Director Enterprise Risk

Summary

The Director, Enterprise Risk will provide leadership for the development, implementation, and administration of the Company's Enterprise Risk Management (ERM) program. Establishes and maintains a consistent framework for identifying, assessing, monitoring, managing, and reporting enterprise risks across the organization. Partners with executive leadership and business unit leaders to evaluate strategic, operational, financial, regulatory, compliance, insurance, credit, and emerging risks that may impact achievement of corporate objectives. Responsible for facilitating the enterprise risk assessment process, maintaining the Company's risk appetite framework, and providing risk reporting and analysis to senior leadership, including through facilitation of the Executive Risk Committee, and to the Board of Directors. Serves as a trusted advisor to management on risk-related matters and promotes a culture of risk awareness and risk-informed decision making throughout the organization.

Minimum Requirements

• Bachelor's degree in Finance, Business Administration, Accounting, Economics, Risk Management, Engineering, or related discipline required.
• Master's degree in Business Administration or related field preferred.
• Requires ten (10) years or more of progressively responsible experience in enterprise risk management, finance, audit, regulatory affairs, insurance, compliance, energy markets, corporate planning, or related disciplines, including significant experience evaluating strategic and operational risks within a complex organization, within a regulated energy utility preferred.
• Requires five (5) or more years of management experience with responsibility for leading teams, developing staff, managing budgets, and directing enterprise-wide initiatives.
• Demonstrated knowledge of enterprise risk management principles, risk assessment methodologies, governance frameworks, internal control concepts, insurance and risk transfer strategies, credit risk management, and regulatory environments.
• Strong analytical, communication, facilitation, negotiation, and presentation skills required.
• Ability to build effective working relationships across all levels of the organization and communicate complex risk issues to technical and non-technical audiences.

Major Accountabilities

1) Provides leadership for the development, implementation, and continuous improvement of the Company's Enterprise Risk Management framework, policies, standards, and processes.

2) Establishes and maintains a consistent enterprise methodology for identifying, assessing, measuring, monitoring, prioritizing, and reporting risks across the organization.

3) Leads the enterprise risk assessment process and facilitates evaluations of strategic, operational, financial, regulatory, compliance, insurance, cybersecurity, and reputational risks.

4) Maintains the enterprise risk inventory, risk register, and related documentation to ensure risks are appropriately assessed, assigned, monitored, and mitigated.

5) Develops and administers the Company's risk appetite framework, including key risk indicators, risk tolerance thresholds, escalation processes, and risk reporting requirements.

6) Monitors emerging risks, external developments, market conditions, regulatory changes, and industry trends that may impact Company strategy, operations, or financial performance.

7) Prepares and presents enterprise risk reports, assessments, and recommendations to executive leadership, internal risk governance committees, Board Committees, and the Board of Directors.

8) Monitors compliance with all applicable risk policies, risk tolerances, and governance requirements and communicates significant risk exposures, exceptions, and trends to leadership as appropriate.

9) Provides independent risk evaluation and consultation on strategic initiatives, major projects, significant capital investments, business development transactions, and other matters that may materially impact the Company's risk profile.

10) Oversees enterprise credit risk activities, including the establishment of credit policies, exposure monitoring, risk reporting, counterparty assessments, and approval processes as applicable.

11) Oversees insurance and claims and risk transfer strategies, including evaluation of insurance coverage, captive insurance utilization, retained risk levels, and other risk financing mechanisms.

12) Overall responsibility for compliance with the Energy Risk Management Guidelines and facilitation of the Energy Risk Oversight Group. 

13) Collaborates with Internal Audit, Legal, Compliance, Finance, Operations, Security, Human Resources, and other business areas to promote a coordinated approach to enterprise risk management.

14) Serves as the primary resource and subject matter expert for enterprise, credit, and energy risk management practices and provides education, guidance, and consultation to leadership, employees, and governance bodies regarding risk management principles and emerging issues.

15) Facilitates enterprise risk governance committees, including the Executive Risk Committee, and working groups, including development of meeting agendas, materials, presentations, and documentation.

16) Establishes goals, objectives, budgets, staffing plans, and performance expectations and ensures efficient and effective execution of departmental responsibilities.

17) Provides leadership, coaching, development, and performance feedback to staff to ensure organizational objectives are achieved and employee capabilities are strengthened

Export Compliance / EEO Statement

This position may require access to and/or use of information subject to control under the Department of Energy's Part 810 Regulations (10 CFR Part 810), the Export Administration Regulations (EAR) (15 CFR Parts 730 through 774), or the International Traffic in Arms Regulations (ITAR) (22 CFR Chapter I, Subchapter M Part 120) (collectively, 'U.S. Export Control Laws'). Therefore, some positions may require applicants to be a U.S. person, which is defined as a U.S. Citizen, a U.S. Lawful Permanent Resident (i.e. 'Green Card Holder'), a Political Asylee, or a Refugee under the U.S. Export Control Laws. All applicants will be required to confirm their U.S. person or non-US person status. All information collected in this regard will only be used to ensure compliance with U.S. Export Control Laws, and will be used in full compliance with all applicable laws prohibiting discrimination on the basis of national origin and other factors. For positions at Palo Verde Nuclear Generating Stations (PVNGS) all openings will require applicants to be a U.S. person.

Pinnacle West Capital Corporation and its subsidiaries and affiliates ('Pinnacle West') maintain a continuing policy of nondiscrimination in employment. It is our policy to provide equal opportunity in all phases of the employment process and in compliance with applicable federal, state, and local laws and regulations. This policy of nondiscrimination shall include, but not be limited to, recruiting, hiring, promoting, compensating, reassigning, demoting, transferring, laying off, recalling, terminating employment, and training for all positions without regard to race, color, religion, disability, age, national origin, gender, gender identity, sexual orientation, marital status, protected veteran status, or any other classification or characteristic protected by law.

For more information on applicable equal employment regulations, please refer to EEO is the Law poster. Federal law requires all employers to verify the identity and employment eligibility of every person hired to work in the United States, refer to E-Verify poster. View the employee rights and responsibilities under the Family and Medical Leave Act (FMLA).

In compliance with the Drug Free Workplace Act of 1988, the Company is committed to a work environment that is free from the effects of alcohol and controlled substances, and free from the abuse or inappropriate use of prescribed and over-the-counter medications. The Company requires employees to be subject to drug and alcohol testing that is job-related and consistent with business necessity, regulatory requirements and applicable laws.