Enterprise Risk Management, Manager

Vast Bank is looking to hire an Enterprise Risk Management, Manager!

About Vast Bank

Since February of 1982, we've been a financial institution that has served customers in Northeast Oklahoma and beyond. Our deep roots in the community and commitment to personal service have enabled us to grow alongside our customers, creating conveniences and solutions to fit unique problems and lifestyles. For over 40 years, we've built a legacy on personal service, flexibility, strength, and integrity. Now, with bold leadership and a renewed commitment to customer-centricity, we're aiming higher for the next 40 years. New ideas, strong partnerships, and modern technology will accompany a winning culture to deliver more control and a surprisingly easy banking experience.

We're a company that believes in taking care of the people who make working here possible. In addition to competitive compensation, we offer a leading employee benefit package:

• Comprehensive benefits package & 401(k) match

• Professional development- opportunities for advancement!

• Tuition assistance

• Transit reimbursement

• Paid time off

• & more!

Summary of Role

The Enterprise Risk Management (ERM) Manager is responsible for developing, implementing, and maintaining the organization’s enterprise-wide risk management program including Third-Party risk management and issues management. This role ensures that material risks—strategic, financial, operational, compliance, reputational, and technology—are identified, assessed, monitored, and proactively managed. The ERM Manager partners closely with business leaders to embed risk awareness into decision-making, strengthen controls, and support a strong risk culture.

Major Duties and Responsibilities

• Lead the ongoing enhancement and execution of the Enterprise Risk Management Framework, policies, and methodologies.

• Coordinate enterprise risk assessments, including annual risk identification, scoring, and prioritization activities.

• Support the development of the organization’s risk appetite statement and ensure alignment between risk-taking and strategic objectives.

• Prepare and deliver risk reporting for executive leadership, Board committees, regulators, and auditors.

• Facilitate business unit risk assessments, control testing, and issue management.

• Maintain the enterprise risk register and ensure risks are accurately documented, measured, and refreshed regularly.

• Analyze emerging risks, market trends, regulatory updates, and industry developments to advise senior leadership.

• Monitor key risk indicators (KRIs) and implement early-warning mechanisms.

• Partner with stakeholders to design and implement effective control enhancements and risk mitigation strategies.

• Manage remediation plans for identified gaps, including tracking progress and validating completion.

• Support scenario analysis, stress testing, and business continuity/resiliency planning initiatives.

• Serve as a subject-matter expert on risk to with the community bank on any new / modified / expanded products and services.

• Work closely with Compliance, BSA/AML, Fraud, Information Security, Internal Audit, and Operations to ensure a consistent risk approach.

• Provide training and education across the organization to reinforce risk awareness and accountability.

• Develop high-quality dashboards and reports that communicate risks, trends, and mitigation effectiveness.

• Ensure ERM documentation meets regulatory, audit, and internal standards.

• Maintain and enforce the enterprise TPRM framework, policies, and procedures.

• Monitor adherence to TPRM standards across all business units.

• Provide independent challenge and oversight of third-party risk assessments and due diligence processes.

• Ensure TPRM compliance with regulatory requirements (e.g., OCC, FFIEC, GDPR, etc.) and internal risk appetite.

• Track and report on third-party risk metrics, including concentration risk, SLA performance, and issue remediation.

• Prepare executive dashboards and regulatory reporting on TPRM program.

• Administer and maintain the organization’s issue management framework.

• Track, monitor, and report on open issues, remediation plans, and deadlines.

• Partner with business units to ensure timely resolution and proper documentation of issues.

• Conduct root cause analysis and recommend corrective actions.

• Prepare dashboards and reports for senior management and regulatory reviews.

• Must comply with applicable laws and regulations, including but not limited to, the Bank Secrecy Act, the Patriot Act, and the Office of Foreign Assets Control

Knowledge & Skills

Experience

7 years of experience in risk management, internal audit, compliance, or related function—preferably in financial services.

Strong understanding of enterprise risk frameworks (e.g., COSO ERM, ISO 31000).

Experience conducting risk assessments and developing risk mitigation plans.

Experience managing issue lifecycle, control testing, and dashboards.

Experience governing vendor due diligence, risk ratings, remediation, concentration risk monitoring, and SLA performance.

Education/Certifications/Licenses

Bachelor’s Degree in Management Business Management, Finance, Banking or related field. 

Interpersonal Skills

A significant level of trust and diplomacy is required to be an effective subject matter expert in the position. In-depth dialogues, conversations and explanations with customers, direct and indirect reports and outside vendors of a sensitive and/or highly confidential nature is a normal part of the day-to-day experience. Communications can involve motivating, influencing, educating and/or advising others on matters of significance.

Role Important Behavioral Skills

• Strong communication skills to develop good working relationships and to promote cooperation and compromise among various departments.

• Display the ability to research and comprehend a high level of knowledge in current and developing regulations.

• Ability to develop and maintain effective working relationship at all levels by proactively participating and contributing to a positive work environment, controlling emotions and temperament, and exhibiting courteous, respectful, and professional behavior.

• Ability to quickly adapt to changing environments, processes, and technologies. Technological ability and willingness to work remotely from home as required.

• Strong organizational skills.

• Ability to maintain composure under pressure or adverse circumstances, using effective strategies for managing personal stress.

• Ability to maintain personal and work direction when faced with ambiguity

ADA Requirements

Physical Requirements

Is able to bend, sit, and stand in order to perform primarily sedentary work with limited physical exertion and occasional lifting of up to 10 lbs. Must be capable of climbing / descending stairs in an emergency situation. Must be able to operate routine office equipment including computer terminals and keyboards, telephones, copiers, facsimiles, and calculators. Must be able to routinely perform work on a computer for an average of 6-8 hours per day, when necessary. Must be able to work extended hours or travel off site whenever required or requested by management. Must be capable of regular, reliable, and timely attendance.

Working Conditions

Must be able to routinely perform work indoors in climate-controlled shared work area with minimal noise.

Mental and/or Emotional Requirements

Must be able to perform job functions independently or with limited supervision and work effectively either on own or as part of a team. Must be able to read and carry out various written instructions and follow oral instructions. Must be able to complete basic mathematical calculations, spell accurately, and understand computer basics. Must be able to speak clearly and deliver information in a logical and understandable sequence. Must be capable of dealing calmly and professionally with numerous different personalities from diverse cultures at various levels within and outside of the organization and demonstrate highest levels of customer service and discretion when dealing with the public. Must be able to perform responsibilities with composure under the stress of deadlines / requirements for extreme accuracy and quality and/or fast pace.  Must be able to effectively handle multiple, simultaneous, and changing priorities. Must be capable of exercising the highest level of discretion on both internal and external confidential matters.

EEO StatementIt is the policy of Vast Bank to afford equal opportunity in all phases of employment without regard to an individual’s race, color, creed, religion, gender, national origin, age, disability, marital status, ancestry, sexual orientation, unfavorable military discharge for qualified individuals with disabilities, and for qualified disabled veterans and veterans of the Vietnam era, to the extent required by applicable local, state and federal law.