Job Details

It Starts With Our Employees

FourLeaf's ultimate goal is to provide the best-in-class member and employee experience, and it all begins with two things: hiring incredible people and giving them a great place to work.

What You'll Do

The AVPFirst Line of Defense (FLOD) Transformation serves as the primary First Line of Defense resource for the Transformation Office, which includes Cyber Security, Information Technology, Digital Transformation, Value Realization (PMO), Business Systems Analysis (BSAS), and Business Intelligence (BI). The AVP FLOD Transformation acts as the operating liaison with our Back-office and Technology CUSOs (Credit Union Service Organizations) in coordinating risk, compliance, audit, regulatory, and control initiatives. This role will represent the Transformation Office as part of the FourLeaf First Line of Defense team with an indirect reporting line into the Chief Legal and Risk Officer.

Core Contributions

Strategic Liaison and Relationship Management:

• Act as the operating liaison for the Transformation Office to S3 (Back-Office CUSO) and OTS (Technology CUSO) departments including but not limited to the PMO, Innovation, and Online Banking Digital Support and OTS Operations,
• Technical Services, Application Management and Innovations, working with these areas to coordinate risk, compliance, audit, regulatory, and control initiatives.
• Establish strong working relationships with S3/OTS directors, while providing oversight and support.

Policy & Procedure Governance:

• Collaborate with relevant CUSO departments to ensure that all supporting policies and procedures are documented, adhered to, and fully aligned with FourLeaf's policies and requirements.
  Risk Monitoring & Reporting
• Identify key metrics (KRI's) for monitoring current and emerging Technology, Cyber and Information Security risk.
• Monitor, measure and track risk indicators for exposure, working with the Transformation team to ensure recommendations, controls and mitigation steps are appropriately documented.
• Modify the KRI's as KCI's and KPI's are updated.

Audits, Examination & Risk Management Support:

• Manage and participate in audits, audit requests, exam requests, process mapping, risk assessments, model validation, risk appetite (key risk indicators), risk reporting, and compliance testing requests for the Transformation Office.
• Ensure adherence to applicable regulatory frameworks including: NCUA Part 748 (Security Program, Suspicious Activity Reports), NIST CSF, NYDFS 500, GLBA, PCI-DSS, and other relevant data security laws.
• Serve as the primary Risk liaison for all internal and external audits or examinations pertaining to Technology and Information Security Risk, coordinating responses and remediation efforts.
  Quality Assurance and Control Testing for Transformation Office:
• Oversee internal control testing programs for control design and operational effectiveness.
• Ensure key controls are tested regularly and remediation efforts are tracked to completion.

Business Continuity & Disaster Recovery Guidance:

• Provide technical guidance for Business Continuity and Disaster Recovery Plans (BCP/DR) for critical IT systems and applications, ensuring timely and effective recovery in the event of an outage or disaster.

Reportable Events Management:

• Manage reportable events (issues incidents, and losses) and member complaints for the Transformation Office, including self-reporting, root cause analysis, action planning, resolution, dashboarding, and documentation.

Collaboration with Leadership:

• Facilitate collaboration with the first, second and third lines of defense functions under the guidance of the SVP
• Information and Cyber Security & Chief Legal & Risk Officer.

Representation & Collaboration:

• Represent Transformation Office in various oversight committees, taskforces, and working groups; including but not limited to the Three Lines of Defense Working Group, Reportable Events Review Meeting, Enterprise Risk Management Committee (non-voting member), as well as FourLeaf and Consortium project teams impacting the Transformation Office.

Three Lines of Defense Model Expertise:

• Leverage in depth knowledge experience with the three lines of defense model, as defined by the Institute of Internal Auditors (IIA), to inform and optimize risk management strategies and ensure the organization's security and compliance protocols are robust and effective.

Assets You Will Bring

• Education: Bachelors Degree
  
  Experience: 8-10+ years' experience in risk and compliance in a financial institution (concentration on technology, data, architecture, and governance).
  
  Certifications: CISSP and CRISC a plus

The estimated salary for this role is $117,456.00 to $146,819.00 annually. (FourLeaf Federal Credit Union offers a comprehensive benefits package, including medical, dental, and vision coverage; life and disability insurance; voluntary benefit programs; a 401(k) plan with employer match; reimbursement and wellness programs; and an annual performance-based bonus.)

#LI-Remote

What Sets Us Apart?

In addition to our comprehensive benefits, we invest in employee connection and well-being through:

• Competitive 401(k)
• Tuition and fitness reimbursement programs
• Flexible work options
• Volunteer opportunities
• Executive “Water Cooler Chats”
• Clubs, sports, and social events
• Food truck days

….and more!

Who is FourLeaf?

FourLeaf Federal Credit Union (FourLeaf) has been committed to the financial well-being of our members for over 80 years. Through our full range of competitive savings and loan products, you can trust us in every step of your financial journey. From applying for a credit card to closing on your mortgage to opening your child's first savings account, FourLeaf is here to help you reach your financial goals.

We are proud to be an award-winning place to work! Some of our recent recognitions include Certified Great Place to Work 2024-2025, America's Greatest Midsize Workplaces 2025, Quantum Workplace Employee Voice Award 2024, and Fortune's Best Workplaces in Financial Services & Insurance 2024.

As a credit union, our vision is to enrich the lives of our members, employees, and communities. Since 2002, we have been an integral community partner through our charitable giving and community development programs in New York and beyond.

Equal Opportunity Employer

This employer is required to notify all applicants of their rights pursuant to federal employment laws.
For further information, please review the Know Your Rights notice from the Department of Labor.