Risk Management Analyst

Job Description

Job Description

SUMMARY

The Risk Management Analyst is a key member of the risk management team and is responsible for conducting risk identification, measurement, mitigation, monitoring, and reporting activities in accordance with the enterprise strategy and risk appetite of our business. This spans all individual risk categories and third-party relationships. The Risk Management Analyst is also responsible for supporting the outsourced internal audit function and performing duties as a backup to the Information Security Director.

RESPONSIBILITIES

• Implement, document, coordinate, review, and maintain CACU's risk-based due diligence processes for all third parties.
• Facilitate completion of periodic due diligence questionnaires by third parties.
• Facilitate completion of periodic third-party due diligence reviews by relationship owners within the organization.
• Develop and maintain reports and dashboards for oversight and analysis of third-party risk management assessment results and processes.
• Develop robust risk assessments and control enhancement activities for various activities, processes, products, and functions at the Corporate.
• Monitor and report risk mitigation plans associated with the ERM process and risk management processes in individual risk categories.
• Track key risk indicators and key performance indicators across the organization.
• Develop and manage reporting to effectively communicate key risks, findings, and recommendations for improvement and discuss with key stakeholders.
• Evaluate the design and operation of internal controls by periodically testing key controls performed by business units.
• Remain current on trends and current events affecting the industry including economic developments to identify new risks.
• Administratively support the fully outsourced internal audit function by following up on action plans with management and obtaining evidence to close those action plans.
• Provide periodic reports to the Supervisory Committee regarding audit findings and remediation efforts.
• Backup to the Information Security Director (review vulnerability scans, monitor vendors for zero-day exploits, review reported phishing emails, administer information security training, etc.) and other information security duties as assigned.

REQUIREMENTS

DEPARTMENT AND / OR JOB SPECIFIC COMPLIANCE REQUIREMENTS

SCHEDULE

Mondays and Tuesdays in-office, Wednesday, Thursday and Friday you can work in the office or from home.