20+ Years · First & Second Line · Banking, Data & Digital Finance

Enterprise Risk, Governance, and Compliance Executive Building Stronger, More Resilient Organizations

I lead and transform enterprise compliance and risk programs, combining executive judgment with hands-on operating experience across banking, consumer financial services, data, and partner-delivered digital finance.

My experience spans Compliance Management Systems, risk and control oversight, testing and monitoring, examinations, policies and procedures, regulatory change, issues and remediation, ethics and conflicts of interest, consumer protection, product and marketing compliance, AI governance, and technology-enabled transformation.

Alison Stokes, CRCM
Executive leadership grounded in executionTurning regulatory complexity into practical governance, stronger controls, and accountable action.
20+ yearsRisk and compliance leadership
35Largest team led
463Compliance obligations managed
15,000PPP loans supported

Core Executive Capability

Compliance Management Systems & Control Environments

A mature Compliance Management System connects regulatory requirements to accountable business execution. I build and strengthen the components so risk, controls, monitoring, issues, and governance operate as one system rather than separate programs.

Risk Assessment

Identify and prioritize regulatory exposure and connect it to oversight priorities.

Regulatory Change

Translate new requirements into accountable implementation and sustainable execution.

Policies & Procedures

Establish clear requirements, ownership, and operating expectations.

Controls

Design preventive and detective controls around actual regulatory and operational risk.

Monitoring & Testing

Determine whether requirements and controls operate as intended and are supported by evidence.

Complaints & Issues

Identify patterns, root causes, emerging risk, and opportunities to strengthen the control environment.

Remediation

Correct failures, establish accountability, and validate sustainable closure.

Governance & Reporting

Give management clear visibility into risk, performance, issues, and accountability.

Executive Experience

Built from operations. Proven through transformation.

My career developed from the inside out: operations first, then regulatory depth, first-line leadership, enterprise governance, and transformation. That progression shapes how I build compliance programs that work in practice.

Operational Foundation

I learned the business from the inside.

My early career in residential lending and mortgage operations covered origination, underwriting, funding, and servicing. That foundation still shapes how I approach compliance: controls must work inside real operations, not only on paper.

Regulatory Depth

I developed the discipline of evidence.

At JPMorgan Chase, I supported CRA Emerging Markets lending offices across major U.S. markets. The work required regulatory research, risk assessment, testing, workpapers, fair lending judgment, and practical guidance to the business.

Progressive Leadership

I grew from compliance leader to enterprise subject-matter expert.

Over 13 years at MUFG Union Bank, my responsibilities expanded across mortgage, home equity, cards, unsecured lending, small-business lending, regulatory change, SAFE Act/NMLS governance, examinations, product and technology compliance, third-party oversight, consumer remediation, and team leadership.

Enterprise Transformation

I was recruited to build what an audit showed was missing.

At Experian, I rebuilt North America Compliance Operations after enterprise audit findings. I strengthened testing, remediation, examinations, policies, complaints governance, reporting, training, licensing, risk assessments, and technology-enabled workflows while leading 18 compliance professionals.

How I Lead

Standards can be high without making people small.

I believe strong teams do not require sameness. They require respect, clarity, curiosity, fair standards, and the safety to raise a different point of view.

01

Respect & Candor

People deserve direct communication, clear expectations, and dignity regardless of title.

02

Curiosity & Judgment

I seek the facts, context, and competing perspectives before reaching a conclusion.

03

Accountability & Dissent

I set clear standards while making it safe to raise risk, challenge assumptions, and disagree.

Executive Partnership

How I turn requirements into business execution

01
Assess
Understand regulatory risk, control effectiveness, business objectives, and where exposure is most likely to emerge.
02
Build
Create governance, policies, procedures, controls, testing, monitoring, and reporting that work in practice.
03
Enable
Partner with Product, Marketing, Technology, Operations, Legal, and leadership to support responsible growth from concept through implementation.
04
Sustain
Use monitoring, testing, examinations, reporting, issues management, and remediation to keep the environment effective as the business changes.

Selected Transformation Work

Executive Leadership Backed by Hands-On Execution

Representative examples of programs, controls, and complex work delivered across banking, data, and digital financial services. Details are presented at a high level to protect confidential and proprietary information.

Testing & Workpaper Modernization

Rebuilt testing discipline and strengthened the evidence behind it

Personally developed detailed testing workpapers across JPMorgan Chase, MUFG Union Bank, and Experian. At Experian, redesigned testing and second-level review worksheets while rebuilding a risk-based program spanning approximately 463 compliance obligations and an annual plan of approximately 100 reviews, with a path toward AI-enabled execution.

CMS, Controls & Regulatory Change

Connected requirements, controls, ownership, and evidence

Built and strengthened compliance infrastructure that connected regulatory requirements to accountable owners, controls, monitoring, and remediation. Used structured repositories, reporting, and technology-enabled workflows to improve traceability, identify control impacts, and make the environment easier to explain to management, auditors, and regulators.

Regulatory Change Execution

Rescued a stalled implementation and carried it through execution

At MUFG Union Bank, assumed ownership of a high-risk regulatory-change implementation that had lost momentum. Translated requirements into business briefings, built the Excel action plan used to coordinate execution, established ownership and tracking, and later partnered with Technology to create a tool and dashboard showing progress.

Marketing Compliance & Business Enablement

Built practical tools to identify marketing risk earlier

Developed practical marketing compliance guidance to help identify words and claims that could trigger additional regulatory review. The approach helped Marketing and Product surface risk earlier, validate whether claims were supportable, and find accurate alternatives when needed rather than treating Compliance as a last-minute gatekeeper.

Retrospective Review & Escalation

Finding the pattern behind the issue

A second mortgage rescission issue prompted me to look beyond the individual exception. I conducted a retrospective review of seasoned rescinded loans and identified a recurring internal fraud pattern connected to the same employee. I escalated the matter for investigation and supported the control remediation that followed.

Investigative Review & Remediation

Following the evidence

An employee data-misuse matter required more than executive oversight. I personally reviewed system login and activity records to help assess the scope of potential misuse, then worked with Investigations and Legal on risk management, consumer notification, and credit-monitoring remediation.

Ethics & Independent Judgment

Complex decisions require more than knowing the rule.

Experience assessing conflicts of interest, outside activities, gifts and hospitality, employee conduct, third-party relationships, and sensitive matters requiring independent judgment, documented analysis, and appropriate escalation.

Conflicts & Relationships

Identifying and assessing relationships that could affect independent judgment

Investigated a potential conflict involving a bank executive whose family member was an executive at the company supplying the bank’s loan-origination software. I researched the relationship, engaged Enterprise Risk Management, and escalated the matter through confidential reporting channels.

Gifts & Hospitality

Testing business purpose before approving a significant request

At Experian, I assessed employee conflicts and gifts and hospitality requests with Human Resources, Legal, and Risk. I denied a proposed $50,000 season-ticket purchase after determining the tickets would be provided to customers to encourage business and documented the basis for the decision.

Outside Activities & Governance

Turning individual conflict decisions into consistent governance

Reviewed annual conflict-of-interest disclosures and year-round outside-activity requests involving outside employment, consulting, time commitments, financial interests, and family or third-party relationships. I worked with Risk, Legal, and Human Resources to recommend denials, recusals, restrictions, or monitoring and documented decisions and risk exceptions when appropriate.

Executive Leadership Portfolio

Four executive pillars with evidence behind them

Explore the areas most relevant to your needs. Each pillar contains representative examples of work performed and the value created.

Enterprise Risk & Governance

01 · Risk & Governance
Enterprise Risk
Connecting risk, controls, issues, and decisions.

Enterprise risk leadership helps decision-makers see how regulatory, operational, consumer, third-party, technology, and reputational risks connect before they become isolated problems.

  • Led annual compliance risk assessments and translated results into testing, monitoring, reporting, and remediation priorities.
  • Built an Excel workbook to catalog aged MRAs, track evidence, and connect remediation to monitoring used to confirm closure.
  • Analyzed large data sets during consumer-harm lookbacks to identify potentially affected populations.

Value: Clearer visibility, better prioritization, and more defensible decisions.

02 · Risk & Governance
Governance
Creating accountability, ethical decisions, and reliable oversight.

Governance turns expectations into decision rights, accountable ownership, reliable escalation, and reporting that allows management and boards to act. My experience includes assessing conflicts of interest and outside business activities, reviewing gifts and hospitality, and documenting decisions when personal relationships or financial interests could affect business judgment.

  • Built and strengthened CMS components across testing, policies, training, complaints, examinations, licensing, and reporting.
  • Directed SAFE Act/NMLS Mortgage Loan Originator governance and licensing across regulated legal entities.
  • Created executive reporting through Power BI, RSA Archer, Excel, and technology-enabled workflows.

Conflict of interest and ethics oversight

  • Reviewed annual employee conflict-of-interest disclosures and outside business activities; researched relationships, sought clarification, and assessed potential conflicts involving staff, Sales, executives, and third parties.
  • Worked with Risk, Legal, and HR to recommend denials, recusals, restrictions, and ongoing monitoring; documented facts, decisions, and rationale, including formal risk exception requests when appropriate.
  • Assessed gifts and hospitality for business purpose, beneficiaries, and potential improper influence; challenged requests and escalated sensitive concerns through established governance and confidential reporting channels.

Value: Clear accountability, documented decisions, and oversight of relationships that could compromise independent judgment.

03 · Risk & Governance
Regulatory Strategy
Turning requirements into executable change.

Regulatory strategy connects interpretation with business impact, implementation, evidence, and long-term control sustainability.

  • Created and directed consumer and small-business lending regulatory-change governance at MUFG Union Bank.
  • Rescued a stalled high-risk implementation through business briefings, an Excel action plan, ownership, and progress tracking.
  • Led or supported examinations involving the CFPB, OCC, Federal Reserve, FDIC, FinCEN, and state regulators.

Value: Requirements move from interpretation to accountable execution.

Compliance & Consumer Protection

04 · Compliance
Compliance
Building programs that stand up to scrutiny.

A strong compliance program combines sound governance with testing, monitoring, evidence, issue management, complaints, policies, training, and effective challenge.

  • Personally developed detailed testing workpapers across JPMorgan Chase, MUFG Union Bank, and Experian.
  • Rebuilt an Experian testing program spanning approximately 463 obligations and approximately 100 annual reviews.
  • Performed second-level review and designed worksheets that documented results, support, conclusions, and follow-up.

Value: Compliance conclusions supported by evidence rather than assertion.

05 · Compliance
Consumer Financial Services & Digital Banking
Protecting consumers across products and partners.

Consumer protection requires understanding the product lifecycle, operational realities, and responsibilities shared across banks, fintechs, and service providers.

  • Led compliance across mortgage, home equity, cards, unsecured, and small-business lending, and directed testing, audits, and complaint management for a bank-partner debit card program.
  • Served as primary compliance contact to Community Federal Savings Bank for Experian Smart Money, with responsibility for testing, issues, and remediation.
  • Directed consumer-harm lookbacks and remediation involving interest, apology communications, and third-party execution.

Value: Customer outcomes remain visible across product and partner boundaries.

06 · Compliance
Financial Crime, Fraud & Investigations
Connecting specialized risk disciplines.

Hands-on experience investigating and resolving fraud, misconduct, and financial-crime risk across mortgage, credit card, unsecured lending, branch banking, and consumer-data environments. Reviewed investigative evidence and system activity, identified patterns and root causes, conducted employee interviews, assessed regulatory and control implications, supported SAR-related matters, escalated significant findings, and developed and strengthened preventive and detective controls.

  • Investigated internal and employee misconduct, consumer-lending fraud, and potential misuse of consumer data, working matters from initial analysis through escalation and remediation.
  • Applied compliance and operational expertise to distinguish isolated events from broader control failures, including retrospective reviews, pattern analysis, root-cause assessment, and control enhancement.
  • Worked alongside Fraud, Investigations, BSA/AML, Legal, Privacy, Technology, Operations, and business leadership when matters required specialized expertise or an enterprise response.

Some fraud and misconduct matters also raised conflict-of-interest or ethics concerns. I evaluated the overlapping risks and worked with the appropriate governance functions to document decisions, recommend restrictions or recusals, and support monitoring and control improvements.

Value: Brings both executive oversight and hands-on investigative judgment to complex fraud, misconduct, and financial-crime risk.

Transformation & Enablement

07 · Transformation
Operational Excellence
Making complex work clear and repeatable.

Operational excellence makes complex work understandable, repeatable, measurable, and resilient under pressure.

  • Created workbooks, trackers, review worksheets, process documentation, executive briefings, and remediation structures.
  • Managed large portfolios of obligations, testing plans, issues, policies, training, examinations, and concurrent priorities.
  • Supported approximately 15,000 PPP loans totaling approximately $2.5 billion during the pandemic response.

Value: Greater consistency, transparency, execution speed, and review readiness.

08 · Transformation
Technology & AI Governance
Using technology with control and accountability.

Technology creates value when governance, human accountability, data integrity, monitoring, and escalation are designed alongside it.

  • Redesigned testing worksheets and workflows to support a transition toward AI-enabled execution.
  • Partnered with Technology to convert a regulatory-change workbook into a tool and dashboard.
  • Modernized reporting through Power BI and RSA Archer and published a three-part AI governance series.

Value: Technology strengthens judgment without obscuring ownership.

09 · Transformation
Enterprise Transformation
Leading change across systems and teams.

Transformation requires a clear future state, credible governance, coordinated execution, and the ability to bring people through change.

  • Designed and led a multi-workstream compliance testing transformation, rebuilding testing discipline, workflow execution, and executive reporting.
  • Resolved the audit findings that drove the Experian role by rebuilding core compliance operations.
  • Contributed to MUFG Union Bank's transformation toward a Top 10 bank operating model.

Value: Change becomes embedded capability rather than a temporary initiative.

Leadership & Partnership

10 · Leadership
Strategic Business Partnership
Bringing credible challenge into business decisions.

Credible challenge is most effective when Compliance understands the business, explains the risk clearly, and helps identify a workable path.

  • Partnered across Product, Sales, Marketing, Technology, Capital Markets, Credit Risk, Operations, Legal, and third parties.
  • Translated requirements into business briefings, implementation responsibilities, controls, and decision points.
  • Provided independent analysis grounded in actual regulatory citations rather than position alone.

Value: Compliance becomes a source of sound decisions and responsible growth.

11 · Leadership
Leadership & Mentorship
Developing people while delivering results.

Leadership means setting direction and standards while creating the conditions for people with different backgrounds and working styles to contribute fully.

  • Led teams of up to 35 employees and technology resources; at Experian, led 18 professionals, including seven direct reports.
  • Created expectations, review structures, and development opportunities through significant change.
  • Used respectful candor, cultural curiosity, consistent accountability, and room for dissent to address conflict.

Value: People understand what success requires and know their perspective can improve the work.

12 · Leadership
Executive Advisory
Giving leaders clear, practical paths forward.

Executive advisory turns complexity into a clear assessment of what matters, what is missing, what should happen next, and who must own it.

  • Assess CMS, governance frameworks, regulatory risk programs, controls, policies, and procedures.
  • Conduct gap analyses and develop testing, monitoring, remediation, training, complaints, and reporting solutions.
  • Deliver executive-ready recommendations designed for implementation rather than presentation alone.

Value: Leaders receive a defensible path from assessment to action.

Writing & Published Work

Articles & Publications

Original articles, multi-part publication series, and externally published work on enterprise risk, governance, regulatory compliance, artificial intelligence, fair lending, and consumer financial services.

Three-Part Article Series · June–August 2026

AI Governance Summer Series

A practical series on building scalable AI governance programs that support innovation, regulatory readiness, enterprise risk management, accountability, and consumer protection.

View the three articles →
Article · May 2026

Regulatory Quiet Is Not Regulatory Safety

What the CFPB's fair lending shift means for banks and fintechs using artificial intelligence.

Read article →
Article · April 2026

What California Banks Should Be Watching Now

Five developing compliance areas involving fee governance, DFPI oversight, digital assets, AI governance, and community investment.

Read article →
Published Article · February 2026

SBA Lending in a Changing Risk Environment

A review of origination speed, fraud risk, documentation standards, and the controls that protect the bank, the borrower, and the SBA guaranty.

Read article and publication details →
View All Articles & Publications

Executive Validation

What colleagues and leaders say about the work

Enterprise Transformation

It’s amazing how much you accomplished and contributed to the Bank. You were absolutely instrumental in transforming the business to a ‘Top 10’ Bank.

JF
Jim Francis
Former Managing Director and Head of Transformation, MUFG Union Bank
Regulatory Rigor & Operational Leadership

Your thorough approach, grounded in actual regulatory citations, is a model for how to deal with many such issues. This is the sort of work that elevates the company and allows all parties to focus on real risks rather than creating self-inflicted spirals.

MH
Michael H.
Head of Retail Lending Operations

Executive Leadership Opportunities

Lead what comes next

Open to 100% remote executive leadership opportunities in compliance, enterprise risk, and governance, including Chief Compliance Officer and Head of Compliance roles. Additional interests include board and advisory opportunities and select strategic engagements.