Vice President, Group Enterprise Risk Management

Vice President, Group Enterprise Risk Management

The VP, Group Enterprise Risk Management (ERM), is responsible for designing, implementing, and overseeing the Bank’s enterprise-wide risk management framework, with a primary focus on Operational Risk and on executing a robust Risk & Control Self-Assessment (RCSA) programme. This role ensures that risks are proactively identified, assessed, monitored, and reported in line with strict regulatory expectations. It partners closely with business lines and control functions to embed a positive risk culture and drive consistent, high-quality risk identification and effective controls across the organisation. They will also serve as the Group’s Data Protection Officer (DPO).

Your responsibilities will include:

• Lead the development and continuous enhancement of the Enterprise Risk Management Framework, aligned with regulatory expectations
• Ensure clear, ongoing integration of operational risk into the broader enterprise risk taxonomy, risk appetite framework, and reporting architecture
• Establish governance processes and standards across all business units and legal entities
• Design, implement, and maintain a best-in-class RCSA programme covering all material legal entities, products, and processes
• Define and enforce the RCSA methodology, including risk identification and taxonomy alignment, control design and effectiveness assessment, inherent and residual risk scoring methodologies, and risk appetite alignment and threshold setting
• Leverage RCSA outputs to identify emerging risks, inform scenario analysis, and drive control review and remediation
• Own, manage, and continually improve all underlying tools and materials associated with the RCSA programme and accompanying reporting processes
• Provide second-line oversight of operational risk across the bank, including escalation and management of complaints, incidents, and data protection breaches
• Prepare prompt, accurate reporting materials for board and committee governance forums
• Pursue technology solutions to enhance and automate the ERM framework and associated tools, escalation processes and initiatives
• Act as a key contact for regulators, internal audit, and external stakeholders on operational risk and RCSA matters
• Build and lead a high-performing ERM/Operational Risk team

About the team

At Butterfield, the Compliance team ensures that the Bank complies with all applicable laws and regulations in the jurisdictions in which it operates and plays an essential role in preserving the integrity and reputation of our business. It is responsible for establishing regulatory policies within the Bank and for monitoring changes in economic conditions and regulatory requirements, keeping Butterfield up to date with the latest thinking.

Your qualifications and skills include:

• Extensive experience (typically 12+ years) in Enterprise Risk Management and Operational Risk within banking or financial services
• Proven experience in executing RCSA programmes at scale within complex, regulated institutions
• Excellent written and verbal communication for authoring and presenting reports
• Highly detail-oriented with excellent analytical skills
• Strong decision-making and interpersonal skills
• Ability to multitask and deliver the reports on time while ensuring accuracy at all times
• High ethical standards with the ability to handle sensitive and confidential matters with absolute discretion
• Have the ability to operate effectively in a multi-disciplinary team and independently deliver high-quality work