Risk & Governance Manager at Jonestown Bank & Trust Co in Cleona, PA

Apply Description JOB SUMMARY Responsible for coordinating and supporting the Bank’s governance programs, including Enterprise Risk Management, Change Management, Third-Party Risk Management, Business Continuity, Audit Coordination, and Policy Governance. Serves as a central resource to ensure governance activities are administered consistently, regulatory expectations are met, and risk-related initiatives are effectively coordinated across the Bank. Provides support to the Compliance Officer, Information Security Officer, Financial Crimes Manager, business unit leaders, and executive management by coordinating governance activities, facilitating cross-functional communication, monitoring action items, and assisting with regulatory and operational risk initiatives. Promotes a collaborative risk culture that enables the Bank to achieve its strategic objectives while maintaining regulatory compliance and sound risk management practices. DUTIES AND RESPONSIBILITIES Governance & Enterprise Risk Coordinate the Bank’s Enterprise Risk Management (ERM) Program, including enterprise risk assessments, the Risk Register, Risk Inventory, Key Risk Indicators (KRIs), and Board reporting. Assist business units in identifying, documenting, and monitoring operational, strategic, compliance, financial, technology, and reputational risks. Coordinate follow-up on risk mitigation plans and report progress to management. Monitor emerging risks and recommend enhancements to governance processes. Change Management Administer the Bank’s Change Management Program. Coordinate cross-functional reviews for new products, services, technologies, vendors, and significant operational changes. Ensure appropriate participation from Compliance, Information Security, Financial Crimes, Operations, Finance, Legal, and affected business units. Maintain documentation supporting approved organizational changes and implementation status. Third-Party Risk & Business Continuity Coordinate the Bank’s Third-Party Risk Management Program. Facilitate vendor risk assessments, due diligence, contract review coordination, annual reviews, and ongoing vendor oversight activities. Maintain the Bank’s vendor inventory and risk classifications. Coordinate Business Continuity and Disaster Recovery activities, including Business Impact Analyses (BIAs), annual testing, corrective action tracking, and program documentation. Audit & Compliance Support Serve as the Bank’s Audit Coordinator by coordinating regulatory examinations, internal audits, and external audits. Coordinate requests for information, management responses, and corrective action plans. Monitor audit and examination findings through completion. Assist the Compliance Officer with regulatory research, policy governance, regulatory change management, and compliance-related projects. Serve as a secondary resource for general compliance questions and coordinate inquiries with the Compliance Officer as appropriate. Assist with maintaining documentation supporting regulatory examinations and governance activities. General Responsibilities Coordinate governance reporting for Executive Management and the Board of Directors. Build collaborative relationships across all business lines. Promote awareness of sound risk management principles throughout the Bank. Maintain current knowledge of applicable banking regulations and industry best practices. Perform other duties as assigned. Requirements SKILLS Minimum five (5) years of progressively responsible banking experience in Risk Management, Compliance, Internal Audit, Information Security, Operations, Project Management, or a related field. Working knowledge of banking regulations, Enterprise Risk Management, Third-Party Risk Management, Business Continuity, and internal control concepts. Strong organizational and project coordination skills with the ability to manage multiple initiatives simultaneously. Excellent analytical, written, verbal, and interpersonal communication skills. Ability to build collaborative relationships across departments and influence outcomes without direct authority. Proficiency with Microsoft Office applications and Governance, Risk, and Compliance (GRC) platforms preferred. Certification preferred such as Certified Regulatory Compliance Manager (CRCM), Certified Internal Auditor (CIA), Certified Risk Professional (CRP) or Certified Enterprise Risk Professional (CERP), or other related certification. Ability to communicate effectively – written and verbal. Ability to operate the following office equipment: adding machine, telephone, multi-function devices, personal computer including the MS Office applications.