Director, Internal Audit - Operational Risk

First Tech Federal Credit Union; Hillsboro (OR); Hybrid; USD 164,000 - 197,000; Full time

Benefits offered by this job

Health, dental, vision benefits

401(k) match

Paid time off & holidays

Employee pricing on lending products

Job summary

First Tech Federal Credit Union seeks a Director of Internal Audit - Operational Risk to lead a portfolio of risk-based assurance and advisory activities across governance and operational risk domains.

You will oversee audit planning, testing, reporting, and regulatory engagement, providing independent assessments of risk management and control effectiveness to senior leadership. Hybrid/onsite opportunities available across multiple corporate offices.

Qualifications

• 8+ years in internal audit standards and practices.
• 4+ years leading diverse audit teams.
• Experience evaluating ERM, ORM, TPRM, BC/DR, Operational Resilience, MRM, governance and oversight.
• Knowledge of risk appetite, issue management, KRIs.
• Experience assessing control effectiveness and remediation.
• Strong knowledge of financial services regulatory expectations.
• Ability to provide independent challenge with stakeholders.
• Presentation of findings to executives, governance committees and boards.
• Certifications: CIA, CRMA, CRISC, CISA, FRM, CRCM or PMP preferred.

Responsibilities

• Lead a portfolio of risk-based operational risk audit and advisory engagements, ensuring timely execution, consistent methodology application, and high-quality deliverables.
• Oversee audit planning, risk assessments, scoping decisions, testing strategies, audit conclusions, and reporting activities across assigned operational risk areas.
• Review and approve audit findings, issue severity ratings, remediation plans, and validation activities.
• Contribute to annual audit plan development through risk assessments and coverage planning.
• Provide independent assessments of governance, risk management, and internal controls across ERM, OR, TPRM, BC/DR, and related areas.
• Evaluate effectiveness of first- and second-line operational risk programs and governance structures.
• Assess enterprise risk frameworks, KRIs, and risk reporting practices.
• Review control environments supporting transformations and technology implementations.
• Identify weaknesses, emerging risks, and opportunities to strengthen governance and operations.
• Develop and maintain relationships with executive leadership and stakeholders while preserving independence.
• Represent Internal Audit in governance committees and working groups.
• Lead interactions with regulators, external auditors, and stakeholders.
• Monitor regulatory developments and emerging risk themes to guide audit coverage.
• Validate corrective action plans and remediation progress.
• Drive continuous improvement of audit methodologies and reporting.
• Develop and mentor audit professionals.

Skills

Internal Audit

Leadership

Governance & Risk

Regulatory Knowledge

Executive Reporting

Job description

The Director, Internal Audit - Operational Risk is responsible for leading a portfolio of risk-based assurance and advisory activities focused on operational risk management, governance, and organizational resilience. This role serves as an Engagement Owner and trusted advisor to executive leadership by providing independent assessments of governance, risk management, and control effectiveness across key operational risk domains.

The Director oversees audit planning, execution, reporting, issue validation, and regulatory engagement activities while ensuring adherence to Internal Audit standards and methodologies. This role plays a key leadership role in evaluating the effectiveness of operational risk frameworks, identifying emerging risks, and providing insights that strengthen the organization’s overall control environment.

Here’s what you can expect from the job and what you need to be successful:

What You’ll Do

• Lead a portfolio of risk-based operational risk audit and advisory engagements, ensuring timely execution, consistent methodology application, and high-quality deliverables.
• Oversee audit planning, risk assessments, scoping decisions, testing strategies, audit conclusions, and reporting activities across assigned operational risk areas.
• Review and approve audit findings, issue severity ratings, remediation plans, and issue validation activities.
• Contribute to development and execution of the annual audit plan through participation in audit universe maintenance, risk assessments, and audit coverage planning.
• Provide independent assessments of governance, risk management, and internal controls related to:
  • Enterprise Risk Management (ERM)
  • Operational Risk Management
  • Third-Party Risk Management (TPRM)
  • Business Continuity and Disaster Recovery (BC/DR)
  • Operational Resilience
  • Model Risk Management (MRM)
  • Enterprise Issue Management
  • Governance Committees and Risk Reporting
  • Change and Transformation Risk
  • Incident and Event Management
• Evaluate the effectiveness of first- and second-line operational risk programs, governance structures, and oversight functions.
• Assess enterprise risk frameworks, risk appetite programs, risk assessments, key risk indicators (KRIs), issue management processes, and risk reporting practices.
• Review control environments supporting significant business transformations, strategic initiatives, technology implementations, and operational change programs.
• Identify control weaknesses, emerging risks, resilience concerns, and opportunities to strengthen governance and operational effectiveness.
• Develop and maintain strong relationships with executive leadership, enterprise risk leaders, compliance leaders, and business stakeholders while preserving audit independence.
• Represent Internal Audit in governance committees, steering committees, and working groups as appropriate.
• Lead interactions with regulators, external auditors, and other stakeholders regarding operational risk and governance audit activities.
• Monitor regulatory developments, industry trends, and emerging risk themes to ensure appropriate audit coverage and risk perspectives.
• Validate corrective action plans and monitor remediation activities to ensure sustainable resolution of identified issues.
• Drive continuous improvement of audit methodologies, testing approaches, reporting capabilities, and quality standards.
• Develop and mentor audit professionals through coaching, performance management, capability development, and succession planning.

Essential Skills

• Required Experience: 8+ years of internal audit standards, methodologies, and professional practices.
• 4+ years of experience leading a diverse team including hiring, coaching and performance management.
• Experience evaluating:
  • Enterprise Risk Management frameworks
  • Operational Risk Management programs
  • Third-Party Risk Management programs
  • Business Continuity and Disaster Recovery programs
  • Operational Resilience frameworks
  • Model Risk Management programs
  • Enterprise governance and oversight structures
  • Change management and transformation risk
• Knowledge of risk appetite frameworks, issue management programs, risk assessments, operational loss management, and KRI reporting.
• Experience assessing control effectiveness, identifying root causes, and validating remediation activities.
• Strong understanding of financial services regulatory expectations and risk management practices.
• Ability to provide independent challenge while maintaining effective stakeholder relationships.
• Experience developing executive‑level reporting and presenting findings to executive leadership, governance committees, and Board committees.
• Strong analytical, organizational, and problem‑solving skills.
• Excellent written and verbal communication skills.
• Certifications: CIA, CRMA, CRISC, CISA, FRM, CRCM or PMP Preferred

Location

Hillsboro Corporate Office | Hillsboro OR 97124 OR Marlborough Corporate Office | Marlborough, MA OR Chelmsford Corporate Office | Chelmsford, MA

#HYBRID

Target Compensation

$164,000 - $197,000 base pay + Annual Bonus

What makes First Tech different?

Every great journey begins with a bold idea—and ours is no different. First Tech and DCU were founded on the belief that financial solutions should put people first. That belief has fueled decades of innovation and service, rooted in the tech sector and expanding to support members from all walks of life.

Employees Are Eligible For

• Traditional medical, dental, and vision coverage
• Generous 401(k) match
• Paid Time Off: You'll accrue up to 15 days in your first year. In addition, you'll receive 40 hours of sick time and 3 personal days, which refresh annually
• Paid federal holidays
• Special employee pricing on lending products such as mortgage, auto, and personal loans (eligibility subject to standard account requirements and underwriting criteria)

Employment Statements

First Tech is an equal opportunity employer, and we value diversity, inclusion, and equity at our company. We evaluate qualified applicants without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other legally protected characteristics.

First Tech is not currently offering Visa transfer/sponsorship for this position.