Hybrid Director, Enterprise Risk Management

at Brookaire Company

• Job title: Director, Enterprise Risk Management
• Job type: Full Time
• Experience level: Lead
• Salary: $155,000 - $175,000 per year
• Degree requirement: Bachelor's Degree
• Tech skills: Cyber Security
• Location requirements: Hybrid, Charlottesville, United States

About the role

• Director of Enterprise Risk Management leading operational risk management for CFA Institute. Evolving ERM framework and embedding risk-based decision-making in enterprise processes.

Responsibilities

• Own the global Operational Risk Management (ORM) program: maintain the risk and control library; calibrate early warning signals; and align risk appetite metrics with business objectives
• Design, implement, and oversee internal controls across critical processes; coordinate testing and monitoring; track issues and remediation to closure (issues management)
• Lead enterprise processes for incident/loss event capture, root-cause analysis, and thematic remediation; surface early warning indicators and control gaps
• Partner with Internal Audit, Compliance, Information Security, and Business Continuity
• Monitor regulatory/market changes relevant to CFA Institute operations; assess impacts on risk exposure and internal controls, and coordinate responses
• Oversee third‑party/outsourcing risk practices in partnership with Procurement, Legal, and Cybersecurity to ensure proportionate controls and ongoing monitoring
• Evolve the risk taxonomy and risk appetite statements within the ERM framework; ensure clear accountabilities and integration with enterprise planning and performance
• Draft, maintain, and socialize risk policies, standards, and procedures; guide functions on proportionate risk-taking and control design
• Provide independent risk challenge to strategic and operational decisions; prepare recommendations for leadership
• Design executive and Board-facing risk reports and dashboards; lead data collection, quality assurance, and controls for risk data
• Conduct enterprise and project-level risk analysis, including scenario modeling and stress tests; translate insights into actionable recommendations
• Establish common data definitions/metadata and reporting templates; drive process and system enhancements for automation and transparency
• Provide specialist risk advisory across the initiative lifecycle (idea → execution → close): identify, assess, prioritize, and monitor risks; propose mitigation options and decision trade-offs
• Embed quantitative and qualitative risk methods (e.g., sensitivity/Monte Carlo where applicable) and project risk practices into major initiatives and products
• Support business cases and investment decisions with risk-adjusted perspectives and clear disclosure of assumptions and residual risks
• Sponsor the Global Risk Champions Network; develop targeted training and communications to strengthen front-line risk ownership
• Coach leaders and teams to apply risk principles, elevate decision quality, and foster an accountable, control-conscious culture
• Prepare concise, audience-tailored materials that clarify risk positions and recommended actions

Requirements

• Bachelor’s degree required in Risk Management, Finance, Economics, Analytics or related field
• Professional certifications preferred: IRM (IRM/CMIRM), FRM (GARP), PMI‑RMP; internal controls/assurance credentials a plus (e.g., CIA, CPA, CRMA, CISA)
• Significant experience in a complex, global organization with a dedicated focus on ERM/operational risk/internal controls with progressively increasing scope and influence
• Demonstrated success designing and operationalizing ERM frameworks and control testing/monitoring at scale
• Proven ability to build cross-functional networks and influence senior leaders and governance bodies
• Strong background in risk analytics and reporting (data acquisition, data control, database reporting, scenario analysis/stress testing); adept at turning complex analysis into clear, decision-ready insights
• Experience collaborating with Internal Audit/Compliance/InfoSec and managing third‑party/outsourcing risks
• Advanced proficiency in risk management; data collection and analysis; review and reporting; policy and regulation; project risk and issue management; budget and control; data control; database reporting; numerical and statistical analysis
• Excellent communication – written, verbal, and presentation – with the ability to convey challenging messages diplomatically
• High integrity, sound judgment, and ability to balance principle with pragmatism under pressure
• Global cultural orientation and experience working across regions and time zones

Benefits

• Comprehensive health coverage for you and your family
• Generous leave and time off
• Competitive retirement plans
• Flexible work options
• Wellness, education, and support programs