Enterprise Resilience Manager

Sunflower Bank NA•Dallas, TX

1d•Onsite

About The Position

Sunflower Bank, N.A. is looking for an energetic, highly motivated individual to fill the full-time position of Enterprise Resilience Manager in/at our Dallas, TX location. The Enterprise Resilience Manager is responsible for building, operating, and continuously improving an integrated enterprise resilience capability spanning Business Continuity Management (BCM), Physical Security Management, and Enterprise Incident Management and Crisis Management. This role provides program oversight, governance, assurance, and testing for resilience capabilities across the organization, including Emergency Response Planning, Business Continuity Management, Security Incident Response (SIR), Crisis Management (CMP), and IT Response/Recovery. The position partners closely with technology, operations, facilities, fraud/security, risk management, and business leadership to ensure preparedness, effective response, and timely recovery from disruptive events, while meeting regulatory and compliance requirements. This role reports to the Chief Information Security Officer.

Requirements

Bachelor’s degree in business, Risk Management, Information Systems, Security Management, Emergency Management, or a related field (or equivalent combination of education and experience).
10+ years of progressive experience in resilience disciplines
Financial services experience preferred.
CBCP (Certified Business Continuity Professional) or MBCP (Master Business Continuity Professional), or commensurate certification preferred.
Working knowledge of NIST Cybersecurity Framework (CSF).
Crisis leadership and calm decision-making under pressure.
Exercise design, facilitation, and after-action reporting.
Cross-functional influence without direct authority.
Strong written documentation and executive communications.
Analytical mindset with practical, operational execution.
Must be bondable

Responsibilities

Own and maintain an integrated resilience framework that unifies BCM, physical security-related resilience, and enterprise incident/crisis management under a single governance model.
Define program policies, standards, procedures, and reporting for ERP/BCM/SIR/CMP and IT Response/Recovery in alignment with enterprise risk management and compliance expectations.
Establish and manage resilience metrics/KRIs/KPIs (e.g., plan coverage, exercise completion, recovery time adherence, corrective action closure, readiness scores).
Provide second-line style oversight to ensure control design and execution meet defined requirements and escalate material gaps and risks.
Ensure governance includes roles/responsibilities, decision rights, playbooks, escalation criteria, and executive notification protocols.
Lead and maintain the Business Continuity Management program lifecycle.
Validate that business continuity strategies align with critical processes, regulatory obligations, and operational needs.
Coach and support business units in developing and maintaining actionable, role-based continuity plans.
Design and manage an enterprise-wide exercise and testing program across resilience disciplines.
Establish standards for test objectives, success criteria, evidence collection, and lessons learned.
Track and drive closure of corrective action plans and improvement items, including root cause analysis, due dates, and accountable owners.
Manage and evolve enterprise incident management and crisis management processes, ensuring clear triggers, escalation paths, communications protocols, and executive-level decision support.
Maintain enterprise-level playbooks for common disruption scenarios (e.g., cyber events, facility outages, workplace violence threats, natural disasters, third-party outages).
Coordinate with Corporate Communications, Legal, Compliance, HR, Facilities, Technology, and Security to ensure cohesive crisis response across the enterprise.
Support after-hours/on-call response leadership expectations as appropriate.
Partner with Information Security and SOC/IR teams to ensure SIR processes integrate with enterprise crisis/BCM processes (e.g., executive updates, business workarounds, communications, and customer impact).
Validate that cyber incident response plans include coordination with BCM continuity strategies, IT recovery/DR procedures, Crisis communications and regulatory considerations (as applicable).
Collaborate with Physical Security and Facilities teams to ensure preparedness for facility-related disruptions (e.g., access control outages, power issues, building closures, threats).
Provide oversight of IT response and recovery readiness in partnership with IT Service Management, Infrastructure, Application Owners, and Architecture
Ensure alignment between technology recovery capabilities and business recovery requirements (e.g., RTO/RPO mapping to business tolerances).
Validate that IT recovery plans are assessed, evidenced, and remediated on a defined cadence, with measurable outcomes.
Coordinate with Third-Party Risk Management to ensure critical vendors and key dependencies are included in resilience planning and testing.
Validate resilience requirements for critical third parties (e.g., notification expectations, recovery commitments, testing participation).
Maintain audit-ready documentation, including program artifacts, test evidence, governance minutes, plan attestations, issue logs, and remediation tracking.
Perform the job in accordance with applicable industry laws and regulations as well as the policies and procedures established by the company.
Responsible for upholding Fair and Responsible Banking practices and Code of Ethics and Conduct guidelines.
Understand and participate in the Bank’s Community Reinvestment Act program.
Perform other duties as assigned.