CRO – Enterprise Risk — Retail Bank

The mandate

The next planning cycle has brought into focus risk governance failing to keep pace with regional complexity within a institutionally backed regulated universal or specialist bank. The immediate arena is the retail bank during a supervisory remediation. For mandate 093, the successful executive inherits decisions that have been deferred, competing stakeholder expectations and a need to establish facts before committing further capital.

The CRO – Enterprise Risk operating perimeter covers approximately US$69,350 million in loan and deposit book, with activity spanning several retail bank customer, product and delivery clusters rather than a single asset. The CRO – Enterprise Risk Banking remit carries direct influence over roughly 1,475 colleagues and third-party capacity.

The board and its investment committee want a CRO – Enterprise Risk who can convert ambiguity into a short list of explicit choices for the retail bank. The CRO – Enterprise Risk Banking seat must resolve a supervisory remediation, while preserving the underlying strengths of the retail bank. For mandate 093, value will come through sharper allocation, stronger leaders and an operating cadence that exposes variance early.

The CRO – Enterprise Risk’s first year on the retail bank is expected to end with risk transparency, decisive escalation and sustainable remediation. In mandate 093, authority covers resources and leadership appointments; material trade-offs go directly to the board sponsor.

Why this seat is open

This is a newly created CRO – Enterprise Risk — Retail Bank seat, established because a supervisory remediation now requires one accountable executive rather than distributed ownership. The board has classified the appointment as urgent and intends to move from qualified shortlist to offer within 6–8 weeks. Interim governance protects the retail bank, but it is not a substitute for a permanent appointee. The external search remains confidential to avoid unnecessary disruption before the appointment is agreed.

What you will own

• Set the CRO – Enterprise Risk value-creation thesis for the retail bank, translate it into no more than five enterprise priorities and stop work that does not support them.
• Carry stewardship of approximately US$69,350 million in loan and deposit book, including allocation, risk acceptance and board forecasts.
• Lead the CRO – Enterprise Risk Banking organisation of about 1,475 employees and partners, appointing a team with clear decision rights and credible succession for every critical seat.
• Resolve the retail bank economics and execution constraints created by a supervisory remediation, with CRO – Enterprise Risk-approved owners, dated milestones and transparent escalation thresholds.
• Establish one CRO – Enterprise Risk operating review across commercial, customer, financial, people, technology and risk outcomes for the retail bank; remove reconciliations that obscure accountability.
• Have held independent challenge authority and closed material issues with evidence accepted by board or supervisory review in mandate 093.
• Build the CRO – Enterprise Risk’s three-year succession and capability plan for the retail bank, reducing dependence on individual executives and improving mobility across the wider Banking organisation.

The first 12 months

• Days 1–90: Validate the retail bank baseline, meet the 30 stakeholders most consequential to risk governance failing to keep pace with regional complexity, assess the leadership team, stabilise immediate delivery risks and agree a board-owned scorecard with explicit decision gates.
• Months 4–9: Make the principal CRO – Enterprise Risk portfolio and organisation choices for the retail bank, install the new operating cadence, fill critical leadership gaps and deliver the first measurable release of cash, capacity or customer value.
• Months 10–12: Demonstrate a repeatable retail bank trend against risk transparency, decisive escalation and sustainable remediation, lock the following year’s capital and talent plan, evidence control sustainability and present a credible three-year value case with downside actions.

What the board will measure

• Delivery of the CRO – Enterprise Risk’s agreed first-year retail bank value case within a 10% tolerance, with variance explained before rather than after the relevant quarter closes.
• A CRO – Enterprise Risk forecast that remains decision-useful across three consecutive quarters and reconciles the retail bank’s operating, cash, customer and people assumptions.
• Closure of the CRO – Enterprise Risk mandate’s highest-priority retail bank risk and execution issues by their board-approved dates, with independent evidence that fixes are sustained.
• Retention of at least 90% of critical retail bank talent and ready-now successors for at least 70% of the CRO – Enterprise Risk’s direct reports.
• A quantified CRO – Enterprise Risk-owned improvement in the retail bank operating constraint behind a supervisory remediation, supported by a clean baseline and named data owner.
• Clear stakeholder confidence in mandate 093: no unresolved high-severity escalation older than 30 days and no material surprise withheld from its agreed governance forum.

The person

You are currently a CRO, Risk Director or senior controls executive in a institutionally backed Banking or adjacent enterprise. In relation to the retail bank, your CRO – Enterprise Risk track record includes a transition where the original plan was no longer sufficient; you can explain your choices, evidence and numerical impact. Candidates from financial services, payments, lending, insurance or regulated fintech will be considered where the operating model, customer stakes and governance intensity match this CRO – Enterprise Risk brief.

As a CRO – Enterprise Risk candidate, you bring 18–22 years of progressive Banking or adjacent-sector experience, consistent with the 18-22 experience band. At minimum, you have carried a P&L, book, budget or accountable portfolio of US$40,200 million and led an organisation of at least 1,025 people.

For mandate 093, the board wants two transitions: a difficult retail bank portfolio choice and a leadership-system change during a supervisory remediation. As the prospective CRO – Enterprise Risk for this retail bank, you must challenge optimistic cases and still create followership. References for mandate 093 must distinguish your contribution from the institution around you.

The CRO – Enterprise Risk must be based in New York; international relocation is supported, but this Banking role is not designed as a remote appointment.

Non-negotiables

• Current or recent accountability at the level of CRO, Risk Director or senior controls executive, with direct exposure to a board, investment committee or equivalent Banking governance forum.
• Proven CRO – Enterprise Risk ownership of at least US$40,200 million and leadership of no fewer than 1,025 employees in a comparable retail bank context.
• One completed Banking or adjacent-sector example of risk governance failing to keep pace with regional complexity with outcomes sustained for at least two reporting periods after the initial intervention.
• Sector credibility from financial services, payments, lending, insurance or regulated fintech; experience that is purely functional and lacks CRO – Enterprise Risk-level retail bank consequences will not meet the bar.
• Willingness to meet the New York location expectation, complete conflicts and background diligence, and protect the confidentiality of mandate 093.

Compensation and terms

The anticipated CRO – Enterprise Risk package is US$430,000–575,000 base + annual incentive and equity, calibrated to the final retail bank scope and the candidate’s current mix. Any long-term participation for mandate 093 follows standard vesting and performance conditions. The CRO – Enterprise Risk appointment in New York, centred on the retail bank, offers regular exposure to the board and its investment committee. A notice period of up to 6 months can be accommodated for the selected executive in mandate 093.

Confidentiality

This search is being conducted without naming the client for mandate 093. Identifying information will follow only when both sides elect to proceed under confidentiality; nothing in the published mandate should be treated as a clue to ownership or brand for mandate 093.