Director of Risk & Business Operations

As Director, you will lead the operational resilience program and own the enterprise risk framework, with primary responsibility for third-party risk management, incident management, and business continuity. You will partner with executive leadership, Compliance, Legal, Technology, Internal Audit, and business leaders to strengthen risk programs in a regulated environment. You will design and report on risk metrics, oversee audits and regulatory inquiries, and drive process improvements and automation. This role combines strategic leadership with hands-on execution, offering high visibility and the chance to shape enterprise-wide resilience and strategic initiatives.

• Own and enhance the Third-Party Risk Management program (due diligence, onboarding, monitoring, remediation, offboarding)
• Manage third-party and outsourced resources with risk-based oversight
• Lead incident management across operational, cybersecurity, privacy, fraud, and physical security events
• Oversee Business Continuity Planning program (policies, governance, BIA, testing, disaster response)
• Partner with leaders to identify operational risks, assess controls, and implement mitigations
• Develop dashboards, KPIs, incident reporting, vendor risk metrics, and executive reporting
• Support audits, regulatory examinations, investor due diligence, and compliance requirements
• Drive process improvement and automation across risk programs
• Support organizational change, acquisitions, integrations, and strategic projects from an operational risk perspective
• Lead, coach, and develop internal teams and oversee external resources

• leadership
• cross-functional collaboration
• communication
• Third-Party Risk Management (TPRM)
• incident management
• business continuity planning