Position Purpose
The SVP, Head of Enterprise Risk Management (“ERM”) is the senior leader of the Bank’s Second Line of Defense Enterprise Risk Management Program. The Enterprise Risk Management Program consists of the execution of the Enterprise-Wide Risk Assessment and Sub-Risk Assessment Universe, and the management of Physical Security, Policy Governance, and Model Risk Management.
The SVP, Head of ERM ensures that the Bank is identifying, measuring, monitoring, reporting, and prioritizing risk’s that the Bank faces. The SVP, Head of ERM will perform the majority of these sub-risk assessments and will manage qualified third-party firms, as needed, to ensure the sub-risk assessment universe is successfully executed on an annual basis or as material changes warrant. As Physical Security Officer for the Bank, the role will have oversight of all security related responsibilities and the Bank’s Facilities Manager will have a dotted line to this role.
Position Responsibilities
- Leads the Second Line of Defense Enterprise Risk Management Program and is accountable for ensuring all sub-risk assessments are completed annually in the Board approved sub-risk assessment universe.
- Creates/updates the Enterprise Risk methodology for the bank, including but not limited to risk ratings, risk rating definitions, risk methodologies, etc.
- Authors and manages the Enterprise Risk Management Policy, and all applicable updates/changes from FFIEC and OCC standards.
- Ensures that the Bank has all required enterprise risk management procedures promulgated for both internal employees and co-sourced third-party risk management firms to follow to ensure all enterprise risk assessments are completed in the same manner regardless of who performs the work.
- Identifies all applicable risk assessments as part of the Bank’s Risk Assessment Universe, and adds new risk assessments as appropriate.
- Creates/updates the Bank’s ERM Risk Assessment plan to ensure all risk assessments in the sub-risk assessment universe are performed annually.
- Ensures that all risk assessments are completed on time and within the allocated hours.
- Ensures the Sub-Risk Assessment Universe and/or any changes are approved by the Board Risk Committee.
- Ensures that all risk assessments conforms to all applicable banking regulations and enterprise risk methodology standards.
- Facilitates regulatory exams of the enterprise risk management program.
- Works with the Chief Risk Officer to set Enterprise Risk Management Committee agendas for each meeting.
- Ensures that all ERMC packages are responsive to the set agendas and that these packages are uploaded timely for ERMC Committee review.
- Participates in governance committees, sub-committees, and sub-working groups, as appropriate.
- Ensures that the Bank’s co-sourced risk management firm minimally meets expectations in the performance of their vendor contract.
- Serves as the Bank’s financial, operational, information technology, regulatory compliance, and SOX/FDICIA enterprise risk subject matter expert.
- Maintains continuing professional education requirements to keep licenses/certifications active and in good standing.
- Maintains a professional relationship with the first and second line of defense leaders in fostering a strong partnership between all three lines of defense.
- Serves as the Board approved Physical Security Officer.
- Maintains the Board approved Policy Universe and ensures all policies are governed and approved.
- Responsible for reviewing policy changes and preparing Change Forms for ERMC and Board of Directors approval.
- Manages the Bank’s Model Risk Management Program, including scheduling model validations, maintaining the Model Risk Management Policy and Standards, and ensures the Bank’s third-party model validation firm minimally meets expectations in the performance of their vendor contract.
Minimum Education And Experience
- 10+ years in Enterprise Risk Management within the Financial Services industry, either as an employee or third-party external risk manager or any combination thereof
- 5-7 years as the senior leader of ERM in a $5 billion+ asset size publicly traded financial institution a bonus
- Office of the Comptroller of the Currency regulated financial institution experience preferred but not required
- Bachelor's degree in accounting, finance, business administration, or related field required
- Master’s degree in Accounting, Business Administration, or related field a bonus
- Active industry relevant certifications a bonus
- Mastery subject matter expertise in COSO, NIST, and FFIEC risk management frameworks required
- Proficiency in SEC rules and regulations for publicly traded companies
- Mastery subject matter expertise of SOX/FDICIA internal controls including entity level, financial, and information technology general controls and application controls
- Demonstrated subject matter expertise in regulatory compliance risk, including but not limited to all alphabet regulations, BSA/AML, CRA, credit card (both secured and unsecured) Fair Lending, GLBA, HMDA, mortgage, NACHA and UDAAP
- Demonstrated subject matter expertise in information technology risk, including but not limited to IT governance, IT management, Cybersecurity/Information Security, Business Continuity/Disaster Recovery, IT Acquisition, Development, and Implementation, IT Operations, Third Party Vendor Risk Management, Electronic Banking, and IT Project Management
- Demonstrated subject matter expertise in financial and operational risk, including but not limited to Branch Administration, Deposit and Lending Operations, Finance and Accounting, Regulatory and Financial Reporting, Credit Administration, portfolio management, and HR
- Experience in managing an Enterprise Risk Management program
- Experience in writing risk assessments for all sub-risk assessments in the Bank’s risk universe
- Experience in partnering with first and second line of defense leadership on executing a written enterprise risk assessment program
- Experience in presenting to Board Risk Committees including preparation of Board ready Enterprise Risk Management presentations
Technical Knowledge And Skills
- Accounting Standards Codification (“ASC”) of United States Generally Accepted Accounting Principles (“US GAAP”)
- Public Company Accounting Oversight Board Auditing Standards
- FFIEC and SEC regulations
- COSO, CoBIT, FFIEC, NIST, ITIL, and ISO frameworks
- All applicable banking laws, rules, and regulations
- All applicable mortgage banking laws, rules, and regulations
- All applicable credit card laws, rules, and regulations
- Master proficiency in Excel including the creation of pivot tables and risk metrics
- Proficiency in all other Microsoft Office suite of applications
- Excellent oral and written communication skills
Working Arrangements
- This is a hybrid role expected to work in office Monday, Tuesday, Thursday, and Friday. You will be able to work remotely on Wednesday.
Compensation
- Base Salary Range: $175,000 - $225,000 annually. Final determination of where you are at in the salary range is based on numerous factors such as relevant experience, skill set, education, and ability to meet qualifications within the job description.
- Additional Compensation: This role will include a yearly annual target bonus based on individual performance.
Why Join Us?
- Join a growing company with a culture that fosters an entrepreneurial spirit
- Comprehensive benefits package including Medical, Dental, Vision, Company Paid Life Insurance, Disability Insurance, and more!
- Company Contributions to your 401k - Regardless of your contribution
- Employee Perks: Paid Parental Leave, Employee Recognition Program, Leadership Program, Tuition Reimbursement Program, Employee Bank Checking Account, and much more!
- Generous Paid Time Off and Paid Holidays – Including Paid Charity Hours to support volunteer opportunities
Supporting Businesses. Helping People. Strengthening Communities.
Capital Bank, N.A. is an Affirmative Action, E-Verify, and Equal Opportunity Employer.
