Enterprise Risk  ·  Governance  ·  Compliance  ·  Transformation

Building clarity, confidence, and accountability in complex organizations.

I am a regulatory compliance and enterprise risk executive whose leadership was built from the work itself. My career spans lending operations, compliance testing, regulatory change, examinations, remediation, digital financial services, technology-enabled transformation, and executive advisory work.

Alison Stokes, CRCM
Strategy grounded in executionExecutive judgment informed by hands-on work across the first and second lines of defense.
20+ yearsRisk and compliance leadership
35Largest team led
463Compliance obligations managed
15,000PPP loans supported

My Story

The experience behind the executive

My career is a progression, not a collection of titles. Each stage added a different lens: how work is performed, how risk emerges, how regulation becomes execution, how teams navigate change, and how leaders create durable systems.

Operational Foundation

I learned the business from the inside.

My early career in residential lending and mortgage operations covered origination, underwriting, funding, and servicing. That foundation still shapes how I approach compliance: controls must work inside real operations, not only on paper.

Regulatory Depth

I developed the discipline of evidence.

At JPMorgan Chase, I supported CRA Emerging Markets lending offices across major U.S. markets. The work required regulatory research, risk assessment, testing, workpapers, fair lending judgment, and practical guidance to the business.

Progressive Leadership

I grew from compliance leader to enterprise subject-matter expert.

Over 13 years at MUFG Union Bank, my responsibilities expanded across mortgage, home equity, cards, unsecured lending, small-business lending, regulatory change, SAFE Act/NMLS governance, examinations, product and technology compliance, third-party oversight, consumer remediation, and team leadership.

Enterprise Transformation

I was recruited to build what an audit showed was missing.

At Experian, I rebuilt North America Compliance Operations after enterprise audit findings. I strengthened testing, remediation, examinations, policies, complaints governance, reporting, training, licensing, risk assessments, and technology-enabled workflows while leading 18 compliance professionals.

Executive Advisory

I now bring that full perspective to organizations in transition.

Through A. Stokes Consulting, I provide project-based and executive advisory support involving enterprise risk, governance, Compliance Management Systems, regulatory strategy, program assessment, remediation, testing, reporting, and transformation.

How I Lead

Standards can be high without making people small.

I believe strong teams do not require sameness. They require respect, clarity, curiosity, fair standards, and the safety to raise a different point of view.

Leadership across cultures and perspectives

I do not expect people to communicate, lead, or solve problems in identical ways. I ask questions before making assumptions, seek the context behind a perspective, and create room for people to challenge ideas without challenging one another's dignity. Different backgrounds improve decisions when leaders make it safe to contribute and remain consistent about expectations.

01

Respect before rank

Every person deserves to be heard and treated with dignity, regardless of title.

02

Curiosity before conclusion

I test assumptions and seek context before deciding what a situation means.

03

Directness with care

I address difficult issues clearly without humiliation, ambiguity, or avoidance.

04

Consistent accountability

Standards, ownership, and follow-through should be understood and fairly applied.

05

Room for dissent

People must be able to raise risk, question assumptions, and disagree without penalty.

How I approach conflict

Conflict becomes productive when people understand the shared objective, the evidence, the decision rights, and what happens next.

1. Listen and clarifyUnderstand the facts, perspectives, interests, and assumptions before reacting.
2. Recenter the objectiveSeparate personalities from the business, customer, regulatory, or team outcome.
3. Test the evidenceUse requirements, data, risk, and operational reality to evaluate options.
4. Decide and follow throughClarify ownership, document the path forward, and monitor execution without resentment.

Executive Impact

How I Partner With Leadership Teams

01
Assess
Identify enterprise risks, evaluate strategic initiatives, and anticipate regulatory, operational, and consumer impacts before they become business problems.
02
Strengthen
Improve governance, policies, third-party risk and compliance oversight, enterprise licensing governance, compliance operations, reporting, testing, complaints management, and enterprise risk capabilities.
03
Enable
Partner with executive leadership, Product, Sales, Marketing, Technology, Capital Markets, Credit Risk, Operations, and Legal to support responsible growth and sound decision-making.
04
Transform
Modernize Enterprise Risk, Governance, Compliance, AI Governance, Operational Excellence, and Regulatory programs to support organizational growth and resilience.
05
Sustain
Build long-term organizational resilience through continuous improvement, executive reporting, examinations, audits, remediation, business continuity, and operational risk management.
06
Collaborate
Work directly with Legal, Product, Marketing, Technology, and Operations to translate regulatory expectations into business execution.

Selected Transformation Work

Executive Leadership Backed by Hands-On Execution

Representative examples of complex work delivered across banking, data, and digital financial services. Details are presented at a high level to protect confidential and proprietary information.

Testing & Workpaper Modernization

Rebuilt testing discipline and strengthened the evidence behind it

Personally developed detailed testing workpapers across JPMorgan Chase, MUFG Union Bank, and Experian. At Experian, redesigned testing and second-level review worksheets while rebuilding a risk-based program spanning approximately 463 compliance obligations and an annual plan of approximately 100 reviews, with a path toward AI-enabled execution.

MRA Remediation & Evidence

Turned aged remediation into an organized, supportable record

Built a comprehensive Excel workbook to catalog aged regulatory MRAs, track actions and supporting evidence, and connect remediation commitments to monitoring used to confirm accurate and complete closure. The structure improved accountability, visibility, and readiness for independent review.

Regulatory Change Execution

Rescued a stalled implementation and carried it through execution

At MUFG Union Bank, assumed ownership of a high-risk regulatory-change implementation that had lost momentum. Translated requirements into business briefings, built the Excel action plan used to coordinate execution, established ownership and tracking, and later partnered with Technology to create a tool and dashboard showing progress.

Consumer-Harm Lookbacks

Connected data analysis, regulatory reasoning, and customer remediation

Defined data requirements, directed SQL extraction needs, and analyzed large data sets to identify potentially affected consumers. Wrote white papers documenting the regulatory requirements, control failure, and impacted population, then partnered with Legal and Risk to design and execute remediation involving interest, customer apology communications, and third-party support.

Retrospective Review & Escalation

Finding the pattern behind the issue

A second mortgage rescission issue prompted me to look beyond the individual exception. I conducted a retrospective review of seasoned rescinded loans and identified a recurring internal fraud pattern connected to the same employee. I escalated the matter for investigation and supported the control remediation that followed.

Investigative Review & Remediation

Following the evidence

At Experian, an employee consumer-data misuse matter required more than executive oversight. I personally reviewed system login and activity records to help assess the scope of potential misuse, then worked with Investigations and Legal on risk management, consumer notification, and credit-monitoring remediation.

Interactive Leadership Portfolio

Twelve domains with evidence behind them

Open any domain to see how I define it, representative work I have performed, and the value it created.

Enterprise Risk & Governance

01 · Risk & Governance
Enterprise Risk
Connecting risk, controls, issues, and decisions.

Enterprise risk leadership helps decision-makers see how regulatory, operational, consumer, third-party, technology, and reputational risks connect before they become isolated problems.

  • Led annual compliance risk assessments and translated results into testing, monitoring, reporting, and remediation priorities.
  • Built an Excel workbook to catalog aged MRAs, track evidence, and connect remediation to monitoring used to confirm closure.
  • Analyzed large data sets during consumer-harm lookbacks to identify potentially affected populations.

Value: Clearer visibility, better prioritization, and more defensible decisions.

02 · Risk & Governance
Governance
Creating accountability and reliable oversight.

Governance turns expectations into decision rights, accountable ownership, reliable escalation, and reporting that allows management and boards to act.

  • Built and strengthened CMS components across testing, policies, training, complaints, examinations, licensing, and reporting.
  • Directed SAFE Act/NMLS Mortgage Loan Originator governance and licensing across regulated legal entities.
  • Created executive reporting through Power BI, RSA Archer, Excel, and technology-enabled workflows.

Value: Accountability that is visible, measurable, and sustainable.

03 · Risk & Governance
Regulatory Strategy
Turning requirements into executable change.

Regulatory strategy connects interpretation with business impact, implementation, evidence, and long-term control sustainability.

  • Created and directed consumer and small-business lending regulatory-change governance at MUFG Union Bank.
  • Rescued a stalled high-risk implementation through business briefings, an Excel action plan, ownership, and progress tracking.
  • Led or supported examinations involving the CFPB, OCC, Federal Reserve, FDIC, FinCEN, and state regulators.

Value: Requirements move from interpretation to accountable execution.

Compliance & Consumer Protection

04 · Compliance
Compliance
Building programs that stand up to scrutiny.

A strong compliance program combines sound governance with testing, monitoring, evidence, issue management, complaints, policies, training, and effective challenge.

  • Personally developed detailed testing workpapers across JPMorgan Chase, MUFG Union Bank, and Experian.
  • Rebuilt an Experian testing program spanning approximately 463 obligations and approximately 100 annual reviews.
  • Performed second-level review and designed worksheets that documented results, support, conclusions, and follow-up.

Value: Compliance conclusions supported by evidence rather than assertion.

05 · Compliance
Consumer Financial Services & Digital Banking
Protecting consumers across products and partners.

Consumer protection requires understanding the product lifecycle, operational realities, and responsibilities shared across banks, fintechs, and service providers.

  • Led compliance across mortgage, home equity, cards, unsecured, and small-business lending, and directed testing, audits, and complaint management for a bank-partner debit card program.
  • Served as primary compliance contact to Community Federal Savings Bank for Experian Smart Money, with responsibility for testing, issues, and remediation.
  • Directed consumer-harm lookbacks and remediation involving interest, apology communications, and third-party execution.

Value: Customer outcomes remain visible across product and partner boundaries.

06 · Compliance
Financial Crime, Fraud & Investigations
Connecting specialized risk disciplines.

Hands-on experience investigating and resolving fraud, misconduct, and financial-crime risk across mortgage, credit card, unsecured lending, branch banking, and consumer-data environments. Reviewed investigative evidence and system activity, identified patterns and root causes, conducted employee interviews, assessed regulatory and control implications, supported SAR-related matters, escalated significant findings, and developed and strengthened preventive and detective controls.

  • Investigated internal and employee misconduct, consumer-lending fraud, and potential misuse of consumer data, working matters from initial analysis through escalation and remediation.
  • Applied compliance and operational expertise to distinguish isolated events from broader control failures, including retrospective reviews, pattern analysis, root-cause assessment, and control enhancement.
  • Worked alongside Fraud, Investigations, BSA/AML, Legal, Privacy, Technology, Operations, and business leadership when matters required specialized expertise or an enterprise response.

Value: Brings both executive oversight and hands-on investigative judgment to complex fraud, misconduct, and financial-crime risk.

Transformation & Enablement

07 · Transformation
Operational Excellence
Making complex work clear and repeatable.

Operational excellence makes complex work understandable, repeatable, measurable, and resilient under pressure.

  • Created workbooks, trackers, review worksheets, process documentation, executive briefings, and remediation structures.
  • Managed large portfolios of obligations, testing plans, issues, policies, training, examinations, and concurrent priorities.
  • Supported approximately 15,000 PPP loans totaling approximately $2.5 billion during the pandemic response.

Value: Greater consistency, transparency, execution speed, and review readiness.

08 · Transformation
Technology & AI Governance
Using technology with control and accountability.

Technology creates value when governance, human accountability, data integrity, monitoring, and escalation are designed alongside it.

  • Redesigned testing worksheets and workflows to support a transition toward AI-enabled execution.
  • Partnered with Technology to convert a regulatory-change workbook into a tool and dashboard.
  • Modernized reporting through Power BI and RSA Archer and published a three-part AI governance series.

Value: Technology strengthens judgment without obscuring ownership.

09 · Transformation
Enterprise Transformation
Leading change across systems and teams.

Transformation requires a clear future state, credible governance, coordinated execution, and the ability to bring people through change.

  • Designed and led a multi-workstream compliance testing transformation, rebuilding testing discipline, workflow execution, and executive reporting.
  • Resolved the audit findings that drove the Experian role by rebuilding core compliance operations.
  • Contributed to MUFG Union Bank's transformation toward a Top 10 bank operating model.

Value: Change becomes embedded capability rather than a temporary initiative.

Leadership & Partnership

10 · Leadership
Strategic Business Partnership
Bringing credible challenge into business decisions.

Credible challenge is most effective when Compliance understands the business, explains the risk clearly, and helps identify a workable path.

  • Partnered across Product, Sales, Marketing, Technology, Capital Markets, Credit Risk, Operations, Legal, and third parties.
  • Translated requirements into business briefings, implementation responsibilities, controls, and decision points.
  • Provided independent analysis grounded in actual regulatory citations rather than position alone.

Value: Compliance becomes a source of sound decisions and responsible growth.

11 · Leadership
Leadership & Mentorship
Developing people while delivering results.

Leadership means setting direction and standards while creating the conditions for people with different backgrounds and working styles to contribute fully.

  • Led teams of up to 35 employees and technology resources; at Experian, led 18 professionals, including seven direct reports.
  • Created expectations, review structures, and development opportunities through significant change.
  • Used respectful candor, cultural curiosity, consistent accountability, and room for dissent to address conflict.

Value: People understand what success requires and know their perspective can improve the work.

12 · Leadership
Executive Advisory
Giving leaders clear, practical paths forward.

Executive advisory turns complexity into a clear assessment of what matters, what is missing, what should happen next, and who must own it.

  • Assess CMS, governance frameworks, regulatory risk programs, controls, policies, and procedures.
  • Conduct gap analyses and develop testing, monitoring, remediation, training, complaints, and reporting solutions.
  • Deliver executive-ready recommendations designed for implementation rather than presentation alone.

Value: Leaders receive a defensible path from assessment to action.

Writing & Published Work

Articles & Publications

Original articles, multi-part publication series, and externally published work on enterprise risk, governance, regulatory compliance, artificial intelligence, fair lending, and consumer financial services.

Three-Part Article Series · June–August 2026

AI Governance Summer Series

A practical series on building scalable AI governance programs that support innovation, regulatory readiness, enterprise risk management, accountability, and consumer protection.

View the three articles →
Article · May 2026

Regulatory Quiet Is Not Regulatory Safety

What the CFPB's fair lending shift means for banks and fintechs using artificial intelligence.

Read article →
Article · April 2026

What California Banks Should Be Watching Now

Five developing compliance areas involving fee governance, DFPI oversight, digital assets, AI governance, and community investment.

Read article →
Published Article · February 2026

SBA Lending in a Changing Risk Environment

A review of origination speed, fraud risk, documentation standards, and the controls that protect the bank, the borrower, and the SBA guaranty.

Read article and publication details →
View All Articles & Publications

Executive Validation

What colleagues and leaders say about the work

Enterprise Transformation

It’s amazing how much you accomplished and contributed to the Bank. You were absolutely instrumental in transforming the business to a ‘Top 10’ Bank.

JF
Jim Francis
Former Managing Director and Head of Transformation, MUFG Union Bank
Regulatory Rigor & Operational Leadership

Your thorough approach, grounded in actual regulatory citations, is a model for how to deal with many such issues. This is the sort of work that elevates the company and allows all parties to focus on real risks rather than creating self-inflicted spirals.

MH
Michael H.
Head of Retail Lending Operations

Connect

Begin the Conversation

Open to 100% remote compliance and governance leadership roles, including Head of Compliance and Chief Compliance Officer opportunities, as well as board advisory conversations and select strategic engagements.