Director of Risk and Compliance
Core Bank · Omaha, NE · 1 mo ago
FinanceFull-time
We need to output HTML fragment with sections: About the role? Actually we have Position Summary etc. We need to use for section headings like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We need to include sections only when posting has real specific content. The posting includes Position Summary (which could be "About the role" or "Position Summary"? The instruction says use headings like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. So we should map content accordingly.
We have: Company Overview (maybe not needed). Position Summary (description). Supervisory Responsibilities (list). Duties And Responsibilities (detailed list broken into subcategories). There's no explicit Benefits, Pay, Schedule. So we should not include those sections.
We need to include sections: About the role (maybe using Position Summary). Responsibilities (maybe combine Supervisory Responsibilities and Duties And Responsibilities). Requirements/Qualifications/Skills: The posting mentions ideal candidate expertise etc. That could be Requirements/Qualifications. We'll need to extract those.
Let's parse content:
Company Overview: description of Core Bank.
Position Summary: paragraph about role.
Supervisory Responsibilities: bullet list (actually sentences separated by periods). It's a list of responsibilities for supervising risk personnel.
Duties And Responsibilities: many sub-sections: Enterprise Risk Management Leadership, Technology Risk..., Third-Party Risk Management, Financial Crimes Compliance..., Operational Risk Management, CRO Support...
We need to output as
for section headings like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We need to include sections only when posting has real specific content. The posting includes Position Summary (which could be "About the role" or "Position Summary"? The instruction says use headings like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. So we should map content accordingly.
We have: Company Overview (maybe not needed). Position Summary (description). Supervisory Responsibilities (list). Duties And Responsibilities (detailed list broken into subcategories). There's no explicit Benefits, Pay, Schedule. So we should not include those sections.
We need to include sections: About the role (maybe using Position Summary). Responsibilities (maybe combine Supervisory Responsibilities and Duties And Responsibilities). Requirements/Qualifications/Skills: The posting mentions ideal candidate expertise etc. That could be Requirements/Qualifications. We'll need to extract those.
Let's parse content:
Company Overview: description of Core Bank.
Position Summary: paragraph about role.
Supervisory Responsibilities: bullet list (actually sentences separated by periods). It's a list of responsibilities for supervising risk personnel.
Duties And Responsibilities: many sub-sections: Enterprise Risk Management Leadership, Technology Risk..., Third-Party Risk Management, Financial Crimes Compliance..., Operational Risk Management, CRO Support...
We need to output as - for any list of duties/requirements/benefits. So we need to turn each bullet into
- . The content is currently paragraph sentences; we need to split into list items. Probably each sentence or each distinct duty.
We need to preserve all substantive information, not invent or summarize away detail. So we need to keep the content but format as list items.
We also need to remove boilerplate: cookie/navigation/legal/EEO etc. Not present.
We need to not repeat job title as heading. Not include Job ID.
We need to output only HTML fragment.
Thus structure:
About the role
Company Overview ... Position Summary ... maybe combine?
But we have Company Overview separate; maybe include in About the role.
Better: About the role includes company overview and position summary.
Then Responsibilities
- Provide leadership, coaching, development and performance management for Risk personnel....
... etc for supervisory responsibilities.
Then duties: each bullet.
We need to ensure we don't duplicate.
We also need Requirements/Qualifications/Skills: The posting mentions ideal candidate brings expertise across traditional banking risk disciplines and an informed understanding of fintech ecosystems, Banking-as-a-Service (BaaS), embedded banking models, data and AI governance, and emerging risks. Also: The ideal candidate is an experienced enterprise risk leader and highly effective operator who can move seamlessly between strategy and execution; understands how a bank creates value; has the credibility to challenge senior leaders; has the judgment to make decisions without unnecessary escalation; and can build scalable, modern risk capabilities that support responsible growth.
We can treat that as Requirements or Qualifications. We'll create a Requirements
with - items.
We should not include Benefits, Pay, Schedule.
Now we need to extract each duty as list item.
Let's list supervisory responsibilities sentences:
- Provide leadership, coaching, development and performance management for Risk personnel.
- Foster a high-performance culture focused on accountability, collaboration, innovation, responsiveness, and continuous improvement.
- Build the confidence and decision-making capabilities of Risk team members so that decisions are made promptly and appropriately at the lowest effective level.
- Coach Risk personnel through complex judgments and decisions rather than allowing uncertainty or fear of making the wrong decision to become a reason for unnecessary escalation.
- Establish clear decision rights and escalation thresholds and coach team members through complex risk judgments, reserving only matters with material strategic, financial, regulatory, or risk-appetite implications are elevated to the CRO.
- Reinforce a culture in which Risk professionals are expected to make recommendations and decisions, not simply identify problems or escalate questions.
Now duties and responsibilities: many subheadings with paragraphs. We need to break each sentence into list items? Might be too granular but okay.
We'll produce list items for each distinct duty sentence.
Let's extract:
Enterprise Risk Management Leadership:
- Lead the day-to-day execution of the Enterprise Risk Management strategic plan, framework and ERM plan activities to ensure enterprise risk management programs remain examination and audit-ready on a continuous basis.
- Translate the CRO’s strategic priorities and direction into actionable plans, accountabilities, decisions, and measurable outcomes.
- Serve as the CRO's primary delegate and go-to enterprise risk leader in management committees, governance forums, and material business decisions, as appropriate.
- Exercise delegated authority, provide timely risk-based recommendations, resolve issues at the appropriate level, and escalate matters to the CRO when they exceed established decision rights, risk tolerances, or the Board-approved risk appetite.
- Evaluate strategic initiatives, new products, services, business lines, technologies, partnerships, and material changes to the Bank's operating model for alignment with strategic objectives, risk appetite, and safety and soundness.
- Partner closely with business and functional leaders to understand strategic objectives, identify risks and opportunities, and develop practical pathways to achieve desired outcomes within the Board-approved risk appetite.
- Build strong, trusted relationships with business leaders while maintaining independent second-line challenge to promote practical, scalable risk management practices that are embedded into business operations and decision-making.
- Maintain and continuously mature enterprise-wide risk assessment methodologies, risk inventories, risk appetite measures, key risk indicators, and governance processes.
- Expand the program's use of leading and emerging risk indicators, scenario analysis, external intelligence, and forward-looking trend analysis to identify signals before they develop into events that could affect strategic outcomes, the Board-approved risk appetite, or impact regulator trust.
- Prepare executive- and Board-level risk reporting that translates leading, emerging, and lagging indicators into clear insights, plausible scenarios, and recommended actions.
- Develop and adapt reporting that shows how changes in the risk profile may affect strategic objectives, the Board-approved risk appetite, shareholder value, consistent returns, and regulator trust.
- Translate emerging and leading indicators into clear implications, scenarios, decisions, and recommended management actions.
- Coordinate enterprise issue management, remediation tracking, and risk governance activities across all business lines and functions.
- Identify opportunities to simplify, streamline, automate, or redesign risk processes so that they scale with the Bank's growth.
- Continually assess whether the Bank's risk framework, governance, talent, data, technology, and capabilities enable and support the Bank's evolving strategy and risk profile.
- Define and maintain enterprise risk decision rights, escalation criteria, and governance protocols that enable timely decisions by qualified risk and business leaders while ensuring material matters receive appropriate C-suite, or Board attention.
Technology Risk, Cybersecurity & Emerging Technology Risk Oversight:
- Partner with technology and business leaders to ensure innovation occurs safely and within established risk tolerances.
- Serve as the Bank's independent second-line risk leader for cybersecurity, operational resiliency, business continuity, disaster recovery, data governance, and technology risk management.
- Provide independent second-line oversight and credible challenge of Information Technology, Information Security, Cybersecurity, Privacy, Data, AI and related risk domains and programs.
- Independently assess whether technology and cyber risk management capabilities appropriately support the Bank's strategic objectives, growth plans, operational resilience, and risk appetite.
- Oversee governance, and risk and control assessments for artificial intelligence, machine learning, automation, banking technologies, models, data, cloud services, third-party technologies, and other emerging technologies.
- Monitor evolving regulatory guidance, supervisory expectations, industry practices, and emerging threats related to AI, fintech, cybersecurity, cloud computing, digital banking, and other technology-enabled financial services.
- Identify emerging technology risks early and ensure appropriate governance is established before risks become material.
Third-Party Risk Management:
- Own the Bank's Third-Party Risk Management (TPRM) Program and overall governance framework.
- Provide enterprise oversight of material third-party relationships including fintech partners, embedded banking arrangements, technology service providers, and other outsourced activities.
- Ensure appropriate due diligence, risk assessment, onboarding, monitoring, issue management, operational resilience, and offboarding practices are maintained.
- Evaluate and monitor concentration, operational, information/cybersecurity, compliance, financial, and strategic risks associated with material third parties.
- Partner with business leaders to establish risk-based, scalable approaches that allow strategic partnerships to grow safely.
- Identify emerging risks within the Bank's partner ecosystem and ensure appropriate action is taken before risks materially impact the bank’s strategies and plans.
Financial Crimes Compliance and Compliance Program Management Oversight:
- Oversee the Bank's Financial Crimes and Compliance Management Programs, teams and overall governance frameworks.
- Ensure effective independent second-line oversight of applicable federal and state laws and regulations, as applicable; including but not limited to CRA, UDAAP, HMDA, Section 1071, complaint management, Fair Lending, marketing compliance, privacy, and other areas as applicable to the Bank’s activities.
- Monitor evolving regulatory requirements and ensure timely and appropriate regulatory change implementation of policy, process, controls and governance capabilities.
- Ensure Compliance and Financial Crimes programs evolve with the Bank's products, partnerships, technologies, customers, and business model.
- Promote a proactive compliance culture that identifies regulatory risk early and works collaboratively with the business to develop sustainable solutions.
Operational Risk Management:
- Own the Bank's Operational Risk Management Framework and related governance processes.
- Ensure operational risk frameworks evolve with organizational growth, technology adoption, third-party dependencies, new products, and changes to the Bank's operating model.
- Oversee operational risk and control assessments, loss event management, root cause analysis, control effectiveness reviews, and issue management activities.
- Coordinate and oversee business continuity and disaster recovery practices and capabilities for ongoing operational resilience.
- Identify systemic and cross-functional operational risks that may not be visible through individual business-line risk assessments.
CRO Support, Executive Leadership & Decision Escalation:
- Serve as the CRO's trusted thought partner on enterprise risk decisions, strategic initiatives, and emerging risks.
- Equip the CRO with recommendations and decision-ready analysis, not simply questions or issues requiring further analysis.
- Proactively identify matters that require CRO attention and resolve matters within delegated authority without unnecessary escalation.
- Help protect the CRO's capacity for strategic (cut off). The text ends abruptly: "Help protect the CRO's capacity for strategic". We'll keep as is.
Now Requirements/Qualifications:
- Expertise across traditional banking risk disciplines.
- Informed understanding of fintech ecosystems, Banking-as-a-Service (BaaS), embedded banking models, data and AI governance, and emerging risks.
- Experienced enterprise risk leader and highly effective operator who can move seamlessly between strategy and execution.
- Understands how a bank creates value.
- Has the credibility to challenge senior leaders.
- Has the judgment to make decisions without unnecessary escalation.
- Can build scalable, modern risk capabilities that support responsible growth.
Now About the role: combine Company Overview and Position Summary.
Company Overview paragraph: "Core Bank is a high-performing, tech-forward community bank serving Omaha and Kansas City. Guided by our vision to be high-performing, solutions-based, and tech-forward, we combine trusted relationships with modern tools to deliver smarter, faster, and more personalized banking. Our culture—what we call our Recipe for Awesome—makes Core Bank more than a place to work or bank; it’s a place where people grow, solutions thrive, and together we build better. If you want to help us build something remarkable, then we'd love to get to know you. To learn more about what makes us - us, explore www.corebankcareers.com."
Position Summary paragraph: "Core Bank is focused on delivering exceptional banking experiences while enabling innovation through commercial banking, embedded finance, and fintech partnerships. The Director of Risk & Compliance plays a critical leadership role in supporting that vision by ensuring the Bank maintains a scalable, business-focused, and forward-looking risk management framework. Reporting directly
About the role
Company Overview ... Position Summary ... maybe combine?
But we have Company Overview separate; maybe include in About the role. Better: About the role includes company overview and position summary. ThenResponsibilities
- Provide leadership, coaching, development and performance management for Risk personnel.... ... etc for supervisory responsibilities. Then duties: each bullet. We need to ensure we don't duplicate. We also need Requirements/Qualifications/Skills: The posting mentions ideal candidate brings expertise across traditional banking risk disciplines and an informed understanding of fintech ecosystems, Banking-as-a-Service (BaaS), embedded banking models, data and AI governance, and emerging risks. Also: The ideal candidate is an experienced enterprise risk leader and highly effective operator who can move seamlessly between strategy and execution; understands how a bank creates value; has the credibility to challenge senior leaders; has the judgment to make decisions without unnecessary escalation; and can build scalable, modern risk capabilities that support responsible growth. We can treat that as Requirements or Qualifications. We'll create a
- items. We should not include Benefits, Pay, Schedule. Now we need to extract each duty as list item. Let's list supervisory responsibilities sentences: - Provide leadership, coaching, development and performance management for Risk personnel. - Foster a high-performance culture focused on accountability, collaboration, innovation, responsiveness, and continuous improvement. - Build the confidence and decision-making capabilities of Risk team members so that decisions are made promptly and appropriately at the lowest effective level. - Coach Risk personnel through complex judgments and decisions rather than allowing uncertainty or fear of making the wrong decision to become a reason for unnecessary escalation. - Establish clear decision rights and escalation thresholds and coach team members through complex risk judgments, reserving only matters with material strategic, financial, regulatory, or risk-appetite implications are elevated to the CRO. - Reinforce a culture in which Risk professionals are expected to make recommendations and decisions, not simply identify problems or escalate questions. Now duties and responsibilities: many subheadings with paragraphs. We need to break each sentence into list items? Might be too granular but okay. We'll produce list items for each distinct duty sentence. Let's extract: Enterprise Risk Management Leadership: - Lead the day-to-day execution of the Enterprise Risk Management strategic plan, framework and ERM plan activities to ensure enterprise risk management programs remain examination and audit-ready on a continuous basis. - Translate the CRO’s strategic priorities and direction into actionable plans, accountabilities, decisions, and measurable outcomes. - Serve as the CRO's primary delegate and go-to enterprise risk leader in management committees, governance forums, and material business decisions, as appropriate. - Exercise delegated authority, provide timely risk-based recommendations, resolve issues at the appropriate level, and escalate matters to the CRO when they exceed established decision rights, risk tolerances, or the Board-approved risk appetite. - Evaluate strategic initiatives, new products, services, business lines, technologies, partnerships, and material changes to the Bank's operating model for alignment with strategic objectives, risk appetite, and safety and soundness. - Partner closely with business and functional leaders to understand strategic objectives, identify risks and opportunities, and develop practical pathways to achieve desired outcomes within the Board-approved risk appetite. - Build strong, trusted relationships with business leaders while maintaining independent second-line challenge to promote practical, scalable risk management practices that are embedded into business operations and decision-making. - Maintain and continuously mature enterprise-wide risk assessment methodologies, risk inventories, risk appetite measures, key risk indicators, and governance processes. - Expand the program's use of leading and emerging risk indicators, scenario analysis, external intelligence, and forward-looking trend analysis to identify signals before they develop into events that could affect strategic outcomes, the Board-approved risk appetite, or impact regulator trust. - Prepare executive- and Board-level risk reporting that translates leading, emerging, and lagging indicators into clear insights, plausible scenarios, and recommended actions. - Develop and adapt reporting that shows how changes in the risk profile may affect strategic objectives, the Board-approved risk appetite, shareholder value, consistent returns, and regulator trust. - Translate emerging and leading indicators into clear implications, scenarios, decisions, and recommended management actions. - Coordinate enterprise issue management, remediation tracking, and risk governance activities across all business lines and functions. - Identify opportunities to simplify, streamline, automate, or redesign risk processes so that they scale with the Bank's growth. - Continually assess whether the Bank's risk framework, governance, talent, data, technology, and capabilities enable and support the Bank's evolving strategy and risk profile. - Define and maintain enterprise risk decision rights, escalation criteria, and governance protocols that enable timely decisions by qualified risk and business leaders while ensuring material matters receive appropriate C-suite, or Board attention. Technology Risk, Cybersecurity & Emerging Technology Risk Oversight: - Partner with technology and business leaders to ensure innovation occurs safely and within established risk tolerances. - Serve as the Bank's independent second-line risk leader for cybersecurity, operational resiliency, business continuity, disaster recovery, data governance, and technology risk management. - Provide independent second-line oversight and credible challenge of Information Technology, Information Security, Cybersecurity, Privacy, Data, AI and related risk domains and programs. - Independently assess whether technology and cyber risk management capabilities appropriately support the Bank's strategic objectives, growth plans, operational resilience, and risk appetite. - Oversee governance, and risk and control assessments for artificial intelligence, machine learning, automation, banking technologies, models, data, cloud services, third-party technologies, and other emerging technologies. - Monitor evolving regulatory guidance, supervisory expectations, industry practices, and emerging threats related to AI, fintech, cybersecurity, cloud computing, digital banking, and other technology-enabled financial services. - Identify emerging technology risks early and ensure appropriate governance is established before risks become material. Third-Party Risk Management: - Own the Bank's Third-Party Risk Management (TPRM) Program and overall governance framework. - Provide enterprise oversight of material third-party relationships including fintech partners, embedded banking arrangements, technology service providers, and other outsourced activities. - Ensure appropriate due diligence, risk assessment, onboarding, monitoring, issue management, operational resilience, and offboarding practices are maintained. - Evaluate and monitor concentration, operational, information/cybersecurity, compliance, financial, and strategic risks associated with material third parties. - Partner with business leaders to establish risk-based, scalable approaches that allow strategic partnerships to grow safely. - Identify emerging risks within the Bank's partner ecosystem and ensure appropriate action is taken before risks materially impact the bank’s strategies and plans. Financial Crimes Compliance and Compliance Program Management Oversight: - Oversee the Bank's Financial Crimes and Compliance Management Programs, teams and overall governance frameworks. - Ensure effective independent second-line oversight of applicable federal and state laws and regulations, as applicable; including but not limited to CRA, UDAAP, HMDA, Section 1071, complaint management, Fair Lending, marketing compliance, privacy, and other areas as applicable to the Bank’s activities. - Monitor evolving regulatory requirements and ensure timely and appropriate regulatory change implementation of policy, process, controls and governance capabilities. - Ensure Compliance and Financial Crimes programs evolve with the Bank's products, partnerships, technologies, customers, and business model. - Promote a proactive compliance culture that identifies regulatory risk early and works collaboratively with the business to develop sustainable solutions. Operational Risk Management: - Own the Bank's Operational Risk Management Framework and related governance processes. - Ensure operational risk frameworks evolve with organizational growth, technology adoption, third-party dependencies, new products, and changes to the Bank's operating model. - Oversee operational risk and control assessments, loss event management, root cause analysis, control effectiveness reviews, and issue management activities. - Coordinate and oversee business continuity and disaster recovery practices and capabilities for ongoing operational resilience. - Identify systemic and cross-functional operational risks that may not be visible through individual business-line risk assessments. CRO Support, Executive Leadership & Decision Escalation: - Serve as the CRO's trusted thought partner on enterprise risk decisions, strategic initiatives, and emerging risks. - Equip the CRO with recommendations and decision-ready analysis, not simply questions or issues requiring further analysis. - Proactively identify matters that require CRO attention and resolve matters within delegated authority without unnecessary escalation. - Help protect the CRO's capacity for strategic (cut off). The text ends abruptly: "Help protect the CRO's capacity for strategic". We'll keep as is. Now Requirements/Qualifications: - Expertise across traditional banking risk disciplines. - Informed understanding of fintech ecosystems, Banking-as-a-Service (BaaS), embedded banking models, data and AI governance, and emerging risks. - Experienced enterprise risk leader and highly effective operator who can move seamlessly between strategy and execution. - Understands how a bank creates value. - Has the credibility to challenge senior leaders. - Has the judgment to make decisions without unnecessary escalation. - Can build scalable, modern risk capabilities that support responsible growth. Now About the role: combine Company Overview and Position Summary. Company Overview paragraph: "Core Bank is a high-performing, tech-forward community bank serving Omaha and Kansas City. Guided by our vision to be high-performing, solutions-based, and tech-forward, we combine trusted relationships with modern tools to deliver smarter, faster, and more personalized banking. Our culture—what we call our Recipe for Awesome—makes Core Bank more than a place to work or bank; it’s a place where people grow, solutions thrive, and together we build better. If you want to help us build something remarkable, then we'd love to get to know you. To learn more about what makes us - us, explore www.corebankcareers.com." Position Summary paragraph: "Core Bank is focused on delivering exceptional banking experiences while enabling innovation through commercial banking, embedded finance, and fintech partnerships. The Director of Risk & Compliance plays a critical leadership role in supporting that vision by ensuring the Bank maintains a scalable, business-focused, and forward-looking risk management framework. Reporting directly