Operational and Enterprise Risk Manager

Description

Responsible for administering and facilitating Sunward’s third-party risk management, business continuity, and related risk programs under the direction of the VP, Risk Management. This role coordinates day-to-day program activities across vendor relationship owners (VROs) and business units, supporting both new and existing vendor due diligence, business continuity plan updates, and issue management tasks. It provides guidance to stakeholders on how to review, interpret, and meet program requirements, ensures adherence to established compliance procedures, and escalates concerns appropriately.

This position also works closely with Legal, Information Security, and Compliance to coordinate technical and compliance reviews, and collaborates with VROs and internal partners to understand contract content, risk allocation, and potential gaps related to confidentiality, subcontracting, regulatory compliance, service levels, data requirements, and breach liability. It identifies operational issues, recommends refinements to processes, and ensures consistent application of standards across the organization, operating with limited autonomy and focusing on supporting departmental goals through strong coordination and operational enablement.

• Maintains Sunward’s vendor management and business continuity policy and program, including program documentation. Ensures activities are performed and records are retained in compliance with applicable laws, regulations, and Sunward’s policies and procedures, escalating concerns as necessary.
• Looks for opportunities to improve processes in the business continuity and third-party management life cycles, recommending refinements to procedures and supporting program updates to enhance operational accuracy and efficiency.
• Administers and maintains software program(s) (e.g., Tandem) used for vendor, contract management, and business continuity functions, ensuring data accuracy and supporting front-line adoption of system changes.
• Supports VROs’ review of contracts and updates of business continuity documents and other materials as part of due diligence, providing clear guidance on program requirements and expectations.
• Conducts review, in conjunction with Legal, of detailed technical and legal documents. Provides contract redlines to VROs and/or counsel and works with stakeholders to address gap areas or compliance issues within established procedures.
• Helps VROs and process owners evaluate vendor diligence documents and business continuity documentation—including financial statements and SOC reports—ensuring required reviews are completed accurately and consistently.
• Reviews vendor risk assessment outputs and business continuity documents to confirm risks have been appropriately assessed; follows up with VROs and business units to resolve inconsistencies and close gaps in documentation.
• Develops strong working relationships and maintains ongoing communication with VROs and business units to support day-to-day execution and consistent application of program standards.
• Provides reporting and analysis regarding overall program performance, including vendor risk, VRO adherence, and compliance with business continuity requirements, informing operational decision-making and tactical planning.
• Assists with regulatory examinations, audits, and similar inquiries, supporting documentation requests and helping prepare and execute management responses.
• Works with the VP, Risk Management to support business unit adherence to the risk acceptance program, helping ensure processes are followed and exceptions are escalated appropriately.
• Provides support to the VP, Risk Management in the development and maintenance of the issues management program, assisting with tracking, documentation, and follow-up actions.
• Performs other duties and responsibilities as assigned in support of departmental and organizational objectives.

• Minimum of six years of experience in risk management, business continuity, or vendor management within a financial institution. Demonstrated responsibility for vendor management and/or business continuity program…