Enterprise Risk  ·  Governance  ·  Compliance  ·  Transformation

Building clarity, confidence, and accountability in complex organizations.

I am a regulatory compliance and enterprise risk executive whose leadership was built from the work itself. My career spans lending operations, compliance testing, regulatory change, examinations, remediation, digital financial services, technology-enabled transformation, and executive advisory work.

Alison Stokes, CRCM
Strategy grounded in executionExecutive judgment informed by hands-on work across the first and second lines of defense.
20+ yearsRisk and compliance leadership
35Largest team led
463Compliance obligations managed
15,000PPP loans supported

My Story

The experience behind the executive

My career is a progression, not a collection of titles. Each stage added a different lens: how work is performed, how risk emerges, how regulation becomes execution, how teams navigate change, and how leaders create durable systems.

Operational Foundation

I learned the business from the inside.

My early career in residential lending and mortgage operations covered origination, underwriting, funding, and servicing. That foundation still shapes how I approach compliance: controls must work inside real operations, not only on paper.

Regulatory Depth

I developed the discipline of evidence.

At JPMorgan Chase, I supported CRA Emerging Markets lending offices across major U.S. markets. The work required regulatory research, risk assessment, testing, workpapers, fair lending judgment, and practical guidance to the business.

Progressive Leadership

I grew from compliance leader to enterprise subject-matter expert.

Over 13 years at MUFG Union Bank, my responsibilities expanded across mortgage, home equity, cards, unsecured lending, small-business lending, regulatory change, SAFE Act/NMLS governance, examinations, product and technology compliance, third-party oversight, consumer remediation, and team leadership.

Enterprise Transformation

I was recruited to build what an audit showed was missing.

At Experian, I rebuilt North America Compliance Operations after enterprise audit findings. I strengthened testing, remediation, examinations, policies, complaints governance, reporting, training, licensing, risk assessments, and technology-enabled workflows while leading 18 compliance professionals.

Executive Advisory

I now bring that full perspective to organizations in transition.

Through A. Stokes Consulting, I provide project-based and executive advisory support involving enterprise risk, governance, Compliance Management Systems, regulatory strategy, program assessment, remediation, testing, reporting, and transformation.

How I Lead

Standards can be high without making people small.

I believe strong teams do not require sameness. They require respect, clarity, curiosity, fair standards, and the safety to raise a different point of view.

Leadership across cultures and perspectives

I do not expect people to communicate, lead, or solve problems in identical ways. I ask questions before making assumptions, seek the context behind a perspective, and create room for people to challenge ideas without challenging one another's dignity. Different backgrounds improve decisions when leaders make it safe to contribute and remain consistent about expectations.

01

Respect before rank

Every person deserves to be heard and treated with dignity, regardless of title.

02

Curiosity before conclusion

I test assumptions and seek context before deciding what a situation means.

03

Directness with care

I address difficult issues clearly without humiliation, ambiguity, or avoidance.

04

Consistent accountability

Standards, ownership, and follow-through should be understood and fairly applied.

05

Room for dissent

People must be able to raise risk, question assumptions, and disagree without penalty.

How I approach conflict

Conflict becomes productive when people understand the shared objective, the evidence, the decision rights, and what happens next.

1. Listen and clarifyUnderstand the facts, perspectives, interests, and assumptions before reacting.
2. Recenter the objectiveSeparate personalities from the business, customer, regulatory, or team outcome.
3. Test the evidenceUse requirements, data, risk, and operational reality to evaluate options.
4. Decide and follow throughClarify ownership, document the path forward, and monitor execution without resentment.

Executive Impact

How I Partner With Leadership Teams

01
Assess
Identify enterprise risks, evaluate strategic initiatives, and anticipate regulatory, operational, and consumer impacts before they become business problems.
02
Strengthen
Improve governance, policies, third-party risk and compliance oversight, enterprise licensing governance, compliance operations, reporting, testing, complaints management, and enterprise risk capabilities.
03
Enable
Partner with executive leadership, Product, Sales, Marketing, Technology, Capital Markets, Credit Risk, Operations, and Legal to support responsible growth and sound decision-making.
04
Transform
Modernize Enterprise Risk, Governance, Compliance, AI Governance, Operational Excellence, and Regulatory programs to support organizational growth and resilience.
05
Sustain
Build long-term organizational resilience through continuous improvement, executive reporting, examinations, audits, remediation, business continuity, and operational risk management.
06
Collaborate
Work directly with Legal, Product, Marketing, Technology, and Operations to translate regulatory expectations into business execution.

Selected Transformation Work

Executive Leadership Backed by Hands-On Execution

Representative examples of complex work delivered across banking, data, and digital financial services. Details are presented at a high level to protect confidential and proprietary information.

Testing & Workpaper Modernization

Rebuilt testing discipline and strengthened the evidence behind it

Personally developed detailed testing workpapers across JPMorgan Chase, MUFG Union Bank, and Experian. At Experian, redesigned testing and second-level review worksheets while rebuilding a risk-based program spanning approximately 463 compliance obligations and an annual plan of approximately 100 reviews, with a path toward AI-enabled execution.

MRA Remediation & Evidence

Turned aged remediation into an organized, supportable record

Built a comprehensive Excel workbook to catalog aged regulatory MRAs, track actions and supporting evidence, and connect remediation commitments to monitoring used to confirm accurate and complete closure. The structure improved accountability, visibility, and readiness for independent review.

Regulatory Change Execution

Rescued a stalled implementation and carried it through execution

At MUFG Union Bank, assumed ownership of a high-risk regulatory-change implementation that had lost momentum. Translated requirements into business briefings, built the Excel action plan used to coordinate execution, established ownership and tracking, and later partnered with Technology to create a tool and dashboard showing progress.

Consumer-Harm Lookbacks

Connected data analysis, regulatory reasoning, and customer remediation

Defined data requirements, directed SQL extraction needs, and analyzed large data sets to identify potentially affected consumers. Wrote white papers documenting the regulatory requirements, control failure, and impacted population, then partnered with Legal and Risk to design and execute remediation involving interest, customer apology communications, and third-party support.

Interactive Leadership Portfolio

Twelve domains with evidence behind them

Open any domain to see how I define it, representative work I have performed, and the value it created.

Enterprise Risk & Governance
Compliance & Consumer Protection
Transformation & Enablement
Leadership & Partnership
01 · Risk & Governance
Enterprise Risk
Connecting risk, controls, issues, and decisions.

Enterprise risk leadership helps decision-makers see how regulatory, operational, consumer, third-party, technology, and reputational risks connect before they become isolated problems.

  • Led annual compliance risk assessments and translated results into testing, monitoring, reporting, and remediation priorities.
  • Built an Excel workbook to catalog aged MRAs, track evidence, and connect remediation to monitoring used to confirm closure.
  • Analyzed large data sets during consumer-harm lookbacks to identify potentially affected populations.

Value: Clearer visibility, better prioritization, and more defensible decisions.

02 · Risk & Governance
Governance
Creating accountability and reliable oversight.

Governance turns expectations into decision rights, accountable ownership, reliable escalation, and reporting that allows management and boards to act.

  • Built and strengthened CMS components across testing, policies, training, complaints, examinations, licensing, and reporting.
  • Directed SAFE Act/NMLS Mortgage Loan Originator governance and licensing across regulated legal entities.
  • Created executive reporting through Power BI, RSA Archer, Excel, and technology-enabled workflows.

Value: Accountability that is visible, measurable, and sustainable.

03 · Risk & Governance
Regulatory Strategy
Turning requirements into executable change.

Regulatory strategy connects interpretation with business impact, implementation, evidence, and long-term control sustainability.

  • Created and directed consumer and small-business lending regulatory-change governance at MUFG Union Bank.
  • Rescued a stalled high-risk implementation through business briefings, an Excel action plan, ownership, and progress tracking.
  • Led or supported examinations involving the CFPB, OCC, Federal Reserve, FDIC, FinCEN, and state regulators.

Value: Requirements move from interpretation to accountable execution.

04 · Compliance
Compliance
Building programs that stand up to scrutiny.

A strong compliance program combines sound governance with testing, monitoring, evidence, issue management, complaints, policies, training, and effective challenge.

  • Personally developed detailed testing workpapers across JPMorgan Chase, MUFG Union Bank, and Experian.
  • Rebuilt an Experian testing program spanning approximately 463 obligations and approximately 100 annual reviews.
  • Performed second-level review and designed worksheets that documented results, support, conclusions, and follow-up.

Value: Compliance conclusions supported by evidence rather than assertion.

05 · Compliance
Consumer Financial Services & Digital Banking
Protecting consumers across products and partners.

Consumer protection requires understanding the product lifecycle, operational realities, and responsibilities shared across banks, fintechs, and service providers.

  • Led compliance across mortgage, home equity, cards, unsecured and small-business lending, deposits, debit cards, and payments.
  • Served as primary compliance contact to Community Federal Savings Bank for Experian Smart Money, with responsibility for testing, issues, and remediation.
  • Directed consumer-harm lookbacks and remediation involving interest, apology communications, and third-party execution.

Value: Customer outcomes remain visible across product and partner boundaries.

06 · Compliance
Financial Crime, Privacy & Data Protection
Connecting specialized risk disciplines.

These disciplines require clear ownership, strong partnerships, reliable escalation, and an understanding of how customer, transaction, and data risks overlap.

  • Partnered with BSA/AML, fraud, privacy, Legal, and technology stakeholders on assessments, issues, controls, and regulatory expectations.
  • Supported governance involving KYC/CDD/EDD, OFAC and sanctions, transaction monitoring, and consumer privacy.
  • Applied privacy and data considerations to products, third parties, complaints, disclosures, and remediation.

Value: Specialized risks are governed as connected business responsibilities.

07 · Transformation
Operational Excellence
Making complex work clear and repeatable.

Operational excellence makes complex work understandable, repeatable, measurable, and resilient under pressure.

  • Created workbooks, trackers, review worksheets, process documentation, executive briefings, and remediation structures.
  • Managed large portfolios of obligations, testing plans, issues, policies, training, examinations, and concurrent priorities.
  • Supported approximately 15,000 PPP loans totaling approximately $2.5 billion during the pandemic response.

Value: Greater consistency, transparency, execution speed, and review readiness.

08 · Transformation
Technology & AI Governance
Using technology with control and accountability.

Technology creates value when governance, human accountability, data integrity, monitoring, and escalation are designed alongside it.

  • Redesigned testing worksheets and workflows to support a transition toward AI-enabled execution.
  • Partnered with Technology to convert a regulatory-change workbook into a tool and dashboard.
  • Modernized reporting through Power BI and RSA Archer and published a three-part AI governance series.

Value: Technology strengthens judgment without obscuring ownership.

09 · Transformation
Enterprise Transformation
Leading change across systems and teams.

Transformation requires a clear future state, credible governance, coordinated execution, and the ability to bring people through change.

  • Directed Project Odyssey, rebuilding testing discipline, workflow execution, and executive reporting.
  • Resolved the audit findings that drove the Experian role by rebuilding core compliance operations.
  • Contributed to MUFG Union Bank's transformation toward a Top 10 bank operating model.

Value: Change becomes embedded capability rather than a temporary initiative.

10 · Leadership
Strategic Business Partnership
Bringing credible challenge into business decisions.

Credible challenge is most effective when Compliance understands the business, explains the risk clearly, and helps identify a workable path.

  • Partnered across Product, Sales, Marketing, Technology, Capital Markets, Credit Risk, Operations, Legal, and third parties.
  • Translated requirements into business briefings, implementation responsibilities, controls, and decision points.
  • Provided independent analysis grounded in actual regulatory citations rather than position alone.

Value: Compliance becomes a source of sound decisions and responsible growth.

11 · Leadership
Leadership & Mentorship
Developing people while delivering results.

Leadership means setting direction and standards while creating the conditions for people with different backgrounds and working styles to contribute fully.

  • Led teams of up to 35 employees and technology resources; at Experian, led 18 professionals, including seven direct reports.
  • Created expectations, review structures, and development opportunities through significant change.
  • Used respectful candor, cultural curiosity, consistent accountability, and room for dissent to address conflict.

Value: People understand what success requires and know their perspective can improve the work.

12 · Leadership
Executive Advisory
Giving leaders clear, practical paths forward.

Executive advisory turns complexity into a clear assessment of what matters, what is missing, what should happen next, and who must own it.

  • Assess CMS, governance frameworks, regulatory risk programs, controls, policies, and procedures.
  • Conduct gap analyses and develop testing, monitoring, remediation, training, complaints, and reporting solutions.
  • Deliver executive-ready recommendations designed for implementation rather than presentation alone.

Value: Leaders receive a defensible path from assessment to action.

Writing & Published Work

Articles & Publications

Original articles, multi-part publication series, and externally published work on enterprise risk, governance, regulatory compliance, artificial intelligence, fair lending, and consumer financial services.

Three-Part Article Series · June–August 2026

AI Governance Summer Series

A practical series on building scalable AI governance programs that support innovation, regulatory readiness, enterprise risk management, accountability, and consumer protection.

View the three articles →
Article · May 2026

Regulatory Quiet Is Not Regulatory Safety

What the CFPB's fair lending shift means for banks and fintechs using artificial intelligence.

Read article →
Article · April 2026

What California Banks Should Be Watching Now

Five developing compliance areas involving fee governance, DFPI oversight, digital assets, AI governance, and community investment.

Read article →
Published Article · February 2026

SBA Lending in a Changing Risk Environment

A review of origination speed, fraud risk, documentation standards, and the controls that protect the bank, the borrower, and the SBA guaranty.

Read article and publication details →
View All Articles & Publications

Executive Validation

What colleagues and leaders say about the work

Enterprise Transformation

It’s amazing how much you accomplished and contributed to the Bank. You were absolutely instrumental in transforming the business to a ‘Top 10’ Bank.

JF
Jim Francis
Former Managing Director and Head of Transformation, MUFG Union Bank
OCC Fair Lending Examination Outcome

The OCC stated that we did not treat Hispanics differently and met FHA requirements. Our processes are consistent and they did not see variances in our processing. Thank you for all of your efforts and dedication, as well as your amazing partnership.

DC
Diana C.
Regulatory Business Control Group Manager
Regulatory Rigor & Operational Leadership

Your thorough approach, grounded in actual regulatory citations, is a model for how to deal with many such issues. This is the sort of work that elevates the company and allows all parties to focus on real risks rather than creating self-inflicted spirals.

MH
Michael H.
Head of Retail Lending Operations
First-Line Analytical Independence

In my 25+ years of working with Compliance professionals, Alison stands above them all. She does not lean on the second-line compliance team to do her job. Instead, she conducts her own analysis of each regulatory question and provides it to second-line when their concurrence is needed. Anyone who hires her will be extremely grateful they did.

HB
Heather Brieske, CRCM
VP, Sr. Risk & Compliance Manager

Connect

Begin the Conversation

Open to 100% remote executive leadership opportunities, including Chief Compliance Officer and Head of Compliance roles, board advisory conversations, and select strategic engagements where enterprise risk, governance, and compliance leadership matters.