Enterprise Risk Officer

About the Role:

Enterprise Risk Management (ERM) provides a comprehensive, cross-functional view of risk across the organization, ensuring risks are consistently identified, assessed, prioritized, and managed in alignment with the Company's strategic objectives. Through effective collaboration and oversight, ERM helps promote informed decision-making and strengthens the organization's overall risk posture.

The Enterprise Risk Officer will play a critical role within the second line of defense, supporting the advancement of the Company's risk management program and driving alignment across all risk domains. This position will help establish a common and consistent view of risk throughout the organization by facilitating risk assessments, promoting best practices, and ensuring a standardized approach to risk identification, evaluation, and reporting.

The ideal candidate will bring experience executing Risk and Control Self-Assessments (RCSAs), audits, or similar risk management activities within technology, cybersecurity, or related operational risk environments. They will possess a strong understanding of risk management principles, frameworks, and industry best practices. The successful candidate must be able to:

•        Identify, assess, and document risks and associated business impacts.

•        Develop clear, well-supported risk statements and rationale documentation.

•        Evaluate and document control activities, including their design and effectiveness.

•        Assess control gaps and residual risk exposure.

•        Draft concise, actionable, and well-defined issue statements when risks exceed acceptable thresholds or controls are ineffective.

•        Facilitate discussions that drive consistency and alignment across risk assessments and risk reporting activities.

Strong stakeholder engagement and relationship management skills are essential to success in this role. The Enterprise Risk Officer will regularly collaborate with business leaders, process owners, and subject matter experts across the organization, many of whom may have varying levels of risk management expertise. As a result, the ability to communicate complex risk concepts in a clear, practical, and relatable manner is critical. The ideal candidate will be comfortable leading focused discussions, challenging assumptions when appropriate, and serving as a trusted advisor who helps business partners understand and manage risk effectively.

This role offers an opportunity to influence the organization's risk culture, strengthen enterprise-wide risk practices, and contribute to strategic decision-making while partnering with stakeholders across multiple functions and disciplines.

• Lead Risk and Control Self-Assessments (RCSAs), risk assessments, and other risk management activities across the organization.
• Define assessment scope, gathering relevant information, documenting assessment approaches, and maintaining supporting evidence.
• Collaborate with cross-functional teams on risk management strategies that align to requirements set out in enterprise standards.
• Support the ongoing maintenance, enhancement, and governance of enterprise risk management processes, standards, taxonomies, and methodologies.
• Maintain oversight by preparing documentation, tracking action items, and facilitating adherence to enterprise standards.
• Maintain risk, control, and assessment records within enterprise systems of record, ensuring information is complete, accurate, and current..
• Demonstrates compliance with all bank regulations for assigned job function and applies to designated job responsibilities – knowledge may be gained through coursework and on-the-job training. Keeps up to date on regulation changes.
• Follows all Bank policies and procedures, compliance regulations, and completes all required annual or job-specific training.
• Maintain a working knowledge of Bank's written policies and procedures regarding Bank Secrecy Act, Regulation CC, Regulation E, Bank Security and other regulations as applicable to this job description.
• May be asked to coach, mentor, or train others and teach coursework as subject matter expert.
• Actively learns, demonstrates, and fosters the Columbia corporate culture in all actions and words.
• Takes personal initiative and is a positive example for others to emulate.
• Embraces our vision to become “Business Bank of Choice”
• May perform other duties as assigned.

About You:

• Bachelor's Degree in business, finance, or other applicable discipline or equivalent experience. Required
• 5+ years of banking, risk management, compliance, audit, or IT/Ops experience. Required.
• Expert knowledge of tools and techniques employed in risk identification, risk assessment, monitoring, and reporting.
• Strong knowledge of operational and enterprise risk management concepts, best practices, and regulatory guidance.
• Demonstrate ability to independently manage multiple and complex work efforts, which involves directing other key stakeholders across the bank.
• Possess strong oral and written communication skills, critical thinking, and analytical skillset. Ability to present complex information to a variety of different audiences.
• Advanced skills in Excel, Microsoft PowerPoint, Microsoft PowerBI and knowledge of GRC systems helpful.
• Certifications: CRISC, CISM, CISA, CGRC

Travel Requirements

• Occasional

The pay range for this role is $78,000.00 - $135,000.00.

The pay rate for the selected candidate is dependent upon a variety of non-discriminatory factors including, but not limited to, job-related knowledge, skills, and experience, education, and geographic location. The role may be eligible for performance-based incentive compensation, and those details will be provided during the recruitment process.

Primary Location: Ability to work fully onsite at posted location(s).

Our Benefits:

We are proud to offer a competitive total rewards package including base wages and comprehensive benefits.

We offer eligible associates comprehensive healthcare coverage (medical, dental, and vision plans), a 401(k)-retirement savings plan with employer match for qualifying associate contributions, an employee assistance program, life insurance, disability insurance, tuition assistance, mental health resources, identity theft protection, legal support, auto and home insurance, pet insurance, access to an online discount marketplace, and paid vacation, sick days, volunteer days, and holidays. Benefit eligibility begins the first day of the month following the date of hire for associates who are regularly scheduled to work at least thirty hours weekly.

Our Commitment to Diversity:

Columbia Bank is an equal opportunity and affirmative action employer committed to employing, engaging, and developing a diverse workforce. All qualified applicants will receive consideration for employment without regard to race, color, national origin, religion, sex, age, sexual orientation, gender identity, gender expression, protected veteran status, disability, or any other applicable protected status or characteristics. If you require an accommodation to complete the application or interview(s), please let us know by email: careers@columbiabank.com.

To Staffing and Recruiting Agencies:

Our posted job opportunities are only intended for individuals seeking employment at Columbia Bank. Columbia Bank does not accept unsolicited resumes or applications from agencies and Columbia Bank will not be responsible for any fees related to unsolicited resume submissions. Staffing and recruiting agencies are not authorized to submit profiles, applications, or resumes to this site or to any Columbia Bank employee and any such submissions will be considered unsolicited unless requested directly by a member of the Talent Acquisition team.