Director - Operational Risk Management at Fulton Bank – Remote, Pennsylvania

Requisition ID: 2026-23387
Category: Audit/Risk/Compliance
# of Openings: 1
Position Type (Portal Searching): Full-Time
Remote
Lancaster
FLSA Status: Exempt

Value Proposition

Our values define us and our culture inspires us to change lives for the better. Our employees are the heart and soul of our company, and every success we experience begins with them. Together we are committed to making a positive impact in our local communities. We champion a culture of continuous learning, work-life integration, and inclusion. We promote a digitally enabled work environment to continuously enhance the experience of our employees and customers.

Overview

This is a full-time career opportunity that can be fully remote. Hybrid flexibility may also be available within the Fulton footprint (DE, MD, PA, NJ, VA). Requires travel to corporate headquarters in Lancaster, PA (approximately 10-12 times a year).

The Director – Operational Risk Management serves as the Bank's second line of defense leader responsible for designing, executing, and continuously enhancing the enterprise-wide operational risk management framework and programs. This role ensures that operational risks across all business lines and shared services are identified, assessed, managed and reported in a consistent, transparent and regulatory-aligned manner. The leader in this role will drive and oversee the implementation of the Operational Risk Management Framework, the Process Risk and Control Self-Assessment (RCSA) Program, the Issues Management Program, the Control Testing Program and the Operational Loss Event Monitoring Program. In addition, they will manage the Operational Risk Committee, escalating critical issues to the Enterprise Risk Management Committee. This position serves as a critical risk management liaison for the Bank's first line of defense providing credible challenge to ensure prudent, but effective risk management.

Responsibilities

• Lead the design, implementation and continuous improvement of the bank’s Operational Risk Management Framework in alignment with regulatory expectations and industry standards. Oversee governance routines, including managing the Operational Risk Committee, reporting cycles and escalation protocols. Develop and deliver training, communication and engagement activities reinforcing operational risk management principles and programs.
• Provide leadership and direction for the Process Risk and Control Self-Assessment Program. Own the Process RCSA Methodology, including inherent risk scoring, control evaluation, residual risk determination and action plan governance. Ensure risk-assessable units, processes, and subprocesses are consistently documented and assessed. Provide credible challenge to first-line assessments, control designs and risk management decisions.
• Lead and guide the Issue Management Program. Own the issue management framework providing standards, workflow and process for issue identification, reporting, assessment, action plan and validation standards. Provide second line oversight over issue identification processes (including risk events, control test failures and self-identified issues) ensuring clarity and adequacy of action plans and monitoring process through full remediation. Partner with first line business leaders to evaluate issues and design effective mitigation strategies. Credibly challenge first line business validation of self-identified issues to ensure effective remediation and reduce risk of repeat issues.
• Direct and manage the Control Testing Program. Own the Control Testing Framework providing the control testing standards, methodology, approach and schedule. Evaluate the effectiveness of controls on a risk weighted basis supporting critical processes and operational resilience capabilities. Partner with first line leaders to strengthen control designs, control testing and remediation practices. Coordinate with Internal Audit and Compliance to ensure alignment of assurance activities and reduce duplication.
• Provide leadership and direction for the Operational Loss Event Monitoring Program. Own the Operational Loss Monitoring Framework providing standards, methodology and process for monitoring and escalating loss events.
• Serve as primary point of contact for operational risk-related regulatory exams, inquiries, and supervisory engagements. Ensure documentation, methodologies and reporting requirements meet regulatory expectations and withstand audit scrutiny.
• Deliver clear, concise and actionable reporting to the Deputy Chief Risk Officer and Operational Risk Management Committee. Leverage data, analytics, dashboards and AI to enhance risk insight and decision-making. Serve as trusted advisor on operational risk matters during strategic planning, new initiatives and change management.
• Operate a higher performing Operational Risk Team. Promote a strong culture of risk, emphasizing accountability, transparency, and continuous improvement. Provide coaching and guidance to first line risk owners and business leaders. Promote strong communication and collaboration between Operational Risk Management, Compliance, Audit, and first line business units. Champion a culture of risk awareness and accountability across the organization. Build strong relationships with first line of defense risk and compliance counterparts.

Qualifications

Education

Bachelor's Degree or the equivalent experience. Specialty: Finance, Business, Risk Management, Accounting or related field. (Required)

Experience

10 or more years progressive experience in operational risk, enterprise risk or related risk disciplines within financial services. (Required)

Certifications

Certified Enterprise Risk Professional. (Preferred)

Knowledge, Skills, and Abilities

• Demonstrated leadership of an operational risk function or major risk program, at a mid-size or larger bank. (Required)
• Deep understanding of operational risk concepts, including inherent/residual risk, control effectiveness and KRIs. (Required)
• Deep expertise in RCSA methodologies, risk taxonomies, control frameworks, and operational loss management. (Required)
• Strong familiarity with regulatory expectations (OCC, FDIC, Federal Reserve) and industry frameworks (Basel, COSO, NIST, FFIEC). (Required)
• Demonstrated ability to interact with regulators, auditors, and middle and senior management with confidence and clarity. (Required)
• Familiarity implementing and using GRC platforms. (Preferred)
• Strong analytics and problem-solving skills with the ability to data mine and synthesize complex information. (Required)
• Ability to build strong relationships with others, through open communication, collaboration and partnerships. Ability to influence without authority and drive alignment across diverse stakeholders. (Required)
• Understanding of AI and AI related tools to use within day-to-day tool, increasing operational effectiveness. (Preferred)

Sponsorship Statement

As a condition of employment, individuals must be authorized to work in the United States without sponsorship for a work visa by Fulton Bank currently or in the future.

EEO Statement

Fulton Bank (Fulton) is an equal opportunity employer and is committed to providing equal employment opportunity for all qualified persons. Fulton will recruit, hire, train and promote persons in all job titles, and ensure that all other personnel actions are administered, without regard to race, color, religion, creed, sexual orientation, national origin, citizenship, gender, gender identity, age, genetic information, marital status, disability, covered veteran status, or any other legally protected status.