ZipRecruiter

Log In

1

Director Enterprise Risk Management Jobs in Colorado

City of Greeley

Risk and Safety Business Partner II

Greeley, CO · On-site

$80K - $117K/yr

  • Medical

  • Retirement

Supports the Risk and Safety Manager in administering the City's enterprise risk management, environmental health and safety, insurance, and loss control programs. * Evaluates, develops, implements ...

Deloitte

Cyber Insider Risk Manager

Denver, CO

Qualifications Required: 6+ years of experience in insider risk, security operations, investigations, compliance, data protection, or enterprise risk management 2+ years of experience managing an ...

Vertafore

Sr. Director, Enterprise Architecture

Denver, CO · On-site

  • Medical

  • Dental

  • Vision

  • Life

  • Retirement

Reporting directly to our VP, Enterprise Architecture, you will be tasked with influencing all ... Performance management through alignment/setting of objectives/deadlines for direct reports and ...

SSR Mining Inc.

Treasury, Director

Denver, CO · On-site

$180 - $210/hr

  • Medical

  • Dental

  • Vision

  • Retirement

  • PTO

Support the corporate risk management process and contribute to enterprise risk reporting5 ... Direct experience managing corporate insurance programs, ideally in an industrial, mining, or ...

Sunflower Bank NA

Model Risk Analyst

Denver, CO · Hybrid

$85K - $95K/yr

  • Medical

  • Dental

  • Vision

  • Life

  • Retirement

  • PTO

Sunflower Bank is seeking a Model Risk Analyst to join its Enterprise Risk Management Department. The Analyst will be responsible for supporting the bank-wide Model Risk Management (MRM) program ...

SSR Mining, Inc.

Treasury, Director

Denver, CO · On-site

  • Medical

  • Dental

  • Vision

  • Retirement

  • PTO

Support the corporate risk management process and contribute to enterprise risk reporting 5. ... Direct experience managing corporate insurance programs, ideally in an industrial, mining, or ...

Crocs

VP, Internal Audit

Broomfield, CO · On-site

$310K - $320K/yr

  • Medical

  • Dental

  • Vision

  • Life

  • Retirement

  • PTO

... enterprise risk management within large, global organizations, with a strong track record of ... Extensive public company experience, including direct ownership of Internal Audit governance ...

previous page

Showing results 41-60

All JobsEnterprise Risk Management JobsDirector Enterprise Risk Management JobsDirector Enterprise Risk Management Jobs in Colorado

Director Enterprise Risk Management information

See Colorado salary details

$56.8K

$150.6K

$273.4K

How much do director enterprise risk management jobs pay per year?

As of Aug 15, 2026, the average yearly pay for director enterprise risk management in Colorado is $150,561.00, according to ZipRecruiter salary data. Most workers in this role earn between $110,900.00 and $176,100.00 per year, depending on experience, location, and employer.

How does a director enterprise risk management typically collaborate with other departments to identify and mitigate organizational risks?

A Director of Enterprise Risk Management (ERM) works closely with leaders across departments such as compliance, finance, IT, and operations to proactively identify, assess, and address organizational risks. This often involves facilitating risk workshops, leading cross-functional risk assessments, and ensuring risk mitigation strategies are embedded in business processes. Regular communication and reporting to executive leadership and the board are also key responsibilities, enabling a holistic view of the risk landscape. Effective collaboration helps ensure that risk management is integrated throughout the organization, supporting both strategic objectives and regulatory compliance.

What does a director enterprise risk management do?

A Director of Enterprise Risk Management (ERM) is responsible for identifying, assessing, and mitigating risks that could impact an organization’s ability to achieve its objectives. They develop risk management strategies, policies, and frameworks, and work closely with senior leadership to integrate these practices across departments. The role involves overseeing risk assessments, monitoring compliance with regulations, and ensuring the organization is prepared for potential threats. By proactively managing risks, the director helps safeguard the organization's assets, reputation, and long-term success.

What are the key skills and qualifications needed to thrive as a director enterprise risk management, and why are they important?

To thrive as a Director of Enterprise Risk Management, you need expertise in risk assessment, regulatory compliance, and strategic planning, typically supported by a bachelor's or master's degree in business, finance, or a related field. Familiarity with risk management frameworks (such as COSO or ISO 31000), GRC (governance, risk, and compliance) systems, and relevant certifications like CRM or FRM is highly valued. Exceptional leadership, analytical thinking, and communication skills help you collaborate across departments and influence organizational culture. These abilities are crucial for identifying potential threats, ensuring regulatory compliance, and safeguarding the organization's long-term success.

What is the difference between Director Enterprise Risk Management vs Risk Manager?

AspectDirector Enterprise Risk ManagementRisk Manager
CredentialsTypically requires advanced degrees (MBA, Risk Management certifications)Often requires similar certifications but may have less emphasis on advanced degrees
Work EnvironmentStrategic, leadership-focused, often in senior management teamsOperational, focused on risk assessment and mitigation activities
Employer & Industry UsageUsed in large corporations across various industriesCommon in organizations of all sizes, especially in finance, insurance, and manufacturing
Search & Comparison IntentUnderstanding senior risk leadership rolesOperational risk management responsibilities

The main difference between a Director Enterprise Risk Management and a Risk Manager lies in their scope and seniority. The Director typically oversees enterprise-wide risk strategies and leads teams, while the Risk Manager focuses on specific risk areas and implementation. Both roles require relevant certifications and experience, but the Director position involves more strategic decision-making and leadership responsibilities.

What are the most commonly searched types of Enterprise Risk Management jobs in Colorado?

The most popular types of Enterprise Risk Management jobs in Colorado are:

What are popular job titles related to Director Enterprise Risk Management jobs in Colorado?

For Director Enterprise Risk Management jobs in Colorado, the most frequently searched job titles are:

What job categories do people searching Director Enterprise Risk Management jobs in Colorado look for?

The top searched job categories for Director Enterprise Risk Management jobs in Colorado are:

What cities in Colorado are hiring for Director Enterprise Risk Management jobs?

Cities in Colorado with the most Director Enterprise Risk Management job openings:

Director Enterprise Risk Management jobs near you
Infographic showing various Director Enterprise Risk Management job openings in Colorado as of August 2026, with employment types broken down into 1% As Needed, 83% Full Time, 14% Part Time, and 2% Contract. Highlights an 92% Physical, 3% Hybrid, and 5% Remote job distribution, with an average salary of $150,561 per year, or $72.4 per hour.

Sr. Manager, Third Party Risk Management

Asurion

Sterling, CO

Full-time

Re-posted 16 days ago

Asurion rating

7.2

Company rating: 7.2 out of 10

Based on 84 frontline employees who took The Breakroom Quiz

137th of 224 rated it services

Job description

Position Overview

The Senior Manager, Third Party Risk Management leads Asurion's enterprise vendor and supply-chain risk program as a second line of defense. This role owns the end-to-end third-party risk lifecycle-intake, inherent-risk tiering, due diligence, contract controls, continuous monitoring, reassessment, and secure offboarding-protecting Asurion and its carrier and partner ecosystem from risks introduced by vendors, service providers, and technology suppliers. The leader partners closely with Procurement, Legal, Privacy, business portfolio owners, and security control owners to translate fragmented vendor information into clear, defensible risk decisions. This is both a program-building and people-leadership role, maturing the vendor risk function in alignment with NIST CSF 2.0 and strengthening supply chain risk outcomes while embedding modern practices for emerging risks such as third-party AI tooling, SaaS sprawl, and vendor concentration.

Key Responsibilities
  • Own strategy, design, and continuous improvement of the Third-Party/Vendor Risk Management (TPRM) program aligned to NIST CSF 2.0, ISO 27001, SOC 2, PCI DSS, and regulatory obligations.
  • Define and maintain TPRM policy, standards, procedures, and risk-tiering methodology; secure governance approval and drive consistent adoption across the enterprise.
  • Establish third-party risk appetite and tolerance thresholds with CISO and GRC leadership and apply them to vendor risk decisions.
  • Embed risk gates within sourcing, onboarding, contracting, renewal, and offboarding in partnership with Procurement and Legal.
  • Lead the full vendor risk lifecycle: intake, inherent-risk classification, due diligence, residual-risk determination, treatment/acceptance, contracting, continuous monitoring, reassessment, and offboarding.
  • Operationalize inherent-risk tiering to scope assessment depth and cadence based on data sensitivity, access, criticality, and business impact.
  • Direct security, privacy, and resilience assessments using methodologies such as SIG/Shared Assessments and evidence including SOC 2 Type II, ISO 27001, PCI AOC, and penetration test results.
  • Evaluate fourth-party/Nth-party dependencies, vendor concentration, and systemic risk across the supplier portfolio.
  • Establish and lead risk reviews for third-party AI/GenAI tooling with security and privacy teams; address model and data-handling risks and shadow AI.
  • Translate findings into concise, business-relevant risk narratives and actionable remediation plans with owners and timelines.
  • Operate continuous monitoring leveraging external risk ratings, periodic attestations, threat/breach intelligence, and event-driven triggers.
  • Coordinate third-party incident response with SOC/IR; assess impact, drive containment, and track remediation to closure.
  • Manage the third-party risk register and findings inventory; escalate aging or accepted risks through governance.
  • Maintain visibility into critical vendor resilience and BC/DR posture for high-impact suppliers.
  • Partner with Legal and Procurement to define and negotiate security, privacy, and resilience terms (control requirements, right-to-audit, breach notification SLAs, data protection, subprocessor controls).
  • Develop a standardized library of contractual security requirements scaled to vendor risk tier.
  • Define and report outcome-driven metrics and KRIs (e.g., residual risk trends, assessment cycle time/coverage, time-to-remediate, monitoring coverage, exception aging); deliver executive-ready reporting to governance forums.
  • Serve as the primary point of contact for internal/external audits, regulatory exams, and carrier-partner due diligence.
  • Build, lead, and develop a high-performing team of vendor risk analysts; set objectives, coach performance, and scale capability through playbooks, training, and quality reviews.
  • Drive operational efficiency via process automation and analyst-assistive tooling to focus effort on judgment-intensive decisions.
Education and Experience
  • 8+ years in information security, IT risk, or GRC, including 4+ years focused on third-party/vendor risk management.
  • 2+ years of direct people leadership managing analysts or a risk team.
  • Demonstrated experience designing or maturing a TPRM program lifecycle end to end.
  • Strong working knowledge of NIST CSF 2.0, ISO 27001, SOC 2, PCI DSS, and assessment standards such as SIG/Shared Assessments.
  • Experience reviewing assurance artifacts (SOC 2 Type II, ISO certifications, penetration test reports) and translating them into risk decisions.
  • Hands-on experience with TPRM/GRC platforms and continuous monitoring/security-rating tools (e.g., ProcessUnity, OneTrust, Prevalent/Mitratech, Whistic, BitSight, SecurityScorecard, or comparable).
  • Experience partnering with Procurement and Legal on vendor contracting and security/privacy terms.
  • Excellent written and verbal communication, including executive briefing and defensible risk narratives.
  • Bachelor's degree in a related field or equivalent professional experience.
  • Preferred: certifications such as CTPRP, CISSP, CISA, CRISC, or CISM; experience in regulated consumer or financial environments (e.g., GLBA, PCI DSS, state privacy laws); experience with AI/GenAI risk assessment; familiarity with three lines of defense; experience with automation or AI-assisted workflows in GRC.
Knowledge, Skills, and Abilities
  • Sound risk judgment balancing rigor with business enablement and speed-to-value.
  • Ability to influence without authority across Procurement, Legal, Privacy, Security, and business stakeholders.
  • Program design, policy/standard development, and governance execution for TPRM.
  • Expertise in vendor risk tiering, due diligence, continuous monitoring, issue management, and secure offboarding.
  • Strong analytical skills to assess concentration, systemic risk, and fourth-party dependencies.
  • Advanced communication skills; distills complex third-party risk into actionable executive decisions.
  • Team leadership, talent development, and operational scaling through playbooks, training, and QA.
  • Proficiency with metrics/KRIs, dashboards, and executive reporting.
  • Negotiation of contractual security/privacy/resilience terms and control requirements.
Travel Requirements

N/A

Physical Demands
  • Stationary Position: Frequently
  • Vision: 20/20 corrected vision
  • Hearing: Receive detailed information if spoken to

What Asurion employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply