Senior Director, Integrated Risk Management

VSP Vision Care

. Lead and grow the Enterprise Risk Management and Business Resilience teams, covering enterprise risk, business continuity, and crisis management .

Posted 10/22/2026full-timeRemote • United StatesSenior💰 $126,000 - $191,625 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Enterprise Risk Management, Business Continuity, and Crisis Management, with a strong focus on strategic risk management and the ability to influence and partner across a matrixed organization. Proven capability in developing risk frameworks, conducting assessments, and presenting findings to governance committees and executive leadership.

Highest-signal resume keywords

Enterprise Risk ManagementBusiness ContinuityCrisis ManagementSecond Line of Defense ExperienceStrategic Risk Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk Assessment LifecycleIntegrated Risk FrameworkTaxonomy and Scoring Scale ManagementIncident ClassificationScenario and Stress AnalysisGovernance ReportingAligned Assurance ModelRegulatory ComplianceCrisis Management PlanningData Protection Policies

Soft Skills

LeadershipCommunicationStakeholder EngagementTeam DevelopmentInfluencing Skills

Industry Keywords

Risk ManagementInternal AuditComplianceSupply Chain RiskGeopolitical RiskClimate RiskInsuranceManufacturingRetailTechnology

About the role

Key responsibilities & impact

Lead and grow the Enterprise Risk Management and Business Resilience teams, covering enterprise risk, business continuity, and crisis management
Set direction and standards of work and build team depth
Own team career development and create meaningful development opportunities
Advocate for the function across the enterprise and increase visibility with leadership and business partners
Put the integrated risk framework into operation across all four pillars and every enterprise function
Run the enterprise risk assessment lifecycle, including full enterprise cycles, alternate-year refreshes, quarterly maintenance, and event-triggered assessments
Continuously improve the risk program and close gaps through routine work
Protect consistent use of the taxonomy, scoring scale, register, issue standard, and framework across entities and functions
Build the enterprise risk appetite and tolerance framework with business and finance leadership and implement appetite monitoring
Provide independent Second Line oversight and challenge of First Line risk activity
Advise leaders on risk-related strategic shifts, transactions, product launches, and operational changes
Provide First Line tools, guidance, and training for risk and control responsibilities
Rebuild stakeholder confidence through plain-language communication, integrated business cycles, and closed-loop follow-up
Run business continuity and crisis management using a value-chain resilience model
Own incident classification and escalation against defined thresholds
Direct exercise and testing programs and ensure findings produce systemic control improvements
Maintain the enterprise dependency register and loss scenario library
Coordinate the Aligned Assurance Model and synchronize assurance activity and control-environment reporting
Partner with Internal Audit on testing schedules and shared assessment data
Align calendars, issue handling, and reporting across information security, compliance, privacy, quality, and health and safety
Simplify information collection and governance reporting to reduce assessment and audit fatigue
Identify risks threatening strategic objectives and surface risk-bearing planning assumptions
Coordinate Enterprise Risk Management with Corporate Strategy so risk input informs open decisions
Partner with enterprise transformation initiatives and provide risk and resilience input to major programs, integrations, and platform changes
Support scenario and stress analysis and feed results into strategic and capital planning
Convert risk and resilience information into actionable executive and Board reporting
Present to governance committees, the Board, and the Audit and Risk Committee
Track regulatory developments and emerging risks, including artificial intelligence, geopolitical risk, supply chain risk, and climate risk
Protect sensitive personal information and follow Information Security and Privacy Policies

Requirements

What you’ll need

Bachelor’s degree in a related field, such as Risk Management, Finance, or Business, or equivalent experience
Minimum of 3 additional years of experience related to the functional area
Minimum of 6 years of management experience in risk, audit, or compliance
5 years of experience specifically within a Second Line of Defense capacity in a complex organization preferred
Direct experience across Enterprise Risk Management, Business Continuity, Crisis Management, and Internal Audit
Experience building, deploying, and working in an aligned assurance model based on the three lines of defense model
Experience in insurance, manufacturing, supply chain, retail, and technology industries
Experience presenting to and working with a Board and an Audit and Risk Committee
Experience in a matrixed organization where influence and partnership matter more than direct authority
Experience in strategic risk management and coordinating enterprise risk, corporate strategy, and enterprise transformation
Deep understanding of global risk profiles, emerging risks, and interdependencies
High engagement in virtual environments for remote work, including maintaining camera presence during meetings
Must comply with VSP Vision Information Security and Privacy Policies when accessing sensitive personal information
Must pass pre-employment substance abuse testing

Benefits

Comp & perks

Eligible bonuses and commissions may be included as part of the compensation package
VSP Vision benefits are available (specific benefits linked but not detailed in the posting)