FFB Bank

Product Manager

• Owns and manages the product backlog, including prioritization, refinement, and alignment to business goals and dependencies.
• Drives product roadmap planning and execution in partnership with Product Management and cross-functional stakeholders.
• Leads delivery from intake through production, release, including requirements definition, dependency management, testing, and launch readiness.
• Balances customer experience, regulatory requirements, technical constraints, and operational readiness in prioritization and delivery decisions.
• Leads implementation and enhancement of third-party platforms (e.g., digital account opening, servicing, and operational systems) from discovery through post-launch support.
• Experience leveraging UI/UX principles to guide platform design, enhance usability, and deliver user-centered digital solutions.
• Works with engineering and technical partners to define requirements that account for security, scalability, reliability, and operational readiness.
• Leads delivery of platform enhancements and integrations, including APIs, data flows, and workflow automation across internal systems and third-party vendors.
• Acts as the product owner for assigned vendor platforms, leading working sessions with vendor business and technical teams to design, configure, and deliver solutions.
• Accountable for vendor delivery against agreed-upon scope, timelines, and service expectations, escalating risks and tradeoffs as needed.
• Translates business needs into clear implementation plans and owns QA and UAT planning, defect triage, and release readiness across internal teams and vendors.
• Owns platforms supporting digital account opening and customer servicing tools (e.g., onboarding systems, Zendesk, communication platforms, and similar vendor solutions).
• Reviews vendor documentation, release notes, and planned enhancements to assess impact and identify opportunities.
• Utilizes work-management tools (e.g., Monday.com or similar) to track progress, manage dependencies, and provide delivery visibility.
• Supports product launches through documentation, training materials, demos, and internal enablement.
• Monitors product performance, operational metrics, and user feedback to inform enhancements and continuous improvement.
• Embodies the TRAC Values and Critical Behaviors (Teamwork, Relationship, Authenticity, Commitment) as core principles, using them to guide daily interactions and decision-making.
• Completes administrative tasks with a sense of urgency, including required Bank Compliance Training.
• Responds to internal and external inquiries via email, phone, or messaging platforms in a timely and professional manner.
• Positively represents the Bank through ethical conduct and community involvement.
• Demonstrates an understanding of and commitment to EEO policies.
• Fosters a respectful, inclusive workplace by valuing cultural differences, preventing harassment of any kind, and supporting a diverse workforce.
• Ensures adherence to all Bank policies, procedures, and processes, along with applicable state and federal laws, rules, and regulations, ensuring confidentiality and data privacy while carrying out AML/CFT (Anti-Money Laundering and Countering the Financing of Terrorism) responsibilities specific to the role.
• Performs duties in an office or home office environment, involving tasks such as writing, typing, speaking, lifting moderate weights, and operating office equipment.
• The position requires physical activities like sitting, walking, and reaching. Reasonable accommodation can be made for individuals with disabilities to perform essential functions.
• Travels up to 10%, including but not limited to attending company meetings, training sessions, and corporate events, with travel typically being regional or local based on business needs.

Product Owner

Risk

• Supports the Director of Enterprise Risk Management in implementing and maintaining the bank’s enterprise risk strategy.
• Performs data analysis to support risk reports and proposals presented to the Board of Directors, senior executives, and staff.
• Serves as a Third-Party Risk Management specialist supporting the Bank’s vendor lifecycle processes, including onboarding, risk assessment, due diligence, monitoring, renewal, and termination.
• Performs vendor risk assessments to evaluate inherent and residual risk based on criticality, data sensitivity, operational impact, and regulatory considerations.
• Reviews SOC 1 and SOC 2 reports, cybersecurity questionnaires, financial information, and business continuity documentation to assess control effectiveness.
• Assists vendor owners in identifying, documenting, and tracking remediation actions and risk mitigation plans.
• Supports periodic vendor reviews to ensure alignment with contractual requirements and regulatory expectations.
• Maintains accurate and complete vendor risk records within the Bank’s GRC system such as Archer.
• Supports vendor contract reviews to confirm appropriate risk, confidentiality, business continuity, and termination provisions are addressed.
• Collaborates with Information Security and Compliance to ensure vendors meet data protection and security standards.
• Supports the Director of ERM in maintaining and enhancing the Third-Party Risk Management program in alignment with FDIC Interagency Guidance.
• Assists in developing and maintaining vendor due diligence templates, risk scoring methodologies, and reporting tools.
• Supports migration, configuration, and ongoing maintenance of vendor workflows within Archer GRC.
• Identifies opportunities to improve vendor risk processes, documentation quality, and reporting consistency.
• Assists with integrating vendor-related risks into RCSA processes, disaster recovery and business continuity testing, and incident management workflows.
• Supports development of vendor-related risk metrics, KRIs, and dashboards for management and committee reporting.
• Participates in enterprise risk assessments, audits, and regulatory examinations related to third-party risk.
• Provides analytical support for ERM reports, dashboards, and risk summaries.
• Prepares vendor risk reports, summaries, and supporting documentation for senior management and risk committees.
• Tracks vendor-related issues, findings, and corrective actions through resolution.
• Maintains regular communication with internal stakeholders and vendors to support effective risk oversight.
• Embodies the TRAC Values and Critical Behaviors (Teamwork, Relationship, Authenticity, Commitment) as core principles, using them to guide daily interactions and decision-making.

Enterprise Risk Analyst II

Analyst

• The Fraud Analyst works closely with the Fraud Manager as well as the Compliance team.
• Responsible for the day-to-day operations of risk and underwriting within the company's merchant and acquiring portfolios.
• Reviews and analyzes merchant applications to make confident informed decisions and recommendations.
• Provides guidance and respond to daily inquiries from peers, Sub-ISO and ISO partners.
• Prepares key points for presentation to management pertaining to customers that pose heightened or elevated risk to the Bank.
• Maintains accurate and thorough documentation and audit trails of Merchant assessments.
• Evaluates existing relationships and timely identification and escalation of unusual activity.
• Complete appropriate Unusual Activity Reporting processes to adhere with compliance requirements as needed.
• Performs on-site visits to third party payment processors and coordinates audits.
• Evaluates financial and bank statements to assess creditworthiness, determine merchant financial stability, and identify potential risks to the Bank’s operations.

Fraud Analyst, Merchant Services

• Performs Information Security Officer (ISO) responsibilities as a governance and risk oversight function within ERM, in alignment with FFIEC, GLBA, and regulatory expectations.
• Provides second-line oversight of the Bank’s Information Security Program, ensuring appropriate policies, standards, and controls are established and maintained.
• Partners with the CTO and IT leadership to review cybersecurity risks, security incidents, vulnerability assessments, and remediation activities.
• Supports periodic Information Security Risk Assessments, ensuring results are documented, reported, and incorporated into the enterprise risk profile.
• Assists with preparation of Board- and committee-level Information Security reporting, including risk posture, trends, and material issues.
• Supports regulatory examinations, audits, and inquiries related to Information Security, cybersecurity, and IT risk governance.
• Ensures Information Security risks are appropriately integrated into ERM programs such as RCSA, Third-Party Risk Management, Incident Management, and DR/BCP.
• Owns designated ERM functions, including IT Risk and Information Security risk oversight, as assigned by the Director of ERM.
• Leads the design, execution, and continuous improvement of assigned ERM programs, ensuring technology and cybersecurity risks are appropriately incorporated.
• Evaluates risk exposures and control effectiveness independently, recommending actions to management and escalating material risks as appropriate.
• Acts as ERM’s designated representative for Information Security governance, supporting Board, management committees, audits, and regulatory interactions related to IT and cybersecurity risk.
• Leads enterprise-wide and targeted risk assessments, including inherent risk identification, control evaluation, and residual risk determination.
• Facilitates risk workshops, scenario analyses, and management discussions across business lines and support functions.
• Ensures consistency and quality in risk assessment outputs across the organization.
• Represents ERM in internal governance forums, management committees, and working groups.
• Prepares and presents ERM materials for senior management and Board-level committees, as delegated.
• Serves as a key ERM contact for internal audits, external audits, and regulatory examinations, coordinating responses and remediation tracking.
• Monitors regulatory guidance and industry developments, translating requirements into actionable ERM enhancements.
• Oversees the development of IT and Information Security risk metrics, KRIs, and dashboards, ensuring clear visibility into cybersecurity posture and emerging technology risks.
• Provides forward-looking risk insights, trend analysis, and emerging risk identification to support strategic decision-making.
• Supports risk appetite refinement and alignment with enterprise strategy.
• Mentors ERM Analysts and Risk Officer I staff by providing technical guidance, reviewing work products, and supporting professional development.
• Leads or co-leads ERM-related training sessions, tabletop exercises, and facilitated risk discussions.
• Contributes to succession planning and knowledge transfer within the ERM function.
• Supports the development and periodic review of ERM policies, standards, and governance documentation.
• Identifies opportunities to enhance ERM efficiency, automation, and data quality, including effective use of GRC tools.
• Champions a strong risk culture by promoting accountability, transparency, and proactive risk management practices.
• Embodies the TRAC Values and Critical Behaviors (Teamwork, Relationship, Authenticity, Commitment) as core principles, using them to guide daily interactions and decision-making.
• Completes administrative tasks with a sense of urgency, including required Bank Compliance Training.
• Responds to internal and external inquiries via email, phone, or messaging platforms in a timely and professional manner.
• Positively represents the Bank through ethical conduct and community involvement.
• Demonstrates an understanding of and commitment to EEO policies.
• Fosters a respectful, inclusive workplace by valuing cultural differences, preventing harassment of any kind, and supporting a diverse workforce.
• Ensures adherence to all Bank policies, procedures, and processes, along with applicable state and federal laws, rules, and regulations, ensuring confidentiality and data privacy while carrying out AML/CFT (Anti-Money Laundering and Countering the Financing of Terrorism) responsibilities specific to the role.
• Performs duties in an office or home office environment, involving tasks such as writing, typing, speaking, lifting moderate weights, and operating office equipment.
• The position requires physical activities like sitting, walking, and reaching.
• Reasonable accommodation can be made for individuals with disabilities to perform essential functions.
• Travels up to 10%, including but not limited to attending company meetings, training sessions, and corporate events, with travel typically being regional or local based on business needs.

Product Owner

Enterprise Risk Analyst II

Fraud Analyst, Merchant Services

Enterprise Risk Officer II