What are the responsibilities and job description for the Director of Enterprise Risk Management position at Security National Bank?
Established in 1964 in Omaha, Nebraska, our family-owned financial institution's vision is to be the best in class in meeting the evolving financial needs of our customers. Our extensive history and family-owned legacy give us a deep and genuine understanding of how to serve and treat our customers. We offer a holistic financial approach with solutions for personal, business and wealth in three markets: Iowa, Nebraska and Texas.
As a community bank, we value long-term partnerships built on trust and integrity. As an employer, we take pride in building meaningful relationships and celebrating the unique differences that define each team member; it's what makes us a stronger unit. It's one of the many reasons why creating a strong culture of empowerment, support, and opportunity is an ongoing focus.
JOB SUMMARY
This position is responsible for serving as a key deputy to the Chief Risk Officer and advancing the Bank’s enterprise-wide risk management framework and governance practices. This role plays a critical leadership function in coordinating risk oversight activities across Third Party Risk Management, Business Continuity, and Enterprise Risk Management (ERM), ensuring alignment with the Bank’s risk appetite, strategic objectives, and regulatory expectations.
ESSENTIAL FUNCTIONS
Enterprise Risk Management (ERM) Oversight (30%)
- Coordinates and continuously enhances the Bank's ERM framework, including enterprise risk assessments, risk appetite monitoring, Key Risk Indicators (KRIs), and reporting of significant and emerging risks.
- Maintains governance over accepted risks, ensuring appropriate documentation, ownership, monitoring, and escalation.
- Facilitates ERM Committee activities and supports development of Board and executive management reporting.
- Maintains risk governance documentation, including committee charters, risk taxonomy, standards, and related frameworks.
- Provides effective challenge of risk assessments, risk acceptance decisions, mitigation strategies, and control effectiveness.
Third Party Risk Management Governance (25%)
- Oversees governance framework for third-party risk management (TPRM), ensuring alignment with regulatory expectations (OCC, FFIEC).
- Maintains and enhances policies, standards, and procedures for third-party oversight.
- Monitors risk ratings, due diligence practices, and ongoing monitoring activities.
- Provides credible challenges and escalation of significant vendor risks.
- Coordinates reporting to executive management and ERM Committee on third-party exposures and trends.
Business Continuity Governance (25%)
- Coordinates maintenance and execution of the Bank's Business Continuity Management (BCM) governance framework, including policies, standards, procedures, and reporting.
- Facilitates Business Impact Analyses (BIA), recovery strategy reviews, dependency mapping, and validation of recovery objectives.
- Coordinates development, maintenance, and testing of business unit continuity plans, including exercise management, corrective action tracking, and improvement initiatives.
- Monitors business continuity risks and integrate resilience considerations into the ERM framework.
- Develops and maintains BCM metrics, Key Risk Indicators (KRIs), and reporting for management, the ERM Committee, and the Board.
- Coordinates BCM activities across Technology, Operations, and business units.
Enterprise Issue Management & Risk Coordination (10%)
- Coordinates enterprise issue management governance, including monitoring, reporting, remediation tracking, and escalation of audit findings, regulatory recommendations, management action plans, accepted risks, and other control deficiencies.
- Serves as the primary risk liaison among Compliance, Financial Crimes, Audit, Information Security, Technology, and business units to ensure risk information is communicated consistently and effectively.
- Assists in preparation for regulatory examinations, independent reviews, and audits by coordinating responses, supporting documentation, and tracking commitments.
Leadership & Strategic Advancement (10%)
- Serves as a trusted advisor and deputy to the CRO.
- Demonstrates leadership as an individual contributor by sharing knowledge, modeling high standards, fostering accountability, and promoting open communication.
- Provides leadership Through influence, collaboration, and effective challenge to strengthen the Bank’s risk culture and governance practices.
- Identifies opportunities to enhance governance, improve risk visibility, and streamline risk management processes.
- Supports strategic initiatives, regulatory readiness activities, audits, examinations, and other enterprise projects.
Performs other duties as required and assigned.
KNOWLEDGE, SKILLS, AND ABILITIES
- Advanced knowledge of enterprise risk management principles, risk governance, and the Three Lines Model.
- Demonstrated experience facilitating risk assessments, developing risk reporting, and presenting risk information to executive management and committees.
- Experience working within a regulated financial institution and interacting with banking regulators and examiners.
- Experience developing and maintaining policies, standards, procedures, and governance frameworks.
- Working knowledge of OCC, FDIC, FRB, FFIEC, and other applicable regulatory guidance.
- Ability to assess emerging risks, synthesize information from multiple risk disciplines, and communicate meaningful insights to executive management and the Board.
- Ability to influence stakeholders, drive accountability, and provide independent and credible challenge without direct authority.
- Strong analytical, problem-solving, organizational, and prioritization skills with the ability to manage multiple initiatives simultaneously.
- Strong written, verbal, and interpersonal communication skills.
- Proficiency with Microsoft Office 365
- Ability to travel periodically (approximately 5-10%) for training, conferences, industry events, and business meetings.
- Ability to complete the required training by assigned due date.
- Ability to maintain regular and reliable attendance.
EDUCATION*
- Minimum of a bachelor’s degree in Accounting, Finance, Business Administration, Risk Management, or a related field required.
- Professional Certifications preferred -
- Certified Enterprise Risk Professional (CERP)
- Certified Internal Auditor (CIA)
EXPERIENCE*
- Minimum of 7-10 years of experience in enterprise risk management, operational risk, compliance, internal audit, third-party risk management, business continuity, or related banking risk disciplines
- Minimum of 3 years of leadership or management experience with responsibility for developing, implementing, and overseeing risk management programs required.
*Equivalent education and experience will be considered
PHYSICAL REQUIREMENTS
While performing the duties of this job, the employee is regularly required to stand; use hands to handle or feel; reach with hands and arms; and talk or hear. The employee frequently is required to walk. Specific vision abilities required by this job include close vision, distance vision, color vision, peripheral vision, and depth perception.
WORKING CONDITIONS
This job is operated in a professional office environment with normal office working conditions. This role routinely involves use of standard office equipment such as computers, phones, photocopiers, filing cabinets, etc.
AFFIRMATIVE ACTION
Security National Bank provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws.