Director - Operational Risk Management

Our values define us and our culture inspires us to change lives for the better. Our employees are the heart and soul of our company, and every success we experience begins with them. Together we are committed to making a positive impact in our local communities. We champion a culture of continuous learning, work-life integration, and inclusion. We promote a digitally enabled work environment to continuously enhance the experience of our employees and customers.

This is a full-time career opportunity that can be fully remote. Hybrid flexibility may also be available within the Fulton footprint (DE, MD, PA, NJ, VA). Requires travel to corporate headquarters in Lancaster, PA (approximately 10-12 times a year).

The Director - Operational Risk Management serves as the Bank's second line of defense leader responsible for designing, executing, and continuously enhancing the enterprise-wide operational risk management framework and programs. This role ensures that operational risks across all business lines and shared services are identified, assessed, managed and reported in a consistent, transparent and regulatory-aligned manner. The leader in this role will drive and oversee the implementation of the Operational Risk Management Framework, the Process Risk and Control Self-Assessment (RCSA) Program, the Issues Management Program, the Control Testing Program and the Operational Loss Event Monitoring Program. In addition, they will manage the Operational Risk Committee, escalating critical issues to the Enterprise Risk Management Committee. This position serves as a critical risk management liaison for the Bank's first line of defense providing credible challenge to ensure prudent, but effective risk management.

Lead the design, implementation and continuous improvement of the bank's Operational Risk Management Framework in alignment with regulatory expectations and industry standards. Oversee governance routines, including managing the Operational Risk Committee, reporting cycles and escalation protocols. Develop and deliver training, communication and engagement activities reinforcing operational risk management principles and programs.
• Provide leadership and direction for the Process Risk and Control Self-Assessment Program. Own the Process RCSA Methodology, including inherent risk scoring, control evaluation, residual risk determination and action plan governance. Ensure risk-assessable units, processes, and subprocesses are consistently documented and assessed. Provide credible challenge to first-line assessments, control designs and risk management decisions.
• Lead and guide the Issue Management Program. Own the issue management framework providing standards, workflow and process for issue identification, reporting, assessment, action plan and validation standards. Provide second line oversight over issue identification processes (including risk events, control test failures and self-identified issues) ensuring clarity and adequacy of action plans and monitoring process through full remediation. Partner with first line business leaders to evaluate issues and design effective mitigation strategies. Credibly challenge first line business validation of self-identified issues to ensure effective remediation and reduce risk of repeat issues.
• Direct and manage the Control Testing Program. Own the Control Testing Framework providing the control testing standards, methodology, approach and schedule. Evaluate the effectiveness of controls on a risk weighted basis supporting critical processes and operational resilience capabilities. Partner with first line leaders to strengthen control designs, control testing and remediation practices. Coordinate with Internal Audit and Compliance to ensure alignment of assurance activities and reduce duplication.
• Provide leadership and direction for the Operational Loss Event Monitoring Program. Own the Operational Loss Monitoring Framework providing standards, methodology and process for monitoring and escalating loss events.
• Serve as primary point of contact for operational risk-related regulatory exams, inquiries, and supervisory engagements. Ensure documentation, methodologies and reporting requirements meet regulatory expectations and withstand audit scrutiny.
• Deliver clear, concise and actionable reporting to the Deputy Chief Risk Officer and Operational Risk Management Committee. Leverage data, analytics, dashboards and AI to enhance risk insight and decision-making. Serve as trusted advisor on operational risk matters during strategic planning, new initiatives and change management.
• Operate a higher performing Operational Risk Team. Promote a strong culture of risk, emphasizing accountability, transparency, and continuous improvement. Provide coaching and guidance to first line risk owners and business leaders. Promote strong communication and collaboration between Operational Risk Management, Compliance, Audit, and first line business units. Champion a culture of risk awareness and accountability across the organization. Build strong relationships with first line of defense risk and compliance counterparts.

Bachelor's Degree or the equivalent experience. Specialty: Finance, Business, Risk Management, Accounting or related field. (Required)

10 or more years progressive experience in operational risk, enterprise risk or related risk disciplines within financial services. (Required)

Certified Enterprise Risk Professional. (Preferred)

• Demonstrated leadership of an operational risk function or major risk program, at a mid-size or larger bank. (Required)
• Deep understanding of operational risk concepts, including inherent/residual risk, control effectiveness and KRIs. (Required)
• Deep expertise in RCSA methodologies, risk taxonomies, control frameworks, and operational loss management. (Required)
• Strong familiarity with regulatory expectations (OCC, FDIC, Federal Reserve) and industry frameworks (Basel, COSO, NIST, FFIEC). (Required)
• Demonstrated ability to interact with regulators, auditors, and middle and senior management with confidence and clarity. (Required)
• Familiarity implementing and using GRC platforms. (Preferred)
• Strong analytics and problem-solving skills with the ability to data mine and synthesize complex information. (Required)
• Ability to build strong relationships with others, through open communication, collaboration and partnerships. Ability to influence without authority and drive alignment across diverse stakeholders. (Required)
• Understanding of AI and AI related tools to use within day-to-day tool, increasing operational effectiveness. (Preferred)

This role may perform other job duties as assigned by the manager. Each employee of the Organization, regardless of position, is accountable for reading, understanding and acting on the contents of all Company-assigned and/or job related Compliance Programs, regulations and policies and procedures, as well as ensure that all Compliance Training assignments are completed by established due dates. This includes but is not limited to, understanding and identifying compliance risks impacting their department(s), ensuring compliance with applicable laws or regulations, and escalating compliance risks to the appropriate level of management.

To provide greater transparency to candidates, we share base salary ranges on all job postings regardless of state. We set standard salary ranges for our roles based on the position, function, and responsibilities, as benchmarked against similarly sized companies in our industry. Specific compensation offered will be determined based on a combination of factors including the candidate's knowledge, skills, depth of work experience, and relevant licenses/credentials. The salary range may vary based on geographic location.

The salary range for this position is $124,400.00 - $207,300.00 annually.

Additional Compensation Components

This job is eligible to receive equity in the form of restricted stock units. This job is eligible to participate in a short-term incentive compensation plan subject to individual and company performance.

Additionally, as part of our Total Rewards program, Fulton Bank offers a comprehensive benefits package to those who qualify. This includes medical plans with prescription drug coverage; flexible spending account or health savings account depending on the medical plan chosen; dental and vision insurance; life insurance; 401(k) program with employer match and Employee Stock Purchase Plan; paid time off programs including holiday pay and paid volunteer time; disability insurance coverage and maternity and parental leave; adoption assistance; educational assistance and a robust wellness program with financial incentives. To learn more about your potential eligibility for these programs, please visit Benefits & Wellness | Fulton Bank.

As a condition of employment, individuals must be authorized to work in the United States without sponsorship for a work visa by Fulton Bank currently or in the future.