Director of Enterprise Risk Management

Beneficial State Bank; Oakland (CA); Hybrid; USD 190,000 - 260,000; Full time

Job summary

Beneficial State Bank is seeking a Director of Enterprise Risk Management to lead the ERM program, embedding risk practices into strategy and daily operations. You will partner with department heads, compliance, and audit to maintain frameworks, identify gaps, and elevate risk governance.

This role reports to senior leadership and engages with the Board to discuss risk appetite and key indicators. With oversight across credit, liquidity, operations, market, and reputational risks, you will

Qualifications

• Bachelor's degree or certification in business or risk management.
• Minimum 12 years of progressive ERM/operational risk or related experience.
• 5+ years of leadership experience and board/executive presentation exposure.
• Strong knowledge of COSO/ISO 3100 and interagency guidance.
• Experience implementing risk governance practices and risk reporting.

Responsibilities

• Lead the design and ongoing administration of the Bank's Enterprise Risk Management Program.
• Maintain an enterprise risk framework aligned with regulatory expectations.
• Coordinate enterprise risk assessments and risk identification processes.
• Develop risk scoring, prioritization, and aggregation methodologies.
• Prepare risk reports and present to executive leadership and Board committees.

Skills

Leadership

Risk Management

Execution & Ownership

Strategic Management

Systems Thinking

Analytical Thinking

Compliance

Critical Thinking

Attention to Detail

Collaboration & Communication

Time Management

Managing Complexity

Diversity & Inclusion

Education

Bachelor's degree or Certification in Business, Risk Management, or related field

CRMA/CRCM/CERP/FRM/CFA/CIA/CISA (preferred)

Tools

Logic Manager

Auditboard

Job description

Title: SVP

FLSA: Exempt

Salary Grade: 13

Job Family: (Admin)

Union Representation: NA

Department: Operations

Supervisory Role Y/N: N

Schedule: Monday-Friday

Location: Hybrid/Oakland

Category: Full-Time

Revision Date: 08/01/2026

ABOUT US

We practice Beneficial Banking™ by investing in social and environmental impact, prioritizing transparency, and expanding access to equitable financial products, all in pursuit of a banking system that is regenerative for the planet and equitable for all. We bring that same commitment to our people by cultivating a vibrant, inclusive, and purpose-driven culture where employees are empowered to grow, contribute, and thrive. Together, we strive to make a meaningful difference in the communities where we live and work, creating positive impact through partnership, service, and shared success.

POSITION OVERVIEW

The Director of Enterprise Risk Management (ERM) leads and maintains the Bank’s enterprise risk management framework, providing independent oversight and coordination of risk identification, assessment, monitoring, reporting, and mitigation. The role ensures risk management practices are embedded in strategic planning, decision-making, governance, and daily operations.

The ERM partners with Department Heads, Compliance, and Audit to develop, implement, maintain, review, and oversee an effective risk management framework. This role supports projects and activities that promote compliance with applicable federal, state, and local laws and regulations; identifies gaps; recommends solutions to reduce losses from inadequate processes, systems, or human error; and identifies, responds to, or escalates risks as appropriate. The ERM also serves as a functional liaison between the lines of business and the Lines of Defense.

The ERM advises executive leadership, the Enterprise Risk Management Committee (ERMC), and the Board of Directors on risk appetite, emerging risks, risk governance, and enterprise resiliency. The position promotes a proactive risk culture while supporting the Bank’s mission, strategic objectives, regulatory obligations, and stakeholder expectations.

The Bank’s risk management structure supports governance that is systematic, transparent, credible, timely, and verifiable, with clear roles and responsibilities. Its purpose is to manage risks that may affect the Bank, including credit, financial, liquidity, market, operational, reputational, strategic, and other relevant risks. The Director partners with senior and executive leaders to create, implement, and maintain the risk management framework; support compliance-related projects and activities; identify gaps; drive solutions that reduce losses from process, system, or human error; escalates risks as needed; and support policies and procedures that strengthen performance and reduce regulatory exposure.

The ERM provides independent risk analysis, constructive challenge, and recommendations on enterprise risk exposures and governance effectiveness. The role escalates material risks, policy exceptions, control weaknesses, and emerging concerns through established governance channels. Risk ownership and risk acceptance remain with designated business leaders and executive management under approved delegated authorities.

ERM reports to the Chief Operating Officer or Chief Executive Officer with direct access to and interaction with the Audit Committee and any other Risk Committee at the board level.

ESSENTIAL DUTIES

Enterprise Risk Management Leadership

• Lead the design, implementation, enhancement, and ongoing administration of the Bank’s Enterprise Risk Management Program.

• Maintain a comprehensive enterprise risk framework aligned with regulatory expectations and industry best practices.
• Facilitate enterprise-wide risk assessments and risk identification processes.
• Develop and maintain methodologies for risk scoring, prioritization, and aggregation.

• Provide independent risk analysis, oversight, and constructive challenge on risk exposures, mitigation strategies, governance effectiveness, and alignment with the Bank’s risk appetite.

• Ensure material risks are identified, documented, monitored, and escalated appropriately.
• Conduct emerging risk assessments and environmental scans to identify future threats and opportunities.

Risk Appetite and Governance

• Facilitate the development, maintenance, monitoring, and periodic update of the Bank’s Risk Appetite Statement.

• Establish and monitor key risk indicators (KRIs), thresholds, and escalation protocols.
• Coordinate periodic reviews of risk appetite metrics and tolerance levels.
• Support executive management and the Board in evaluating adherence to approved risk appetite.
• Maintain the Enterprise Risk Management Policy and Charter and coordinate updates through established governance processes.

• Recommend improvements to risk governance and oversight processes while recognizing that risk ownership and risk acceptance decisions remain with designated business leaders and executive management.

Risk Reporting and Board Support

• Prepare enterprise risk reports, dashboards, trend analyses, executive summaries, and quarterly Board risk reporting packages.

• Present risk assessments, emerging risks, and enterprise risk trends to executive leadership and Board committees.
• Coordinate materials and reporting for the Enterprise Risk Management Committee.
• Provide clear, actionable risk insights that support strategic and operational decision-making.

• Escalate material risks, significant control issues, policy exceptions, and emerging concerns through established governance channels.

Enterprise Risk Assessments

• Lead annual and periodic enterprise risk assessments.
• Facilitate risk workshops with executive leadership and business units.

• Maintain the enterprise risk inventory and risk register, including risk ownership, ratings, mitigation plans, and action item tracking.

• Monitor mitigation plans and management action items.
• Validate risk ownership assignments and accountability structures.

Risk Framework Integration

• Promote integration of risk management into strategic planning, capital planning, budgeting, project governance, vendor management, and major business initiatives.
• Partner with Information Security, Compliance, Internal Audit, Finance, Human Resources, Operations, and Technology teams to ensure consistent risk oversight.
• Support governance committees through risk analysis and reporting.
• Ensure risk considerations are incorporated into new products, services, technologies, and strategic initiatives.

Regulatory and Compliance

• Maintain awareness of applicable regulatory guidance and industry expectations regarding risk governance.
• Support examinations, audits, and regulatory reviews related to enterprise risk management.
• Coordinate responses to risk governance recommendations and findings.
• Assist in maintaining ERM-related policies, charters, procedures, and standards.
• Complete assigned mandatory compliance training as scheduled.

Data, Metrics, and Technology

• Oversee development and maintenance of enterprise risk dashboards and reporting tools.
• Champion the centralization and governance of risk-related data.
• Evaluate, lead and support implementation of risk management technology solutions.
• Ensure the accuracy, completeness, and integrity of risk reporting information.

Risk Culture and Organizational Leadership

• Promote a culture of accountability, collaboration, continuous improvement, and sound risk management.

• Develop and deliver enterprise risk education and training programs that support organizational awareness and regulatory expectations.
• Provide guidance and consultation to business leaders regarding risk management practices, governance requirements, and emerging risks.

The position performs duties specific to the position and other functions as assigned.

ROLE COMPETENCIES/SKILLS

• Attention to Detail
• Collaboration & Communication
• Diversity & Inclusion
• Execution & Ownership
• Time Management
• Leadership
• Managing Complexity

• Strategy Management
• Systems Thinking
• Risk Management
• Analytical Thinking
• Benchmarking
• Compliance
• Critical Thinking

WORKING ENVIRONMENT & PHYSICAL DEMANDS

The work environment characteristics and the physical and cognitive requirements described here are representative of those an employee encounters while performing the essential functions of this position.

• This position is based in a non-confined office setting where the employee is free to move about as needed. This role is performed in a typical office environment. For hybrid and remote positions, work may also be performed away from BSB worksites, depending on business needs. Employees working remotely are required to maintain a dependable, high-speed internet connection and a work environment conducive to frequent phone and video calls, where private, confidential, or proprietary information cannot be seen, overheard, or otherwise accessed by unauthorized individuals.
• This position requires writing, typing, speaking, listening, lifting up to 10 pounds, driving (personal, company, or rental vehicle on occasion), carrying, sitting, pulling, walking, standing, squatting, kneeling, reaching, and using close, color, and peripheral vision, depth perception, and the ability to adjust focus.
• This position may require the ability to operate any or all the following: personal computer, cellular telephone, printer, fax, and other standard office equipment.
• This position requires the ability to read and interpret documents, perform detailed work, solve problems, interact with customers, apply reasoning and mathematical skills, communicate effectively both verbally and in writing, deliver presentations, analyze information, manage multiple concurrent tasks, adapt to changing priorities, and work effectively in a fast-paced environment with frequent interruptions.
• Reasonable accommodations may be made to enable qualified individuals with disabilities to perform the essential functions.

POSITION REQUIREMENTS

Minimum Qualifications

• Bachelor's degree or Certification in Business, Risk Management, or related field.
• Minimum 12 years of progressive experience in enterprise risk management, operational risk, compliance, audit, banking, financial services, or related disciplines.
• Minimum 5 years of leadership experience.
• Strong understanding of banking regulations and risk governance frameworks such as COSO ERM, ISO 3100, and the various Interagency guidance on sound risk management practices
• Experience presenting to executive leadership and Boards of Directors.
• Demonstrated expertise in risk assessment methodologies, risk reporting, and governance practices.

Preferred Qualifications

• Professional certification such as Certification in Risk Management Assurance (CRMA), Certified Regulatory Compliance Manager (CRCM), Certified Enterprise Risk Professional (CERP), Financial Risk Manager (FRM), Chartered Financial Analyst (CFA), Certified Internal Auditor (CIA), or Certified Information Systems Auditor (CISA).

• Experience within a regulated financial institution.

• Experience supporting Board Risk Committees or Enterprise Risk Committees. Experience implementing risk management platforms such as Logic Manager, Auditboard or other GRC tools.

Management reserves the right to change this position description at any time according to business needs.