Director of Enterprise Risk Management

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Regular Full-Time Officer NE - 3 Pacific, Omaha, NE, US

14 days ago Requisition

Established in 1964 in Omaha, Nebraska, our family-owned financial institution's vision is to be the best in class in meeting the evolving financial needs of our customers. Our extensive history and family-owned legacy give us a deep and genuine understanding of how to serve and treat our customers. We offer a holistic financial approach with solutions for personal, business and wealth in three markets:
Iowa, Nebraska and Texas.

As a community bank, we value long-term partnerships built on trust and integrity. As an employer, we take pride in building meaningful relationships and celebrating the unique differences that define each team member; it's what makes us a stronger unit. It's one of the many reasons why creating a strong culture of empowerment, support, and opportunity is an ongoing focus.

JOB SUMMARY

This position is responsible for serving as a key deputy to the Chief Risk Officer and advancing the Bank’s enterprise-wide risk management framework and governance practices. This role plays a critical leadership function in coordinating risk oversight activities across Third Party Risk Management, Business Continuity, and Enterprise Risk Management (ERM), ensuring alignment with the Bank’s risk appetite, strategic objectives, and regulatory expectations.

ESSENTIAL FUNCTIONS

• Coordinates and continuously enhances the Bank's ERM framework, including enterprise risk assessments, risk appetite monitoring, Key Risk Indicators (KRIs), and reporting of significant and emerging risks.
• Maintains governance over accepted risks, ensuring appropriate documentation, ownership, monitoring, and escalation.
• Facilitates ERM Committee activities and supports development of Board and executive management reporting.
• Maintains risk governance documentation, including committee charters, risk taxonomy, standards, and related frameworks.
• Provides effective challenge of risk assessments, risk acceptance decisions, mitigation strategies, and control effectiveness.

Third Party Risk Management Governance (25%)

• Oversees governance framework for third-party risk management (TPRM), ensuring alignment with regulatory expectations (OCC, FFIEC).
• Maintains and enhances policies, standards, and procedures for third-party oversight.
• Monitors risk ratings, due diligence practices, and ongoing monitoring activities.
• Provides credible challenges and escalation of significant vendor risks.
• Coordinates reporting to executive management and ERM Committee on third-party exposures and trends.

Business Continuity Governance(
25%)

• Coordinates maintenance and execution of the Bank's Business Continuity Management (BCM) governance framework, including policies, standards, procedures, and reporting.
• Facilitates Business Impact Analyses (BIA), recovery strategy reviews, dependency mapping, and validation of recovery objectives.
• Coordinates development, maintenance, and testing of business unit continuity plans, including exercise management, corrective action tracking, and improvement initiatives.
• Monitors business continuity risks and integrate resilience considerations into the ERM framework.
• Develops and maintains BCM metrics, Key Risk Indicators (KRIs), and reporting for management, the ERM Committee, and the Board.
• Coordinates BCM activities across Technology, Operations, and business units.
• Coordinates enterprise issue management governance, including monitoring, reporting, remediation tracking, and escalation of audit findings, regulatory recommendations, management action plans, accepted risks, and other control deficiencies.
• Serves as the primary risk liaison among Compliance, Financial Crimes, Audit, Information Security, Technology, and business units to ensure risk information is communicated consistently and effectively.
• Assists in preparation for regulatory examinations, independent reviews, and audits by coordinating responses, supporting documentation, and tracking…