What are the responsibilities and job description for the AVP, Risk /Compliance Manager position at Merrimack Valley Credit Union?
FUNCTIONAL SUMMARY: Responsible for managing the Credit Union’s Compliance Management Program, Enterprise Risk Management Program and to oversee the Vendor Management Program. Works closely with the Senior Management team to implement actions to ensure corporate-wide compliance while streamlining efforts, cost effectiveness, safety and soundness, and proper maintenance of the internal control structure to meet all applicable rules, regulations and statutory requirements.
RESPONSIBILITIES:
- Compliance Management Program & Enterprise Risk Management Program Development - Assist in development and implementation of the Credit Union’s Compliance & Enterprise Risk Management Programs. Identify potential risks or inefficiencies and develop recommendations for improvement. Establish good working relationships with all areas of the Credit Union to assist in their development of compliance and risk management.
- Employee Management: Responsible for hiring, training, evaluating, developing, promoting, compensating and disciplining subordinates within current policies and procedures established through Human Resources and within approved budget guidelines.
- Knowledge of Laws and Regulations – Responsible to obtain and maintain proficient knowledge of federal and state laws and regulations applicable to the Credit Union. Obtain and maintain knowledge of Credit Union services, policies and procedures.
- Research, Analysis and Consultation – Oversees research, interpreting laws and regulations, and forming opinions relating to compliance and risk management matters. Provide compliance and risk guidance and direction to business areas, as needed.
- Regulatory Change Management: Oversees regulatory change management. Keeps abreast of, monitors, and analyzes developing trends and changes in regulatory compliance laws, rules and regulations, and advises management of the operational impact of such trends and changes. Facilitates the implementation of new and regulatory changes as necessary.
-
Vendor Management: Directs and manages the Credit Union’s Vendor Management Program.
- Provides the program framework and guidance to management regarding due diligence with each department’s vendors.
- Ensures assessment of proper risk rating is applied and contracts maintain provisions to comply with information security, GLBA and MA data privacy regulations.
- Reviews the completion of vendor risk assessments and reporting and notification to appropriate committees.
-
Ensures vendor Service Organization Controls (SOC) Reports are obtained, reviewed and any SOC control deficiencies are adequately mitigated by the vendor owner and appropriately documented. In addition, ensure vendor owners appropriately address Complimentary User Entity Controls noted in their vendors’ SOC reports.
- Compliance Committee: Oversees the Compliance Committee, ensuring all areas of the organization are in compliance with all applicable state and federal laws; and in adherence with all state and federal rules and regulations. Oversees the documentation, review and analysis of consumer complaints.
- Policies and Procedures: Oversees and reviews the proposed changes to Credit Union policies and procedures for compliance with applicable regulatory and consumer/public interest laws, rules and regulations, and provides recommendations for any necessary changes. Ensures that company policies are reviewed annually.
- Second Line of Defense: Oversees the Second Line of Defense monitoring to ensure areas of weaknesses identified through audit are strengthened with the goal of the Credit Union passing all internal and regulatory audits.
- Issue Management: Oversees the issue management process. Assists managers with responding to and correcting findings in audits completed by external auditors, internal auditors, state and federal agencies.
- Risk Assessments: Conducts and/or assists management with required risk assessments as needed.
- Compliance Risk: Advises Senior Management and appropriate staff of emerging compliance issues and consults and guides the Credit Union in the establishment of controls to mitigate risks
- Reporting and Analysis – Oversees the development, management and analysis of various aspects of compliance and risk reporting, including key risk indicators and key performance indicators at the enterprise and business unit levels.
- Training: Assists in the development of the Compliance Training Program which effectively addresses requirements of applicable laws and regulations, the Credit Union’s related policies and procedures, and employee and Board of Directors responsibilities.
- Compliance Reviews: Oversees compliance reviews of new and existing products and services including internal documents, disclosures, notices, advertising and marketing.
- Internal and Regulatory Audits: Oversees and assists during internal and regulatory audits.
- Internal Committees: Participates and assists in preparation of various internal committees as assigned.
- Embraces the See It, Own It, Do It culture by continually analyzing and improving member service and staff experience.
QUALIFICATIONS:
- Related Bachelor’s Degree or equivalent experience preferred.
- Minimum of five years compliance experience in a financial institution with an in-depth understanding of lending regulations.
- Minimum of five years management experience.
- Strong analytical ability, and the ability to conduct thorough research, interpret and understand laws and regulations, and provide workable recommendations and solutions to problems.
- Knowledge of, and/or practical experience with, Credit Union or other financial institution operating areas, functions, products and services and the laws and regulations which apply to Credit Unions.
- Strong verbal/written communication skills, resourcefulness and initiative required.
- CRCM certification preferred or at a minimum have completed a compliance officer certification program and agree to maintain the certifications
- P.C. skills to include Word, Excel, and PowerPoint required.