Enterprise Risk Management Officer

Sutton Bank•Columbus, OH

About The Position

The Enterprise Risk Management Officer leads the Bank’s enterprise risk strategy, framework, and governance programs, providing independent second-line oversight of enterprise and strategic risk. The role oversees risk appetite and key risk indicators, enterprise and targeted risk assessments, emerging risk, issue management, data governance, and policy governance. It advances a strong risk culture through education, constructive challenge, and timely escalation, and serves as a trusted advisor to executive management by delivering forward-looking, decision-useful risk insights that support the Bank’s strategy, financial resilience, operations, customers, and reputation. The position leads the Enterprise Issue Management Program and promotes consistent application of the Three Lines model, risk ownership, escalation requirements, and risk practices across business units and legal entities. It coordinates enterprise risk reporting and provides effective challenge and decision support to executive management, the Management Risk Committee, and the Board. The officer also oversees risk appetite and KRI monitoring, enterprise concentrations and correlated exposures, targeted assessments, scenario analysis, and risk oversight of strategic initiatives and material business changes. The role provides second-line leadership and oversight for the Bank’s Data Governance Program and partners with relevant business and control stakeholders to establish accountability for critical data and controls. It also works with Human Resources, Compliance, Internal Audit, business leaders, and other control functions to embed risk expectations into leadership practices, performance processes, onboarding, and ongoing education. The position coordinates Management and Board Risk Committee materials and follow-up, integrates risk information into reporting, and maintains documentation for governance, audit, and regulatory examinations. It partners with HR on staffing models, interviews and selects employees, evaluates performance, and provides corrective action or development plans.

Requirements

Bachelor’s degree in Finance, Business Administration, Accounting, Risk Management, Data Management, or a related field.
Fifteen or more years of senior leadership experience in banking, enterprise risk management, operational risk, internal audit, compliance, data governance, or related functions.
Demonstrated experience managing or overseeing enterprise issue management, including risk rating, remediation governance, validation, closure, extensions, and escalation.
Ability to communicate effectively and clearly in verbal and written communications and present information to a variety of groups.
Critical thinking skills and experience.
Strong interpersonal skills to build relationships, collaborate, and communicate.
Strong business acumen, analytical skills, and critical-thinking ability.
Ability to respond to common inquiries or complaints from employees, customers, regulatory agencies, or members of the business community.
Ability to influence senior leaders while maintaining independence and objectivity.
Advanced proficiency in Microsoft Excel, PowerPoint, and reporting tools.
Strong knowledge of model risk management principles, model lifecycle governance, independent validation, performance monitoring, model limitations, and issue management.
Experience overseeing regulatory, audit, and management action plans, including issue validation, remediation governance, root cause analysis, and escalation of overdue or high-risk issues.
Deep understanding of enterprise risk management principles and the Three Lines model.
Understanding of operational risks associated with Banking-as-a-Service programs, fintech partnerships, embedded banking relationships, and third-party service integrations.
Working knowledge of policy lifecycle governance, document standards, exception management, and regulatory change alignment.
Strong understanding of strategic risk, business model risk, strategic planning, scenario analysis, competitive and market dynamics, and risk-adjusted decision-making.
Strong knowledge of emerging risk management, horizon scanning, forward-looking risk indicators, scenario development, and cross-risk analysis.
Experience leading enterprise and targeted risk assessments and synthesizing risk information across business units and risk disciplines.
Experience developing and overseeing risk appetite statements, risk limits, key risk indicators, thresholds, and governance reporting.
Experience establishing or overseeing data governance and policy and procedure governance programs.
Experience evaluating strategic plans, material business initiatives, market or competitive developments, and business model changes from an enterprise risk perspective.
Experience developing or administering emerging risk identification, assessment, monitoring, and reporting processes.
Equivalent combination of education and experience may be considered.

Nice To Haves

CERP, CRMP, GRCP, or FRM certification preferred.

Responsibilities

Own and maintain the Enterprise Issue Management Program, including standards for issue identification, risk rating, root cause analysis, action planning, validation, closure, extensions, acceptance, and escalation.
Promote consistent application of the Three Lines model, risk ownership, escalation requirements, and risk management practices across business units and legal entities.
Coordinate enterprise risk reporting and provide effective challenge and decision support to executive management, the Management Risk Committee, and the Board.
Monitor risk appetite and KRI performance, investigate breaches or adverse trends, challenge management responses, and escalate material concerns through established governance channels.
Coordinate risk appetite and KRI reporting for executive management, the Management Risk Committee, and the Board.
Oversee identification, aggregation, monitoring, reporting, and escalation of material enterprise concentrations and correlated risk exposures, including consideration of risk appetite, limits, and the enterprise risk profile.
Design and execute targeted risk assessments in response to significant changes, new products or services, strategic initiatives, incidents, concentrations, regulatory developments, or emerging risks.
Evaluate inherent risk, control design and effectiveness, residual risk, risk acceptance, and management action plans using consistent methodologies.
Coordinate enterprise scenario analysis and stress-oriented risk assessments to evaluate plausible adverse conditions, concentrations, interconnected risks, and potential impacts on the Bank.
Partner with executive management and business leaders to identify, assess, monitor, and report risks that could affect strategic objectives or long-term financial and operational sustainability.
Evaluate strategic initiatives, new markets, mergers and acquisitions, material partnerships, and significant changes in products, services, delivery channels, or operating models for alignment with risk appetite and risk-bearing capacity.
Provide second-line leadership and oversight for the Bank’s Data Governance Program, including governance structures, data ownership, stewardship, standards, data quality, lineage, classification, retention, and issue escalation.
Partner with business, technology, information security, privacy, compliance, and records management stakeholders to establish accountability for critical data and data controls.
Partner with Human Resources, Compliance, Internal Audit, business leaders, and other control functions to embed risk management expectations in leadership practices, performance processes, onboarding, and ongoing education.
Coordinate materials, agendas, decisions, and follow-up actions for Management and Board Risk Committees.
Ensure risk reporting integrates risk appetite, KRIs, enterprise assessments, issues, data governance, policy governance, and emerging risk information.
Maintain documentation and evidence to support governance, audit, and regulatory examination activities.
Partner with HR to ensure staffing models are in line with FTE allocation; interview and select employees; evaluate performance; and provide corrective action and/or developmental plans.