Risk

• Own the global Operational Risk Management (ORM) program: maintain the risk and control library; calibrate early warning signals; and align risk appetite metrics with business objectives
• Design, implement, and oversee internal controls across critical processes; coordinate testing and monitoring; track issues and remediation to closure (issues management)
• Lead enterprise processes for incident/loss event capture, root-cause analysis, and thematic remediation; surface early warning indicators and control gaps
• Partner with Internal Audit, Compliance, Information Security, and Business Continuity
• Monitor regulatory/market changes relevant to CFA Institute operations; assess impacts on risk exposure and internal controls, and coordinate responses
• Oversee third‑party/outsourcing risk practices in partnership with Procurement, Legal, and Cybersecurity to ensure proportionate controls and ongoing monitoring
• Evolve the risk taxonomy and risk appetite statements within the ERM framework; ensure clear accountabilities and integration with enterprise planning and performance
• Draft, maintain, and socialize risk policies, standards, and procedures; guide functions on proportionate risk-taking and control design
• Provide independent risk challenge to strategic and operational decisions; prepare recommendations for leadership
• Design executive and Board-facing risk reports and dashboards; lead data collection, quality assurance, and controls for risk data
• Conduct enterprise and project-level risk analysis, including scenario modeling and stress tests; translate insights into actionable recommendations
• Establish common data definitions/metadata and reporting templates; drive process and system enhancements for automation and transparency
• Provide specialist risk advisory across the initiative lifecycle (idea → execution → close): identify, assess, prioritize, and monitor risks; propose mitigation options and decision trade-offs
• Embed quantitative and qualitative risk methods (e.g., sensitivity/Monte Carlo where applicable) and project risk practices into major initiatives and products
• Support business cases and investment decisions with risk-adjusted perspectives and clear disclosure of assumptions and residual risks
• Sponsor the Global Risk Champions Network; develop targeted training and communications to strengthen front-line risk ownership
• Coach leaders and teams to apply risk principles, elevate decision quality, and foster an accountable, control-conscious culture
• Prepare concise, audience-tailored materials that clarify risk positions and recommended actions

Director, Enterprise Risk Management

Technology Risk Oversight Manager

Lead, Data Governance Analyst

Risk Engineer

Senior Consultant – Risk Advisory

Senior Governance Engineer