VP ERM and General Counsel

The Vice President of Enterprise Risk Management and General Counsel (VP ERM & GC) is responsible for all legal, regulatory, corporate insurance and enterprise risk matters affecting the organization. This role exercises sound judgment and decision-making in a highly regulated environment and serves as a trusted strategic advisor to the Chief Executive Officer, Board of Directors, and Executive Leadership Team.

This role ensures risk management enables—not inhibits—member experience, growth, and innovation, supporting the organization’s strategic objectives around relationship deepening, digital experience, and market expansion.

The VP ERM & GC provides comprehensive legal counsel, oversees regulatory compliance, and ensures appropriate identification, assessment, management, mitigation, and reporting of risk across the enterprise. The role is responsible for the design, implementation, and ongoing management of the Enterprise Risk Management (ERM) program and provides executive oversight of Bank Secrecy Act (BSA), compliance, vendor management, business continuity, physical security, and fraud risk management functions, and corporate insurance programs.

This position ensures that legal, regulatory, operational, and strategic risks are balanced with organizational strategies and objectives and that governance, controls, and monitoring practices support safe, sound, and compliant operations.

Duties and Responsibilities: 

General Counsel

• Provide legal counsel and subject matter expertise related to organizational products, services, operations, and governance.
• Manage the provision of legal services and oversee relationships with external legal counsel.
• Prepare, review, negotiate, and approve contracts, proposals, policies, forms, and other legal agreements.
• Advise executive management and the Board of Directors on legal, regulatory, legislative, and litigation matters impacting the organization.
• Serve as primary liaison with regulatory agencies on legal matters, examinations, enforcement actions, and correspondence.
• Provide legal support for mergers, acquisitions, partnerships, and strategic initiatives.
• Research and monitor applicable laws, regulations, industry guidance, and emerging legal risks.
• Draft and update corporate policies, disclosures, and member-facing legal documents.
• Attend Board of Directors and committee meetings; assist with corporate governance, motions, minutes, bylaws, and board policies.
• Manage the legal expense budget and ensure cost-effective utilization of legal resources.

Enterprise Risk Management (ERM)

• Evaluate and advise on risks impacting member experience, including reducing friction, increasing access, and promoting fairness in products and digital interactions.
• Translate complex risk insights, including risk transfer and insurance considerations, into clear, actionable recommendations for executive leadership and the Board.
• Establish governance and risk frameworks for data, analytics, and artificial intelligence (AI) to enable innovation while ensuring responsible and compliant use.
• Develop, implement, and maintain a comprehensive Enterprise Risk Management (ERM) framework, including risk identification, assessment, mitigation, monitoring, reporting, and risk transfer.
• Lead enterprise-wide risk assessments and provide integrated risk and insurance reporting to executive management and the Board.
• Partner with executive leadership to align risk appetite, financial tolerance, and insurance strategies with organizational growth and innovation.
• Coordinate with business leaders to embed risk management into product development, digital enhancements, and member experience design.

Compliance & BSA/AML Oversight

• Provide executive oversight of the Compliance and BSA/AML programs.
• Partner with business leaders to design compliant solutions that enhance the member experience while minimizing friction.
• Evaluate compliance requirements to ensure they do not create unnecessary barriers to access or usability.
• Ensure compliance with all applicable federal, state, and regulatory requirements.
• Oversee the BSA/AML Officer and ensure effective administration of the program.
• Report compliance and regulatory issues, trends, and risks to the CEO and Board of Directors.
• Support regulatory examinations and ensure timely remediation of findings.
• Review and approve new products, services, marketing materials, forms, and system changes for regulatory compliance.

Vendor Management

• Provide executive oversight of the Vendor Management program.
• Ensure vendor selection and oversight support a high-quality, reliable, and seamless member experience.
• Evaluate vendor performance based on risk, cost, service quality, and impact on member experience.
• Ensure vendors are appropriately risk-rated, due diligenced, contracted, and monitored.
• Oversee contract review and approval processes for third-party relationships.
• Partner with business leaders to evaluate vendor risk, technology solutions, and outsourcing arrangements.
• Ensure vendor management practices align with regulatory expectations and industry standards.

Business Continuity & Physical Security

• Provide executive oversight of the Business Continuity and Disaster Recovery program.
• Ensure business continuity plans prioritize minimizing disruption to member access and service.
• Promote rapid recovery and clear communication strategies during disruptions or security events.
• Maintain effective business continuity, disaster recovery, and crisis management plans.
• Oversee physical security controls and risk mitigation strategies.
• Coordinate incident response, tabletop exercises, and continuity testing activities.
• Ensure organizational preparedness for operational disruptions and emergencies.

Fraud Risk Management

• Provide executive oversight of fraud prevention, detection, and response programs.
• Balance fraud prevention with a seamless member experience, minimizing unnecessary friction.
• Ensure fraud strategies protect members while maintaining ease of use and confidence.
• Maintain effective controls, monitoring, and reporting related to fraud risk.
• Partner with internal teams to identify fraud trends and emerging threats.
• Oversee investigations, reporting, and remediation related to fraud incidents.

Additional Requirements

• Familiarity with federal and state regulatory frameworks applicable to credit unions or similar financial institutions (e.g., NCUA, CFPB, BSA/AML, GLBA, UDAAP).
• Experience advising executive teams and governing boards on legal, strategic, and enterprise risk matters.
• Strong working knowledge of enterprise risk management frameworks, audit controls, and regulatory requirements.
• Ability to design and lead risk assessments and compliance monitoring programs.
• Familiarity with business continuity planning, third-party/vendor risk oversight, and contract lifecycle management.
• Strong research and analytical skills with the ability to interpret complex regulations and translate them into practical policies and procedures.
• Excellent organizational and project management skills with the ability to manage multiple priorities.
• Proficiency in legal research tools and enterprise risk/compliance management systems.
• Ability to conduct thorough research, interpret laws and regulations, and provide actionable compliance recommendations.
• Ability to communicate, verbally and in writing, in a professional manner when dealing with employees, volunteers, members, vendors, and company contacts.
• Ability to follow the core values of honesty, integrity, mutual respect, pride, and ownership.

Executive Requirements:

• Strategic Thinking – Understands and processes complex information; identifies key underlying issues while considering the situation, stakeholders, and levels of authority involved; exercises sound judgment and proposes effective courses of action.
• Decision Making & Problem Solving – Assesses the importance, urgency, and risk associated with each situation and takes timely actions in the best interest of the organization, often with limited guidance.
• Interpersonal Skills & Collaboration – Builds strong relationships with internal and external partners; demonstrates openness, trust, and respect; effectively navigates differing perspectives and fosters collaboration.
• Professionalism & Accountability – Maintains the highest level of confidentiality, discretion, and integrity; takes ownership of responsibilities and consistently delivers results with a positive attitude.
• Leadership – Achieves results through others by setting clear objectives, coaching and developing team members, motivating performance, and fostering a strong team environment.
• Management Skills – Effectively balances multiple priorities, delegates work appropriately, and leads teams to achieve organizational goals.