop the enterprise risk appetite and tolerance framework in collaboration with business and finance leadership, and execute appetite monitoring.

• Provide independent Second Line oversight and challenge First Line risk activities.

• Advise leaders on risk-related strategic changes, transactions, product launches, and operational modifications.

• Equip the First Line with tools, guidance, and training for risk and control responsibilities.

• Restore stakeholder confidence through clear communication, integrated business cycles, and thorough follow-up.

• Manage business continuity and crisis management utilizing a value-chain resilience approach.

• Oversee incident classification and escalation based on defined thresholds.

• Direct exercise and testing programs, ensuring findings lead to systemic control enhancements.

• Maintain the enterprise dependency register and loss scenario library.

• Coordinate the Aligned Assurance Model and harmonize assurance activities and control-environment reporting.

• Collaborate with Internal Audit on testing schedules and shared assessment data.

• Align calendars, issue management, and reporting across information security, compliance, privacy, quality, and health and safety.

• Streamline information collection and governance reporting to alleviate assessment and audit fatigue.

• Identify risks that could jeopardize strategic objectives and highlight risk-bearing planning assumptions.

• Synchronize Enterprise Risk Management with Corporate Strategy to ensure risk inputs inform key decisions.

• Collaborate on enterprise transformation initiatives, providing risk and resilience insights for major programs, integrations, and platform changes.

• Support scenario and stress analysis, incorporating results into strategic and capital planning.

• Transform risk and resilience data into actionable reports for executives and the Board.

• Present findings to governance committees, the Board, and the Audit and Risk Committee.

• Monitor regulatory developments and emerging risks, including artificial intelligence, geopolitical, supply chain, and climate-related risks.

• Safeguard sensitive personal information and adhere to Information Security and Privacy Policies.

⛳️ Requirements

• Bachelor’s degree in a relevant field, such as Risk Management, Finance, or Business, or equivalent experience.

• At least 3 additional years of experience related to the functional area.

• Minimum of 6 years of management experience in risk, audit, or compliance.

• Preferred 5 years of experience specifically within a Second Line of Defense role in a complex organization.

• Direct experience in Enterprise Risk Management, Business Continuity, Crisis Management, and Internal Audit.

• Proven experience in building, implementing, and operating within an aligned assurance model based on the three lines of defense framework.

• Background in insurance, manufacturing, supply chain, retail, and technology sectors.

• Experience engaging with and presenting to a Board and an Audit and Risk Committee.

• Familiarity with matrixed organizations where influence and collaboration are more impactful than direct authority.

• Expertise in strategic risk management and coordinating enterprise risk, corporate strategy, and enterprise transformation efforts.

• Comprehensive understanding of global risk profiles, emerging risks, and interdependencies.

• High engagement in virtual work settings, including maintaining a camera presence during meetings.

• Compliance with VSP Vision Information Security and Privacy Policies when handling sensitive personal information is mandatory.

• Successful completion of pre-employment substance abuse testing is required.

🏝️ Benefits

• Eligible bonuses and commissions may be part of the compensation package.

• VSP Vision benefits are available (specific benefits linked but not detailed in the posting).