As an Individual Contributor, this role serves as a key risk management advisor and partner to business leadership in the execution and ongoing enhancement of first-line risk management activities within the business unit. The position manages and coordinates critical risk management processes, including risk assessments, issue management, risk monitoring, and governance activities, while helping ensure alignment with enterprise risk management frameworks, regulatory requirements, and organizational objectives. This role provides subject matter expertise and independent risk insights to support sound decision-making and a strong risk management culture. Bachelor's degree in business administration, finance, accounting, risk management, or a related field. Equivalent work experience or certification(s) may be considered in lieu of degree. Minimum 8 years of experience in risk management, internal or external audit, preferably in banking or financial services industry. Proficient with Microsoft Office applications. Advanced knowledge and skill proficiency in bank acumen, business acumen, continuous improvement, corporate governance, cross-functional collaboration, customer experience, decision making & judgement, financial risk management, laws & regulations, operational risk management, regulatory compliance, risk audit, and risk management. Intermediate knowledge and skill proficiency in model risk management, risk governance, and strategic thinking. Demonstrates strong analytical and critical thinking abilities, excellent written and verbal communication skills, and the ability to effectively influence stakeholders across all organizational levels. Must possess exceptional organizational skills, attention to detail, adaptability, and the ability to manage multiple priorities concurrently. Demonstrates initiative, professionalism, intellectual curiosity, and a commitment to continuous learning and maintaining awareness of industry trends, emerging risks, regulatory requirements, and evolving risk management practices. As a Bank of Hawaii employee, you ensure (or assist with ensuring) compliance with applicable laws, regulations, regulatory requirements and Bank policies and procedures, including but not limited to those related to Fair Banking, Anti-Money Laundering laws and regulations, Bank Secrecy Act and

USA PATRIOT

Act. Delivering exceptional customer experiences is at the heart of what we do at Bank of Hawaii. We listen, understand and deliver what our customers need to help them build a better tomorrow. We are an EEO/AA employer, including disability and veterans. For Bank of Hawaii's full EEO statement, please visit https://www.boh.com/careers.

Risk Assessment and Control Management:

Manages the execution and ongoing enhancement of risk and control self-assessment (RCSA) activities, including risk identification, control evaluations, business process mapping, and inherent and residual risk assessments. Ensures alignment with enterprise risk management frameworks, standards, and guidance while promoting effective risk and control practices across the business unit.

Risk Evaluation and Change Management:

Oversees and facilitates risk assessments for new initiatives, services, technologies, process changes, and strategic projects. Partners with stakeholders to identify risks, evaluate controls, develop mitigation strategies, and perform post-implementation reviews, as appropriate, to validate effectiveness.

Issue Management and Risk Mitigation:

Manages tracking, escalation, and remediation of regulatory, audit, risk management, and self-identified issues. Partners with stakeholders to perform root cause analyses, develop sustainable corrective action plans, monitor remediation progress, and validate issue resolution activities.

Risk Monitoring and Reporting:

Develops and maintains key risk indicators (KRIs), early warning indicators (EWIs), and other risk metrics used to monitor the business risk profile. Prepares and delivers risk reporting, analysis, and insights regarding risk exposures, emerging risks, and remediation activities to support management decision-making and governance oversight.

Risk Governance and Continuous Improvement:

Drives enhancements to risk management processes, reporting capabilities, data quality, and technology utilization. Supports implementation of enterprise risk initiatives and serves as a resource to business partners on regulatory developments, emerging risks, and leading risk management practices. Performs other responsibilities and duties as assigned.