The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status.

Need Help?

If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries won't receive a response).

Regular or Temporary:

Regular

Language Fluency:  English (Required)

Work Shift:

1st shift (United States of America)

Please review the following job description:

The Enterprise Resilience Senior Risk Manager is a second line of defense subject matter expert responsible for developing and maintaining strategies, frameworks, and policies to enhance the organization’s ability to prepare for, respond to, and recover from adverse events or crises.  Activities aligned with this role have strategic and/or broad implications to the Bank. This includes facilitating complex cross-functional initiatives that enable the proactive management and assessment of resilience risk with domain leads across Technology and Cyber resiliency, Operations and process resiliency, human resiliency, business continuity and disaster recovery planning/testing, enterprise response (incident/crisis) management, and third-party suppliers.  This role executes governance, oversight, and effective challenge routines over these risk domains and leads and directs teammates carrying out these activities.   

Accountable for successful audit and regulatory engagement and issue management related to oversight of resiliency risk and for building strong stakeholder relationships across the first, second, and third lines of defense.

Following is a summary of the essential functions for this job.  Other duties may be performed, both major and minor, which are not mentioned below.  Specific activities may change from time to time. 

1. Manage requirements of the Enterprise Resiliency policy and procedures and determine compliance by domain partners through effective challenge and monitoring activities (QA, etc.).

2. Align resilience programs with regulatory requirements, industry standards, and organizational strategies.

3. Serve as cross-functional subject matter expert to resiliency domain risk managers, Technology, GCO organization and second line of defense risk programs.

4. Develop, monitor, and report on resilience metrics, risk mitigation efforts and enterprise program effectiveness for committee and Board reporting.

5. Conduct risk assessments and gap analyses to evaluate vulnerabilities within the Bank.

6. Regulatory engagement, including regular supervisory meetings, exams, and sustainable remediation of findings.

7. Drive successful identification and timely remediation of resiliency risk management self-identified or audit risks and issues.

8. Work with cross-functional teams (Cyber, BC/DR, Legal, Operations, Crisis Management, Third Party, etc.) to integrate resilience practices across the organization.

9. Champion enterprise resiliency awareness and culture as well as best practice sharing with various stakeholders and aid in the development of bank-wide resiliency risk management training modules.

10. Establish and maintain strong working relationships with key business partners.

11. Stay abreast of emerging trends, threats, and best practices in enterprise resilience.

12. Apply a comprehensive understanding of how the organization operates to solve technical, operational, and business problems.

Qualifications

Required Qualifications:

The requirements listed below are representative of the knowledge, skill and/or ability required.  Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

1. Bachelor’s Degree.

2. Fifteen+ years of banking or related experience in Resilience, Business Continuity/Disaster Recovery, Information Technology Risk Management, Cyber, crisis management or sen