Enterprise Risk Management Officer

Sutton Bank•Columbus, OH

About The Position

The Enterprise Risk Management Officer leads Sutton Bank’s enterprise risk strategy, framework, and governance programs, providing independent second-line oversight of enterprise and strategic risk. The role oversees risk appetite and key risk indicators, enterprise and targeted risk assessments, emerging risk, issue management, data governance, and policy governance. It advances a strong risk culture through education, constructive challenge, and timely escalation, and serves as a trusted advisor to executive management by delivering forward-looking, decision-useful risk insights that support the Bank’s strategy, financial resilience, operations, customers, and reputation. The position owns and maintains the Enterprise Issue Management Program and provides oversight of risk practices, reporting, assessments, and governance across business units and legal entities. It also provides second-line leadership for the Bank’s Data Governance Program, coordinates Management and Board Risk Committee materials and follow-up, and partners with executive management and control functions to assess strategic and emerging risks and embed risk management expectations. The role has people-management responsibilities, including interviewing and selecting employees, evaluating performance, and providing corrective action or developmental plans.

Requirements

Bachelor’s degree in Finance, Business Administration, Accounting, Risk Management, Data Management, or a related field.
Fifteen or more years of senior leadership experience in banking, enterprise risk management, operational risk, internal audit, compliance, data governance, or related functions.
Demonstrated experience managing or overseeing enterprise issue management, including risk rating, remediation governance, validation, closure, extensions, and escalation; or an equivalent combination of education and experience.
Ability to communicate effectively and clearly in verbal and written communications and present information to a variety of groups.
Critical thinking skills and experience.
Strong interpersonal skills to build relationships, collaborate, and communicate.
Strong business acumen, analytical skills, and ability to think critically.
Ability to respond to common inquiries or complaints from employees, customers, regulatory agencies, or members of the business community.
Ability to influence senior leaders while maintaining independence and objectivity.
Advanced proficiency in Microsoft Excel, PowerPoint, and reporting tools.
Strong knowledge of model risk management principles, model lifecycle governance, independent validation, performance monitoring, model limitations, and issue management.
Experience overseeing regulatory, audit, and management action plans, including issue validation, remediation governance, root cause analysis, and escalation of overdue or high-risk issues.
Deep understanding of enterprise risk management principles and the Three Lines model.
Understanding of operational risks associated with Banking-as-a-Service programs, fintech partnerships, embedded banking relationships, and third-party service integrations.
Working knowledge of policy lifecycle governance, document standards, exception management, and regulatory change alignment.
Strong understanding of strategic risk, business model risk, strategic planning, scenario analysis, competitive and market dynamics, and risk-adjusted decision-making.
Strong knowledge of emerging risk management, horizon scanning, forward-looking risk indicators, scenario development, and cross-risk analysis.
Experience leading enterprise and targeted risk assessments and synthesizing risk information across business units and risk disciplines.
Experience developing and overseeing risk appetite statements, risk limits, key risk indicators, thresholds, and governance reporting.
Experience establishing or overseeing data governance and policy and procedure governance programs.
Experience evaluating strategic plans, material business initiatives, market or competitive developments, and business model changes from an enterprise risk perspective.
Experience developing or administering emerging risk identification, assessment, monitoring, and reporting processes.

Nice To Haves

CERP certification.
CRMP certification.
GRCP certification.
FRM certification.

Responsibilities

Own and maintain the Enterprise Issue Management Program, including standards for issue identification, risk rating, root cause analysis, action planning, validation, closure, extensions, acceptance, and escalation.
Promote consistent application of the Three Lines model, risk ownership, escalation requirements, and risk management practices across business units and legal entities.
Coordinate enterprise risk reporting and provide effective challenge and decision support to executive management, the Management Risk Committee, and the Board.
Monitor risk appetite and key risk indicator performance, investigate breaches or adverse trends, challenge management responses, and escalate material concerns through established governance channels.
Coordinate risk appetite and key risk indicator reporting for executive management, the Management Risk Committee, and the Board.
Oversee identification, aggregation, monitoring, reporting, and escalation of material enterprise concentrations and correlated risk exposures, considering the Bank’s risk appetite, limits, and enterprise risk profile.
Design and execute targeted risk assessments in response to significant changes, new products or services, strategic initiatives, incidents, concentrations, regulatory developments, or emerging risks.
Evaluate inherent risk, control design and effectiveness, residual risk, risk acceptance, and management action plans using consistent methodologies.
Coordinate enterprise scenario analysis and stress-oriented risk assessments to evaluate plausible adverse conditions, concentrations, interconnected risks, and potential impacts on the Bank.
Partner with executive management and business leaders to identify, assess, monitor, and report risks affecting the Bank’s strategic objectives or long-term financial and operational sustainability.
Evaluate strategic initiatives, new markets, mergers and acquisitions, material partnerships, and significant changes in products, services, delivery channels, or operating models for alignment with risk appetite and risk-bearing capacity.
Provide second-line leadership and oversight for the Bank’s Data Governance Program, including governance structures, data ownership, stewardship, standards, data quality, lineage, classification, retention, and issue escalation.
Partner with business, technology, information security, privacy, compliance, and records management stakeholders to establish accountability for critical data and data controls.
Partner with Human Resources, Compliance, Internal Audit, business leaders, and other control functions to embed risk management expectations into leadership practices, performance processes, onboarding, and ongoing education.
Coordinate materials, agendas, decisions, and follow-up actions for Management and Board Risk Committees.
Ensure risk reporting integrates risk appetite, key risk indicators, enterprise assessments, issues, data governance, policy governance, and emerging risk information.
Maintain documentation and evidence to support governance, audit, and regulatory examination activities.
Partner with HR to ensure staffing models align with FTE allocation; interview and select employees; evaluate performance; and provide corrective action or developmental plans.