Enterprise Resilience Manager

Description

At Sunflower Bank, N.A., we’re experiencing great growth. Since our founding in 1892, we've been committed to serving our communities and supporting the team members who make it all possible. As a full-service financial institution, we offer a full range of relationship-focused services to meet personal, business, and wealth-management financial objectives. Creating Possibility is not just our mission, it’s what we do every day for clients and associates. Learn more about Sunflower Bank at sunflowerbank.com.

Sunflower Bank, N.A. is looking for an energetic, highly motivated individual to fill the full-time position of Enterprise Resilience Manager in/at our Dallas, TX location.

Description:

The Enterprise Resilience Manager is responsible for building, operating, and continuously improving an integrated enterprise resilience capability spanning Business Continuity Management (BCM), Physical Security Management, and Enterprise Incident Management and Crisis Management. This role provides program oversight, governance, assurance, and testing for resilience capabilities across the organization, including Emergency Response Planning, Business Continuity Management, Security Incident Response (SIR), Crisis Management (CMP), and IT Response/Recovery. The position partners closely with technology, operations, facilities, fraud/security, risk management, and business leadership to ensure preparedness, effective response, and timely recovery from disruptive events, while meeting regulatory and compliance requirements. This role reports to the Chief Information Security Officer.

Responsibilities:

Program Governance & Oversight (Enterprise Resilience / Operational Resilience)

• Own and maintain an integrated resilience framework that unifies BCM, physical security-related resilience, and enterprise incident/crisis management under a single governance model.
• Define program policies, standards, procedures, and reporting for ERP/BCM/SIR/CMP and IT Response/Recovery in alignment with enterprise risk management and compliance expectations.
• Establish and manage resilience metrics/KRIs/KPIs (e.g., plan coverage, exercise completion, recovery time adherence, corrective action closure, readiness scores).
• Provide second-line style oversight to ensure control design and execution meet defined requirements and escalate material gaps and risks.
• Ensure governance includes roles/responsibilities, decision rights, playbooks, escalation criteria, and executive notification protocols.
• Lead and maintain the Business Continuity Management program lifecycle.
• Validate that business continuity strategies align with critical processes, regulatory obligations, and operational needs.
• Coach and support business units in developing and maintaining actionable, role-based continuity plans.
• Design and manage an enterprise-wide exercise and testing program across resilience disciplines.
• Establish standards for test objectives, success criteria, evidence collection, and lessons learned.
• Track and drive closure of corrective action plans and improvement items, including root cause analysis, due dates, and accountable owners.

Enterprise Incident & Crisis Management (CMP/ERP)

• Manage and evolve enterprise incident management and crisis management processes, ensuring clear triggers, escalation paths, communications protocols, and executive-level decision support.
• Maintain enterprise-level playbooks for common disruption scenarios (e.g., cyber events, facility outages, workplace violence threats, natural disasters, third-party outages).
• Coordinate with Corporate Communications, Legal, Compliance, HR, Facilities, Technology, and Security to ensure cohesive crisis response across the enterprise.
• Support after-hours/on-call response leadership expectations as appropriate.

Oversight Integration

• Partner with Information Security and SOC/IR teams to ensure SIR processes integrate with enterprise crisis/BCM processes (e.g., executive updates, business workarounds, communications, and customer impact).
• Validate that cyber incident response plans include coordination with BCM continuity strategies, IT recovery/DR procedures, Crisis communications and regulatory considerations (as applicable).
• Collaborate with Physical Security and Facilities teams to ensure preparedness for facility-related disruptions (e.g., access control outages, power issues, building closures, threats).
• Provide oversight of IT response and recovery readiness in partnership with IT Service Management, Infrastructure, Application Owners, and Architecture
• Ensure alignment between technology recovery capabilities and business recovery requirements (e.g., RTO/RPO mapping to business tolerances).
• Validate that IT recovery plans are assessed, evidenced, and remediated on a defined cadence, with measurable outcomes.
• Coordinate with Third-Party Risk Management to ensure critical vendors and key dependencies are included in resilience planning and testing.
• Validate resilience requirements for critical third parties (e.g., notification expectations, recovery commitments, testing participation).
• Maintain audit-ready documentation, including program artifacts, test evidence, governance minutes, plan attestations, issue logs, and remediation tracking.
• Perform the job in accordance with applicable industry laws and regulations as well as the policies and procedures established by the company.
• Responsible for upholding Fair and Responsible Banking practices and Code of Ethics and Conduct guidelines.
• Understand and participate in the Bank’s Community Reinvestment Act program.
• Perform other duties as assigned.

Education / Experience Preferred:

• Bachelor’s degree in business, Risk Management, Information Systems, Security Management, Emergency Management, or a related field (or equivalent combination of education and experience).
• 10+ years of progressive experience in resilience disciplines
• Financial services experience preferred.
• CBCP (Certified Business Continuity Professional) or MBCP (Master Business Continuity Professional), or commensurate certification preferred.
• Working knowledge of NIST Cybersecurity Framework (CSF).
• Crisis leadership and calm decision-making under pressure.
• Exercise design, facilitation, and after-action reporting.
• Cross-functional influence without direct authority.
• Strong written documentation and executive communications.
• Analytical mindset with practical, operational execution.
• Must be bondable

Pay is dependent on knowledge, skills, abilities, experience, and location.

Working Conditions

The physical demands of this position require the ability to perform essential job functions with or without reasonable accommodation. Employees may spend extended periods sitting or standing, using hands to operate computers or other equipment, and reaching for work-related tasks. Regular walking may be required, along with occasional bending, stooping, kneeling, or climbing. The role may involve lifting or moving items weighing up to 10 pounds. Vision requirements include close and distance vision, color and peripheral vision, depth perception, and the ability to adjust focus.

Sunflower Bank Benefits

People choose to “bank” with us, but for those we serve, we’re more than a bank. We strive to be the financial backbone of their lives, and we know that starts with our team.

Our supportive culture empowers team members to grow and seize new opportunities. Like our namesake, the sunflower, we are:

• Rooted in Strength
• Propelled by Growth
• Individuals in a Great Whole
• Creating Possibility
• Community Focused

Associates enjoy outstanding benefits, including:

• 401(k) Plan with 6% Match
• Health/Dental/Vision Insurance
• Company-paid Life Insurance
• Tuition Reimbursement
• Fitness Reimbursement
• Paid Time Off
• Volunteer Leave
• Paid Holidays
• Plus many more associate perks & incentives!

If you qualify, apply online at www.sunflowerbank.com/careers.

You’ve never worked anyplace like Sunflower Bank!

EOE/AA: Minorities/Females/Disabled/Vets

Sunflower Bank, N.A. is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, protected veteran status, status as a qualified individual with a disability, sexual orientation, gender identity, or any other characteristic protected by law.

Open until filled; early application encouraged. This vacancy announcement may be used to fill similar positions within 90 days.

If you are a California resident, you may be entitled to certain rights regarding your personal information, which is information that identifies, relates to, or could reasonably be linked with a particular California resident or household. Additional information about our data collection practices and location specific notices is available on our privacy policy.