Enterprise Resilience Manager

Description

At Sunflower Bank, N.A., were experiencing great growth. Since our founding in 1892, weve been committed to serving our communities and supporting the team members who make it all possible. As a full-service financial institution, we offer a full range of relationship-focused services to meet personal, business, and wealth-management financial objectives. Creating Possibility is not just our mission, its what we do every day for clients and associates.

Learn more about Sunflower Bank at

Sunflower Bank, N.A. is looking for an energetic, highly motivated individual to fill the full-time position of Enterprise Resilience Manager in/at our Overland Park, KS location.

The Enterprise Resilience Manager is responsible for building, operating, and continuously improving an integrated enterprise resilience capability spanning Business Continuity Management (BCM), Physical Security Management, and Enterprise Incident Management and Crisis Management. This role provides program oversight, governance, assurance, and testing for resilience capabilities across the organization, including Emergency Response Planning, Business Continuity Management, Security Incident Response (SIR), Crisis Management (CMP), and IT Response/Recovery.

The position partners closely with technology, operations, facilities, fraud/security, risk management, and business leadership to ensure preparedness, effective response, and timely recovery from disruptive events, while meeting regulatory and compliance requirements. This role reports to the Chief Information Security Officer.

Program Governance & Oversight (Enterprise Resilience / Operational Resilience)

• Own and maintain an integrated resilience framework that unifies BCM, physical security-related resilience, and enterprise incident/crisis management under a single governance model.
• Define program policies, standards, procedures, and reporting for ERP/BCM/SIR/CMP and IT Response/Recovery in alignment with enterprise risk management and compliance expectations.
• Establish and manage resilience metrics/KRIs/KPIs (e.g., plan coverage, exercise completion, recovery time adherence, corrective action closure, readiness scores).
• Provide second-line style oversight to ensure control design and execution meet defined requirements and escalate material gaps and risks.
• Ensure governance includes roles/responsibilities, decision rights, playbooks, escalation criteria, and executive notification protocols.
• Lead and maintain the Business Continuity Management program lifecycle.
• Validate that business continuity strategies align with critical processes, regulatory obligations, and operational needs.
• Coach and support business units in developing and maintaining actionable, role-based continuity plans.
• Design and manage an enterprise-wide exercise and testing program across resilience disciplines.
• Establish standards for test objectives, success criteria, evidence collection, and lessons learned.
• Track and drive closure of corrective action plans and improvement items, including root cause analysis, due dates, and accountable owners.

Enterprise Incident & Crisis Management (CMP/ERP)

• Manage and evolve enterprise incident management and crisis management processes, ensuring clear triggers, escalation paths, communications protocols, and executive-level decision support.
• Maintain enterprise-level playbooks for common disruption scenarios (e.g., cyber events, facility outages, workplace violence threats, natural disasters, third-party outages).
• Coordinate with Corporate Communications, Legal, Compliance, HR, Facilities, Technology, and Security to ensure cohesive crisis response across the enterprise.
• Support after-hours/on-call response leadership expectations as appropriate.

Oversight Integration

• Partner with Information Security and SOC/IR teams to ensure SIR processes integrate with enterprise crisis/BCM processes (e.g., executive updates, business workarounds, communications, and customer impact).
• Validate that cyber incident response plans include coordination with BCM continuity strategies, IT recovery/DR procedures, Crisis communications and regulatory considerations (as applicable).
• Collaborate with Physical Security and Facilities teams to ensure preparedness for facility-related disruptions (e.g., access control outages, power issues, building closures, threats).
• Provide oversight of IT response and recovery readiness in partnership with IT Service Management, Infrastructure, Application Owners, and Architecture
• Ensure alignment between technology recovery capabilities and business recovery requirements (e.g., RTO/RPO mapping to business tolerances).
• Validate that IT recovery plans are assessed, evidenced, and remediated on a defined cadence, with measurable outcomes.
• Coordinate with Third-Party Risk Management to ensure critical vendors and key dependencies are included in resilience planning and testing.
• Validate resilience requirements for critical third parties (e.g., notification…