Risk Officer

CNB Bank•Carlsbad, NM

1d•Onsite

About The Position

The Executive Vice President (EVP) of Risk serves as the Bank's senior risk executive and is responsible for providing strategic leadership and oversight of the enterprise risk management framework. This position directs and oversees Compliance, BSA/AML/CFT, Fraud Risk Management, Information Security, and Internal Audit functions to ensure the Bank operates in a safe, sound, and compliant manner. The EVP of Risk works closely with executive management and the Board of Directors to identify, assess, monitor, and mitigate risks across the organization while ensuring adherence to applicable laws, regulations, and industry best practices. The EVP of Risk reports directly to the President/CEO and provides regular reporting to the Board of Directors and applicable Board committees.

Requirements

Bachelor's degree in Business, Finance, Accounting, Risk Management, Information Security, or related field required.
Minimum of 10 years of progressively responsible banking experience.
Minimum of 5 years of executive-level leadership experience in risk management, compliance, audit, information security, or related control functions.
Strong understanding of community bank operations and regulatory expectations.
Experience interacting with bank regulators, auditors, and Boards of Directors.
Extensive knowledge of banking regulations and risk management practices.
Strong understanding of FFIEC guidance, information security requirements, and BSA/AML regulations.
Ability to evaluate operational, compliance, technology, and strategic risks.
Excellent analytical and problem-solving skills.
Strong executive presence and communication skills.
Ability to present complex risk matters to management and the Board.
Proven leadership and team development capabilities.

Nice To Haves

Master's degree preferred.
CRCM (Certified Regulatory Compliance Manager)
CAMS (Certified Anti-Money Laundering Specialist)
CISA (Certified Information Systems Auditor)
CISSP (Certified Information Systems Security Professional)
CRISC (Certified in Risk and Information Systems Control)
CIA (Certified Internal Auditor)

Responsibilities

Lead the Bank's Enterprise Risk Management (ERM) program.
Establish risk management strategies, policies, and risk appetite recommendations.
Identify emerging risks and develop mitigation strategies.
Monitor and report key risk indicators and risk trends.
Facilitate enterprise-wide risk assessments.
Provide executive-level risk reporting to management and the Board.
Ensure appropriate governance for operational, compliance, cyber, fraud, and reputational risks.
Direct the Compliance Management System (CMS).
Ensure compliance with all applicable federal and state banking laws and regulations.
Oversee regulatory examination preparation and response.
Monitor regulatory changes and assess organizational impact.
Review compliance monitoring and testing results.
Advise executive management regarding regulatory risks and corrective actions.
Oversee the Bank's BSA, AML, OFAC, and Countering the Financing of Terrorism programs.
Ensure effective suspicious activity monitoring and reporting processes.
Monitor customer due diligence and enhanced due diligence programs.
Review BSA/AML risk assessments and related controls.
Ensure timely regulatory reporting and issue remediation.
Maintain effective communication with examiners and regulatory agencies.
Provide executive oversight of the Information Security Program.
Ensure security controls align with regulatory requirements and industry standards.
Review cybersecurity risk assessments and penetration testing results.
Oversee incident response, cyber resilience, and security awareness programs.
Monitor third-party technology and cybersecurity risks.
Report cybersecurity risks and incidents to executive management and the Board.
Oversee enterprise fraud prevention, detection, investigation, and mitigation functions.
Monitor fraud trends and emerging threats.
Review fraud loss reporting and corrective action plans.
Ensure effective controls surrounding deposit, lending, electronic banking, and payments fraud.
Coordinate fraud risk management efforts across business units.
Oversee the Internal Audit function while preserving its independence.
Review annual audit plans and risk assessments.
Ensure timely remediation of audit findings.
Provide oversight of outsourced audit relationships, if applicable.
Report significant audit findings and management responses to the Board Audit Committee.
Monitor overall effectiveness of internal controls.
Serve as management liaison to Board committees responsible for risk, audit, compliance, and information security oversight.
Present regular reports regarding enterprise risks, audit results, compliance matters, cybersecurity risks, and fraud trends.
Coordinate risk-related regulatory examinations and independent reviews.
Ensure Board reporting is accurate, timely, and actionable.
Lead, develop, and mentor risk management personnel.
Foster a culture of compliance, accountability, and risk awareness.
Establish departmental goals, budgets, and performance standards.
Promote effective collaboration among risk, operations, lending, retail banking, and technology functions.