Senior Director of Enterprise Risk Management

U.S. Department of Veterans Affairs; Oklahoma; On-site; USD 105,000 - 128,000; Full time

Benefits offered by this job

State benefit allowance

Retirement Savings Plan with employer

11 paid holidays annually

Vacation and sick leave

Job summary

The Oklahoma Health Care Authority (OHCA) is seeking a Senior Director of Enterprise Risk Management to establish and lead the agency's ERM program and to integrate risk visibility across divisions. The role also oversees Administrative Services, including facilities, security, and continuity.

The position reports to Executive Staff and influences agency-wide risk decisions. Location is Oklahoma City with standard Monday–Friday hours and a compensation of $116,489 per year.

Responsibilities

• Establish and lead OHCA's enterprise risk management (ERM) framework and assessment processes.
• Build and maintain the enterprise risk register with owners and mitigation tracking.
• Produce executive reports showing top risks, trends, and escalation needs.

Job description

Senior Director of Enterprise Risk Management

Agency: 807 HEALTH CARE AUTHORITY

Supervisory Organization: Contracts/Compliance

Job Posting End Date: Refer to the date listed at the top of this posting, if available. Continuous if date is blank.

Note: Applications will be accepted until 11:59 PM on the day prior to the posting end date above.

Estimated Appointment End Date (Continuous if Blank)

Full/Part-Time: Full time

Job Type: Regular

Compensation: $116,489/year

Why You'll Love Working Here

At the Oklahoma Health Care Authority (OHCA), your work matters. Every day, our team helps ensure Oklahomans have access to better health and better care. Guided by our core values, Passion for Purpose, Trust & Transparency, Empowerment & Accountability, Best-in-Class, Outcome-Driven, and Servant Leadership , we foster a workplace where people feel supported, respected, and empowered to make an impact. Learn more about OHCA.

Let’s Talk Benefits

• Generous state-paid benefit allowance to offset insurance premiums.
• A wide selection of insurance plans with no pre-existing condition exclusions.
• Flexible Spending Accounts for health care and dependent care.
• Retirement Savings Plan with employer contributions.
• 11 paid holidays annually.
• 15 days of vacation and 15 days of sick leave in the first year.
• Longevity Bonus recognizing years of public service.
• Public Service Loan Forgiveness eligibility and tuition reimbursement.
• Wellness benefits, including an on-site gym and fitness center discounts.

Job Description

Location: 4345 N Lincoln Blvd, Oklahoma City, OK 73105

Salary: $116,489/year

Work Schedule: Monday - Friday

Primary Hours: 8:00 a.m. - 5:00 p.m.

Agency/Division Information

The Oklahoma Health Care Authority (OHCA) works to ensure Oklahomans have access to better health and better care. The agency's core values include passion for purpose, trust and transparency, empowerment and accountability, best in class and outcome-driven, and servant leadership. As part of the interview process, candidates may be required to attend an in-person interview at our Oklahoma City office.

Position Purpose

The Senior Director of Enterprise Risk Management establishes and leads OHCA's enterprise risk management (ERM) function. Risk is managed well within individual divisions today, but no one connects those risks into a single agency-wide view. This position builds that view: it identifies where risks intersect, compound, or fall between functions, and it tells Executive Staff plainly what matters most and why.

The Senior Director also leads Administrative Services, which provides the operational foundation for the function through facilities, physical security, emergency preparedness, workplace safety, continuity operations, and Workers' Compensation.

Essential Functions May Include:

Enterprise Risk and Governance

• Design, implement, and maintain the agency's ERM framework, including risk categories, assessment methodology, and rating criteria.
• Build and maintain the enterprise risk register, assign a risk owner to each entry, and track mitigation through completion.
• Establish and facilitate the enterprise risk committee and set clear thresholds for escalation to Executive Staff.
• Conduct enterprise risk assessments and monitor risks on an ongoing basis.
• Produce regular executive reporting that shows top enterprise risks, trends, overdue mitigations, and decisions needed.
• Other duties as assigned.

Business Continuity and Resilience

• Identify the agency's critical functions and the systems, vendors, and internal dependencies each one relies on.
• Lead the development, testing, and maintenance of continuity, recovery, and emergency preparedness plans.
• Coordinate exercises with divisions and ensure lessons learned are built into updated plans.

Administrative Services and Physical Risk

• Provide leadership and direction to Administrative Services, including facilities, physical security and access, workplace safety, and space and assets.
• Oversee Workers' Compensation as a risk function, including incident and claims trends, corrective action, and financial and liability exposure.
• Report Administrative Services activity in risk terms, so that incidents, trends, and exposure are tracked and escalated rather than reported only as operations.

Operational Risk and Corrective Actions

• Maintain a consistent process for logging and reviewing significant incidents and systemic issues across the agency.
• Lead or coordinate after-action reviews and confirm that mitigation commitments are documented, assigned, and followed through.
• Track unresolved corrective actions and elevate those that are overdue or recurring.

Third-Party Risk Coordination

• Coordinate the identification and assessment of enterprise exposure tied to critical vendors, contractors, partners, and organizational dependencies.
• Work with Contracts,