Director of Third-Party Risk Management - Greenway Plaza

The Director of Third-Party Risk Management will be responsible for overseeing and continuously enhancing the third-party risk management program for the bank. As a key leader in the risk management function, the Director will ensure that the bank’s third-party relationships, including vendors and critical service providers, are effectively managed and compliant with the latest regulatory guidance and best practices for banks of our size.

This role requires a seasoned risk professional with significant experience in managing third-party risk at larger banks, preferably those with $10 billion in assets or more. The Director will work closely with the CRO, CISO, and key stakeholders across the bank to identify, assess, and mitigate risks associated with third-party relationships. The position will also involve regular reporting to risk committees and, occasionally, to the Board of Directors.

ESSENTIAL DUTIES AND RESPONSIBILITIES

1. Program Oversight & Enhancement:
   • Lead the bank’s third-party risk management program, ensuring it meets regulatory expectations and industry best practices.
   • Continuously assess and update the program to reflect the bank’s evolving risk profile, size, and complexity.
   • Ensure compliance with regulatory guidance on third-party risk, including requirements published by regulators (e.g., FDIC, OCC, FFIEC, TXDOB).
2. Risk Identification & Assessment:
   • Oversee the identification, assessment, and monitoring of risks associated with third-party relationships, including operational, reputational, compliance, and cybersecurity risks.
   • Conduct risk assessments on new and existing third parties to ensure they meet the bank’s risk tolerance and compliance requirements.
   • Collaborate with Legal, Compliance, Information Security, and other first and second lines of defense to identify and mitigate risks.
3. Stakeholder Collaboration:
   • Coordinate with vendor owners, legal, compliance, information security, and other departments to ensure a comprehensive approach to third-party risk management.
   • Partner with key internal stakeholders to develop strategies for mitigating risks and ensuring third-party resilience.
4. Regulatory Compliance & Reporting:
   • Ensure the bank’s third-party risk management program complies with all applicable regulatory requirements and stays current with new guidance and expectations from regulators.
   • Prepare and present reports on third-party risk management to risk committees and the Board of Directors.
   • Serve as a point of contact for regulatory exams and audits concerning third-party risk management.
5. Vendor & Third-Party Relationship Management:
   • Work closely with vendor owners across the bank to ensure third-party relationships are managed effectively and that risks are identified and mitigated early in the process.
   • Ensure that contracts with third-party vendors incorporate appropriate risk management provisions, including service-level agreements, compliance, and cybersecurity requirements.
6. Training & Awareness:
   • Develop and deliver training to staff on third-party risk management practices, ensuring consistent understanding and adherence to risk management policies across the bank.
   • Promote a culture of risk awareness and proactive risk management throughout the organization.
7. Compliance with any and all BSA/AML/CFT and Sanctions requirements set forth by Bank Policy and Procedure, including but not limited to timely completion of assigned training. 

SECONDARY DUTIES

The position performs duties specific to the position and other functions as assigned by management.

SUPERVISORY RESPONSIBILITY

The position is responsible for the supervision of all office employees and is expected to provide leadership, training and support to staff members.