Enterprise Risk Manager

Farmers National Bank of Canfield•Canfield, OH

About The Position

The Enterprise Risk Manager oversees aspects of the Bank’s Third Party Risk Management program and related risk management functions. The role defines and maintains organizational standards for risk management and compliance with GLBA, helping protect private financial information in third-party vendor relationships. Working with risk managers and business partners, the position maintains a comprehensive vendor risk mitigation process in accordance with Bank policy, supports preselection due diligence and reviews of selected vendors, and conducts regular business reviews to document ongoing due diligence. The role also supports the Bank’s risk assessment process and Business Continuity Programs. The Enterprise Risk Manager partners with business units on third-party risk management, enterprise risk management, business continuity and disaster recovery, and incident response. The position supports ongoing risk assessments and departmental audits, monitors emerging risks, prepares materials for Risk Committee meetings, and contributes to internal and external audits and regulatory examinations. It also helps develop and maintain risk program documents, policies, procedures, assessment and reporting tools, and enterprise-wide risk awareness and training.

Requirements

Strong business and technical analytical skills, with a background in technology.
Three to five years of experience in banking, vendor management, risk assessment processes, business continuity, or disaster recovery.
Strong organizational, decision-making, and problem-resolution skills.
Ability to multitask and think globally, with issue escalation and resolution skills.
Strong oral and written communication skills, including the ability to provide concise, direct, and timely communications to executives, management, and key partners.
Solid understanding of vendor management and business continuity program elements, requirements, and standards, including FFIEC and OCC guidance.
Proficiency in Microsoft applications, including Excel, PowerPoint, Word, Project, and Visio.
Experience identifying best practices within and outside an organization, establishing benchmark data, and using continuous process improvement disciplines.
Experience working independently and in a team-oriented, collaborative environment.
Flexibility and proven ability to adapt to changing priorities, demands, and timelines.
Regular, predictable attendance.

Nice To Haves

Bachelor’s degree preferred.
Vendor Management certification.
Certified Business Continuity Professional (CBCP) certification.

Responsibilities

Build trusted partnerships with business leaders and serve as a conduit between Risk Management and business units for effective vendor management; monitor performance and customer satisfaction and drive continuous improvement of the Third Party Relationship Management Program.
Partner with relationship and department managers on new third-party reviews and setup, ongoing vendor monitoring, and new and existing contract reviews; assist business units with contract negotiations.
Maintain and update the Vendor Management program, related forms, policies, and procedures.
Research and implement best practices for Vendor Risk Management, Business Continuity, and Incident Response; maintain or develop Business Impact Analyses, plans, procedures, forms, and event documentation.
Identify and escalate risks and issues to the CRO, Information Security Manager, and relevant department managers.
Monitor new vendor approval and annual review status.
Work with departments to ensure disaster recovery plans are accurate and complete.
Update Risk Management and Information Security policies, test plans, and risk assessments as required.
Work with the Information Security Manager and other department managers on required risk assessments and internal assessment audits or reviews.
Serve as a business-focused partner to Bank business units on third-party risk management, enterprise risk management, business continuity and disaster recovery, and incident response.
Support the CRO and Information Security Manager with ongoing business-unit or entity-level risk assessments and departmental audits, monitoring emerging risks, and preparing materials for Risk Committee meetings.
Support enterprise-wide risk management education and training on third-party risk management, enterprise risk management, business continuity and disaster recovery, and incident response.
Monitor and propose changes to the Bank’s operating environment related to third-party risk management, enterprise risk management, business continuity and disaster recovery, and incident response.
Work with the CRO and Information Security Manager to enhance and develop enterprise-wide analysis, reporting, and monitoring tools.
Assist with internal and external audits and regulatory examinations.
Complete mandatory and elective training, including BSA and Anti-Money Laundering procedures, and maintain compliance with applicable rules and regulations.
Maintain regular, predictable attendance and complete other duties as assigned.