Head of Third Party Resilience Program Oversight

This is a fully remote position, open to applicants in North Carolina, +1 more state.

📋 Description

• Oversee the strategy, governance, and implementation of the firm's third-party operational resilience capabilities.

• Develop, execute, and refine the Third Party Resilience Framework, including relevant policies and standards.

• Create governance frameworks, escalation processes, reporting systems, and accountability structures.

• Provide updates to executive leadership and governance committees regarding resilience status, emerging risks, trends, and performance indicators.

• Act as the main liaison for regulatory audits, internal reviews, and supervisory inquiries.

• Evaluate third-party dependencies that support critical business services, systems, and processes.

• Sustain a comprehensive inventory of essential third-party services and their resilience characteristics.

• Lead risk-based oversight of third-party resilience controls and their performance.

• Incorporate insights on third-party resilience into enterprise operational resilience reporting and risk appetite evaluations.

• Formulate contingency, exit, and substitution strategies for essential third-party services.

• Facilitate third-party involvement in resilience assessments, disaster recovery drills, scenario analyses, and MVB simulations.

• Integrate third-party dependencies into Business Continuity, Disaster Recovery, and Enterprise Incident Management strategies.

• Supervise testing outcomes, after-action reviews, and necessary remediation efforts.

• Define and implement contractual resilience requirements in collaboration with Procurement and Legal teams.

• Align resilience criteria with third-party onboarding, reassessment, and monitoring activities.

• Offer subject matter expertise and challenge arrangements that fall short of resilience expectations.

• Persuade senior leadership to incorporate resilience considerations into sourcing choices, operational models, and service design.

• Collaborate with Technology, Cybersecurity, Data, and Infrastructure teams.

• Foster accountability and ownership for third-party resilience throughout the organization.

⛳️ Requirements

• Over 15 years of experience in operational resilience, third-party risk management, business continuity, technology risk, or enterprise risk management.

• Experience ideally within a large, highly regulated financial institution.

• Strong knowledge of regulatory standards relating to operational resilience and third-party oversight, including FFIEC guidance and Federal Reserve supervisory standards.

• Proven track record in designing, governing, or scaling enterprise-level risk or resilience initiatives.

• Demonstrated ability to engage with senior executives, regulators, auditors, and cross-functional stakeholders effectively.

• Exceptional leadership, communication, and influence capabilities.

• Excellent written and verbal communication skills.

• Experience in producing documentation and communication reports from varied information sources and disseminating to senior management, corporate risk teams, and regulators.

• Flexibility to adapt to significant changes in business processes and organizational structures.

• Comfortable working within a complex matrix environment.

• Experience presenting to regulatory bodies such as the Federal Reserve Board, Office of the Comptroller of the Currency, and Federal Deposit Insurance Corporation.

• Proficiency in the English language is required.

🏝️ Benefits

• Medical insurance

• Dental insurance

• Vision insurance

• Life insurance

• Disability insurance

• Accidental death and dismemberment coverage

• Tax-preferred savings accounts

• 401k plan

• At least 10 days of vacation during the first year of employment

• 10 sick days

• Paid holidays

• Defined benefit pension plan (depending on position and division)

• Restricted stock units (depending on position and division)

• Deferred compensation plan (depending on position and division)