Enterprise & Operational Risk Salary Guide - United States - 2025/26

 

Enterprise Risk Management • Operational Risk • Technology Risk • Cyber Risk • Third-Party Risk

Regional Salary Benchmarks • C-Suite • VP / Director • Heads of Function • Senior Specialists

Broadgate United States
Compensation Benchmarking

East Coast • West Coast • Midwest • South / Southeast • South Central • Southwest

ERM & Operational Risk Salary Guide: East Coast

Enterprise Risk Management and Operational Risk compensation across the East Coast is shaped by the concentration of global banks, insurers, asset managers, fintechs and highly regulated financial institutions. New York continues to set the regional benchmark, while Boston, Washington DC, Philadelphia, Wilmington and Pittsburgh provide strong demand across ERM, operational risk, IT risk, resilience and third-party risk functions.

At senior level, salary benchmarking is influenced by regulatory accountability, enterprise risk ownership, operational resilience exposure, board reporting, technology risk oversight, third-party governance and the complexity of the institution. These ranges should be used as market benchmarks rather than fixed salary expectations.

Role / Title Level New York, NY Boston, MA Washington, DC Philadelphia, PA Wilmington, DE Pittsburgh, PA
C-Suite
Chief Risk Officer – ERM Focus C-Suite $270k–$475k+ $235k–$415k+ $230k–$400k+ $205k–$360k+ $185k–$320k $180k–$320k
Deputy CRO / Head of Enterprise Risk C-Suite $245k–$365k+ $210k–$320k $205k–$310k $185k–$280k $165k–$250k $165k–$245k
VP / Director
VP of Enterprise Risk Management VP / Director $210k–$290k $185k–$255k $180k–$245k $160k–$220k $145k–$200k $140k–$195k
VP of Operational Risk VP / Director $200k–$285k $175k–$250k $170k–$240k $155k–$215k $140k–$195k $135k–$190k
VP of IT / Technology Risk VP / Director $210k–$295k $185k–$260k $180k–$255k $160k–$225k $145k–$200k $140k–$200k
Director of Operational Risk VP / Director $190k–$265k $165k–$230k $160k–$225k $145k–$200k $130k–$180k $125k–$175k
Director of IT & Cyber Risk VP / Director $195k–$275k $170k–$240k $165k–$235k $150k–$210k $135k–$190k $130k–$185k
Director of Third-Party / Vendor Risk VP / Director $180k–$255k $160k–$225k $155k–$220k $140k–$195k $125k–$175k $125k–$175k
Head of Function
Head of Operational Risk Head of Function $195k–$270k $170k–$235k $165k–$230k $150k–$205k $135k–$185k $130k–$180k
Head of IT Risk & Resilience Head of Function $200k–$285k $175k–$250k $170k–$240k $155k–$215k $140k–$195k $135k–$190k
Head of Third-Party Risk Head of Function $180k–$250k $160k–$220k $155k–$215k $140k–$190k $125k–$170k $125k–$170k
Senior Specialist
Senior Operational Risk Manager Senior Specialist $150k–$210k $130k–$185k $125k–$180k $115k–$160k $100k–$145k $100k–$140k
Senior IT Risk Manager Senior Specialist $155k–$215k $135k–$190k $130k–$185k $120k–$165k $105k–$145k $105k–$145k
Senior ERM Manager Senior Specialist $155k–$210k $135k–$185k $130k–$180k $120k–$160k $105k–$145k $105k–$140k

New York sets the East Coast ceiling

The highest ERM and operational risk salaries remain concentrated in New York, where global banks, asset managers and regulated institutions compete for senior risk leadership.

Technology risk is a key premium area

IT risk, cyber risk, operational resilience and third-party risk continue to command strong packages as institutions increase focus on technology governance.

Broadgate benchmarks regional hiring

Broadgate supports salary benchmarking for ERM, operational risk, IT risk, resilience and third-party risk appointments across East Coast financial services markets.

ERM & Operational Risk Salary Guide: West Coast

West Coast compensation for enterprise risk, operational risk, technology risk and third-party risk professionals is shaped by the region’s concentration of technology-led financial services, fintech, payments, banking and digital platform businesses. San Francisco, Los Angeles and Seattle continue to command premium salaries for senior risk leaders who can operate across governance, resilience, regulatory expectations and complex operating models.

At senior level, market value is rarely driven by title alone. Compensation is influenced by regulatory accountability, board exposure, enterprise risk ownership, operational resilience, technology risk expertise, third-party governance and the ability to support fast-moving businesses through scale, transformation and increased regulatory scrutiny.

Role / Title Level San Francisco, CA Los Angeles, CA Seattle, WA
C-Suite
Chief Risk Officer – ERM Focus C-Suite $255k–$450k+ $220k–$385k+ $225k–$390k+
Deputy CRO / Head of Enterprise Risk C-Suite $230k–$345k $200k–$295k $200k–$300k
VP / Director
VP of Enterprise Risk Management VP / Director $200k–$275k $170k–$235k $175k–$240k
VP of Operational Risk VP / Director $190k–$270k $165k–$230k $170k–$235k
VP of IT / Technology Risk VP / Director $200k–$280k $170k–$240k $175k–$245k
Director of Operational Risk VP / Director $180k–$250k $155k–$215k $155k–$220k
Director of IT & Cyber Risk VP / Director $185k–$260k $160k–$225k $160k–$230k
Director of Third-Party / Vendor Risk VP / Director $175k–$245k $150k–$210k $150k–$215k
Head of Function
Head of Operational Risk Head of Function $185k–$255k $160k–$220k $160k–$225k
Head of IT Risk & Resilience Head of Function $190k–$270k $165k–$230k $170k–$235k
Head of Third-Party Risk Head of Function $175k–$235k $150k–$205k $150k–$205k
Senior Specialist
Senior Operational Risk Manager Senior Specialist $140k–$200k $120k–$170k $125k–$175k
Senior IT Risk Manager Senior Specialist $145k–$205k $125k–$175k $130k–$180k
Senior ERM Manager Senior Specialist $145k–$200k $125k–$170k $130k–$175k

San Francisco sets the regional ceiling

Senior ERM, operational risk and technology risk compensation remains highest in San Francisco, driven by fintech, banking, payments and technology-led financial services employers.

Technology risk remains a major premium area

Demand is strongest for leaders who can connect operational resilience, cyber risk, third-party risk and enterprise governance across complex digital operating environments.

Broadgate benchmarks West Coast risk hiring

Broadgate supports salary benchmarking, competitor analysis and market mapping for ERM, operational risk, technology risk and third-party risk appointments across the West Coast.

ERM & Operational Risk Salary Guide: Midwest

The Midwest remains a major market for enterprise risk, operational risk, technology risk and resilience hiring, supported by large banking groups, insurers, payments businesses and financial services operations across Chicago, Minneapolis and Kansas City.

Compensation across the region is shaped by regulatory accountability, enterprise risk maturity, technology resilience requirements, third-party risk exposure and the ability to lead risk frameworks across complex, multi-state financial institutions.

Role / Title Level Chicago, IL Minneapolis, MN Kansas City, MO
C-Suite
Chief Risk Officer – ERM Focus C-Suite $215k–$380k+ $190k–$335k $180k–$310k
Deputy CRO / Head of Enterprise Risk C-Suite $195k–$290k $175k–$260k $160k–$240k
VP / Director
VP of Enterprise Risk Management VP / Director $165k–$230k $150k–$205k $140k–$190k
VP of Operational Risk VP / Director $160k–$225k $145k–$200k $135k–$185k
VP of IT / Technology Risk VP / Director $165k–$240k $150k–$210k $140k–$195k
Director of Operational Risk VP / Director $150k–$210k $135k–$185k $125k–$175k
Director of IT & Cyber Risk VP / Director $155k–$220k $140k–$195k $130k–$180k
Director of Third-Party / Vendor Risk VP / Director $145k–$205k $130k–$180k $120k–$170k
Head of Function
Head of Operational Risk Head of Function $155k–$215k $140k–$190k $130k–$180k
Head of IT Risk & Resilience Head of Function $160k–$225k $145k–$200k $135k–$185k
Head of Third-Party Risk Head of Function $145k–$200k $130k–$180k $120k–$165k
Senior Specialist
Senior Operational Risk Manager Senior Specialist $120k–$165k $105k–$150k $100k–$140k
Senior IT Risk Manager Senior Specialist $125k–$175k $110k–$155k $100k–$140k
Senior ERM Manager Senior Specialist $125k–$165k $110k–$150k $100k–$140k

Chicago sets the regional benchmark

Chicago remains the Midwest's highest-paying ERM and operational risk market, supported by major banks, insurers and financial services firms.

Technology risk remains resilient

IT risk, cyber risk and resilience roles continue to attract strong compensation as firms invest in operational resilience and vendor oversight.

Broadgate benchmarks Midwest hiring

Broadgate supports ERM, operational risk, technology risk and third-party risk salary benchmarking across the Midwest market.

ERM & Operational Risk Salary Guide: Midwest

The Midwest remains a major market for enterprise risk, operational risk, technology risk and resilience hiring, supported by large banking groups, insurers, payments businesses and financial services operations across Chicago, Minneapolis and Kansas City.

Compensation across the region is shaped by regulatory accountability, enterprise risk maturity, technology resilience requirements, third-party risk exposure and the ability to lead risk frameworks across complex, multi-state financial institutions.

Role / Title Level Chicago, IL Minneapolis, MN Kansas City, MO
C-Suite
Chief Risk Officer – ERM Focus C-Suite $215k–$380k+ $190k–$335k $180k–$310k
Deputy CRO / Head of Enterprise Risk C-Suite $195k–$290k $175k–$260k $160k–$240k
VP / Director
VP of Enterprise Risk Management VP / Director $165k–$230k $150k–$205k $140k–$190k
VP of Operational Risk VP / Director $160k–$225k $145k–$200k $135k–$185k
VP of IT / Technology Risk VP / Director $165k–$240k $150k–$210k $140k–$195k
Director of Operational Risk VP / Director $150k–$210k $135k–$185k $125k–$175k
Director of IT & Cyber Risk VP / Director $155k–$220k $140k–$195k $130k–$180k
Director of Third-Party / Vendor Risk VP / Director $145k–$205k $130k–$180k $120k–$170k
Head of Function
Head of Operational Risk Head of Function $155k–$215k $140k–$190k $130k–$180k
Head of IT Risk & Resilience Head of Function $160k–$225k $145k–$200k $135k–$185k
Head of Third-Party Risk Head of Function $145k–$200k $130k–$180k $120k–$165k
Senior Specialist
Senior Operational Risk Manager Senior Specialist $120k–$165k $105k–$150k $100k–$140k
Senior IT Risk Manager Senior Specialist $125k–$175k $110k–$155k $100k–$140k
Senior ERM Manager Senior Specialist $125k–$165k $110k–$150k $100k–$140k

Chicago sets the regional benchmark

Chicago remains the Midwest's highest-paying ERM and operational risk market, supported by major banks, insurers and financial services firms.

Technology risk remains resilient

IT risk, cyber risk and resilience roles continue to attract strong compensation as firms invest in operational resilience and vendor oversight.

Broadgate benchmarks Midwest hiring

Broadgate supports ERM, operational risk, technology risk and third-party risk salary benchmarking across the Midwest market.

ERM & Operational Risk Salary Guide: South / Southeast

The South and Southeast remain important hiring markets for enterprise risk management, operational risk, technology risk and third-party risk talent. Compensation is shaped by regional banking hubs, fintech growth, insurance presence, risk transformation programmes and the continued build-out of second-line risk functions.

Across Charlotte, Atlanta, Miami, Nashville, Tampa and Jacksonville, salary levels vary by institution size, regulatory complexity, reporting line, technology exposure and whether the role carries enterprise, operational, cyber, resilience or vendor risk accountability.

Role / Title Level Charlotte, NC Atlanta, GA Miami, FL Nashville, TN Tampa, FL Jacksonville, FL
C-Suite
Chief Risk Officer – ERM Focus C-Suite $190k–$330k $190k–$335k $210k–$370k+ $185k–$325k $185k–$325k $180k–$320k
Deputy CRO / Head of Enterprise Risk C-Suite $170k–$255k $175k–$260k $190k–$285k $165k–$250k $165k–$250k $165k–$245k
VP / Director
VP of Enterprise Risk Management VP / Director $145k–$205k $150k–$205k $165k–$225k $145k–$200k $145k–$200k $140k–$195k
VP of Operational Risk VP / Director $140k–$200k $145k–$200k $160k–$220k $140k–$195k $140k–$195k $135k–$190k
VP of IT / Technology Risk VP / Director $145k–$210k $150k–$210k $165k–$230k $145k–$205k $145k–$205k $140k–$200k
Director of Operational Risk VP / Director $135k–$185k $135k–$185k $145k–$205k $130k–$180k $130k–$180k $125k–$175k
Director of IT & Cyber Risk VP / Director $140k–$195k $140k–$195k $150k–$215k $135k–$190k $135k–$190k $130k–$185k
Director of Third-Party / Vendor Risk VP / Director $130k–$180k $130k–$180k $140k–$200k $125k–$175k $125k–$175k $125k–$175k
Head of Function
Head of Operational Risk Head of Function $140k–$190k $140k–$190k $150k–$210k $135k–$185k $135k–$185k $130k–$180k
Head of IT Risk & Resilience Head of Function $140k–$200k $145k–$200k $160k–$220k $140k–$195k $140k–$195k $135k–$190k
Head of Third-Party Risk Head of Function $130k–$175k $130k–$180k $140k–$195k $125k–$170k $125k–$170k $125k–$170k
Senior Specialist
Senior Operational Risk Manager Senior Specialist $105k–$145k $105k–$150k $115k–$165k $100k–$145k $100k–$145k $100k–$140k
Senior IT Risk Manager Senior Specialist $110k–$150k $110k–$155k $120k–$170k $105k–$150k $105k–$150k $105k–$145k
Senior ERM Manager Senior Specialist $110k–$145k $110k–$150k $120k–$165k $105k–$145k $105k–$145k $105k–$140k

Charlotte anchors regional risk hiring

Charlotte remains a major banking and risk hub, with strong demand for ERM, operational risk, resilience and technology risk professionals.

Miami commands senior premiums

Miami often sits above other Southeast markets for senior risk leadership, reflecting wealth, fintech and financial services growth.

Broadgate benchmarks Southeast hiring

Broadgate supports regional salary benchmarking for ERM, operational risk, technology risk, cyber risk and third-party risk appointments.

ERM & Operational Risk Salary Guide: South Central

South Central ERM and Operational Risk hiring is led by Dallas, Houston and Austin, where financial services, energy, technology and payments employers continue to invest in enterprise risk, operational resilience, third-party risk and technology risk capability.

Compensation varies by institution size, regulatory exposure, risk ownership, technology complexity and leadership accountability. Senior candidates with enterprise-wide risk, IT resilience, vendor risk or board-facing experience typically command the strongest packages.

Role / Title Level Dallas, TX Houston, TX Austin, TX
C-Suite
Chief Risk Officer – ERM Focus C-Suite $195k–$340k $190k–$330k $195k–$345k
Deputy CRO / Head of Enterprise Risk C-Suite $175k–$260k $170k–$255k $175k–$265k
VP / Director
VP of Enterprise Risk Management VP / Director $150k–$210k $145k–$200k $150k–$210k
VP of Operational Risk VP / Director $145k–$205k $140k–$195k $145k–$205k
VP of IT / Technology Risk VP / Director $150k–$215k $145k–$205k $150k–$215k
Director of Operational Risk VP / Director $135k–$190k $130k–$185k $135k–$190k
Director of IT & Cyber Risk VP / Director $140k–$200k $135k–$195k $140k–$200k
Director of Third-Party / Vendor Risk VP / Director $130k–$185k $125k–$180k $130k–$185k
Head of Function
Head of Operational Risk Head of Function $140k–$195k $135k–$190k $140k–$195k
Head of IT Risk & Resilience Head of Function $145k–$205k $140k–$195k $145k–$205k
Head of Third-Party Risk Head of Function $130k–$180k $125k–$175k $130k–$180k
Senior Specialist
Senior Operational Risk Manager Senior Specialist $105k–$150k $105k–$145k $110k–$150k
Senior IT Risk Manager Senior Specialist $110k–$155k $110k–$150k $115k–$155k
Senior ERM Manager Senior Specialist $110k–$150k $110k–$145k $115k–$150k

Texas remains a major risk hub

Dallas, Houston and Austin offer strong demand across ERM, operational risk, IT risk and resilience, supported by financial services, energy and technology employers.

Technology risk is a salary driver

Employers continue to pay premiums for candidates who can connect enterprise risk with cyber, resilience, vendor risk and operational control frameworks.

Broadgate benchmarks regional hiring

Broadgate supports salary benchmarking and market mapping across South Central ERM, operational risk, technology risk and third-party risk hiring.

ERM & Operational Risk Salary Guide: Mountain / Southwest

Mountain and Southwest compensation for enterprise risk, operational risk, technology risk and third-party risk professionals reflects a growing market across Denver, Salt Lake City and Phoenix. Hiring is shaped by the expansion of regional banking, fintech, payments, insurance and financial services operations, alongside continued demand for risk leaders who can support governance, resilience and scalable control frameworks.

At senior level, compensation is influenced by regulatory accountability, operational resilience, board exposure, enterprise risk ownership, technology risk expertise and the ability to build risk functions in fast-growing regional markets. Denver typically sets the regional ceiling, while Salt Lake City and Phoenix remain active value markets for senior risk talent.

Role / Title Level Denver, CO Salt Lake City, UT Phoenix, AZ
C-Suite
Chief Risk Officer – ERM Focus C-Suite $210k–$365k+ $180k–$315k $190k–$330k
Deputy CRO / Head of Enterprise Risk C-Suite $185k–$280k $160k–$245k $170k–$255k
VP / Director
VP of Enterprise Risk Management VP / Director $160k–$225k $140k–$195k $145k–$200k
VP of Operational Risk VP / Director $155k–$220k $135k–$190k $140k–$195k
VP of IT / Technology Risk VP / Director $160k–$230k $140k–$200k $145k–$205k
Director of Operational Risk VP / Director $145k–$205k $125k–$175k $130k–$185k
Director of IT & Cyber Risk VP / Director $150k–$215k $130k–$185k $135k–$195k
Director of Third-Party / Vendor Risk VP / Director $140k–$200k $120k–$170k $125k–$180k
Head of Function
Head of Operational Risk Head of Function $150k–$210k $130k–$180k $135k–$190k
Head of IT Risk & Resilience Head of Function $155k–$220k $135k–$190k $140k–$195k
Head of Third-Party Risk Head of Function $140k–$190k $120k–$165k $125k–$175k
Senior Specialist
Senior Operational Risk Manager Senior Specialist $115k–$160k $100k–$140k $105k–$145k
Senior IT Risk Manager Senior Specialist $120k–$165k $105k–$145k $110k–$150k
Senior ERM Manager Senior Specialist $120k–$160k $105k–$140k $110k–$145k

Denver sets the regional ceiling

Denver continues to command the strongest Mountain / Southwest compensation, particularly for ERM, operational risk and technology risk leadership roles.

Growth markets remain competitive

Salt Lake City and Phoenix remain active hiring markets for senior risk specialists as financial services, fintech and operational hubs continue to expand.

Broadgate benchmarks regional hiring

Broadgate supports ERM, operational risk, technology risk and third-party risk salary benchmarking across Mountain and Southwest financial services markets.