Risk Analyst

It’s an exciting time to be at Hanscom Federal Credit Union! 

As a member of our Risk Department, you will join a dynamic team of purpose-driven individuals committed to delivering exceptional service to our members.

Who we are – Hanscom Federal Credit Union

• Members-first – our members are our top priority. We make business decisions with our members at the top of mind.
• Integrity – we’re honest and committed to doing what’s best for our members and our company. What is right isn’t the same as what is easy.
• Teamwork – we are in this together and we all benefit from our success.
• Innovation – we identify new ideas for processes or products that will lead to positive changes and take the initiative to implement the changes.
• Empathy – we understand that communication starts by listening, understanding diverse perspectives, and caring about others’ sustained success.

What we offer

• A full-time, permanent position that will reward you through an annual bonus program.
• Medical, Dental, Vision, FSA, 401(k), Student Loan Paydown, and paid Sick and Vacation time benefits.
• A flexible hybrid work schedule environment.
• We are committed to fostering career growth and development – when you join our organization it’s not just a job.
• We look to develop your skills aligned to our business needs and help you progress in your career.

Who you are – Risk Analyst   

You are a dynamic, detail oriented, intuitive person with the ability to develop relationships, build rapport and become a trusted team member.  You are able to provide everyone you assist or support with a high level of service, have strong organization and multi-tasking skills, and are searching for a rewarding career where you are valued and respected.

What you'll do

• Execute Risk Management processes to identify and maintain the inventory of risk assessments that cover the credit union’s operations. This includes but is not limited to: identifying new and changing risk assessments; documenting objectives; risk profiles; risks; controls; control effectiveness measures; and mitigation plans. Assist the Risk Manager with performing risk assessments with business units.
• Responsible for performing vendor inherent risk assessments including new on-boarding and periodic due diligence. Monitor the risk metrics process, reports performance against risk tolerances and ensures the results are reported and delivered for the Risk Management Committee and the Board meetings as required.
• Responsible for documenting, monitoring, analyzing and reporting on all risk assessment recommendations through resolution. Develop and execute risk management reporting for management as needed.
• Assist management in the execution of enterprise-wide risk assessments including strategic, IT, compliance and project-based risk. Assist in the development and documentation of risk mitigation and monitoring activities.
• Responsible for performing the business impact assessment process across the credit union including the impact scoring, risk assessment, dependencies, contingency procedures and call lists. Responsible for documenting, monitoring, analyzing and reporting on all Business Continuity issues and recommendations through resolution. Responsible for maintaining the off-site repository of key business continuity documentation.
• Assist in the development and implementation of enterprise-wide business continuity planning efforts. Assists management in facilitating and documenting Business Continuity program documentation, training and testing exercises.
• Monitor credit union business continuity events; analyze impact and document resolution and required mitigation activities.
• Responsible for facilitating the incident assessment and triage process to review, analyze and document security and data privacy incidents to ensure compliance with state and federal requirements. Responsible for documenting, monitoring, analyzing and reporting on all incident response issues and recommendations through resolution. Create and maintain reporting for the Risk Management Committee.
• Assist in the development and implementation of enterprise-wide incident response planning efforts. Assist management in facilitating and documenting incident response program documentation, training and testing exercises.
• Facilitate the identified Vendor Management workflow and process ensuring compliance with internal policies, procedures, as well as regulatory requirements. Monitor the vendor pipeline to ensure quality and SLA maintenance. Perform assigned due diligence activities including but not limited to: reviewing due diligence documentation; performing preliminary and final reviews; and escalating exceptions. Coordinate and lead vendor on-boarding and review meetings with vendor owners and professional reviewers to document internal controls related to vendor services. Creates the draft reports for the Risk Management Committee and maintains applicable dashboards.
• Administer the Enterprise Risk Management platform in support of all Risk functions. This includes but is not limited to: system workflow configuration; testing; reporting; risk analysis; and training.
• Analyze and document the credit union's library of controls to support the risk assessment process; develop reporting and analysis as needed.
• Assist management with internal, external audits and regulatory examinations.
• Stay current on risk management, business continuity, incident response and vendor management industry developments/trends, including attending industry training.
• Responsible for effective communication with stakeholders at all levels of the organization. Partners with department counterparts and other stakeholders to assess risk and improve Risk Management processes. Assist in monitoring and providing content for the related communication channels for the Executive Team and Risk Management Committee.
• Perform such other tasks as requested or required from time to time.

Knowledge/Skills/Experience Required: 

• 5 to 10 years of experience in a risk management, business continuity and/or incident response role within a financial institution.
• A Bachelor’s degree.
• Experience configuring and managing ERMplatforms preferred. 
• Professional certification in a risk management discipline preferred (NCRM, CUERMA, CRMA, RIMS-CRMP, CERA, CFCP, ABCP). 
• Strong interpersonal skills to facilitate relationship building with operational counterparts and leadership.
• Demonstrated ability to provide analytical assessment of complex data and produce actionable results.

PHYSICAL REQUIREMENTS
Is able to bend, sit, and stand in order to perform primarily sedentary work with limited physical exertion and occasional lifting of up to 10 lbs. Must be capable of climbing / descending stairs in an emergency situation. Must be able to operate routine office equipment including computer terminals and keyboards, telephones, copiers, facsimiles, and calculators. Must be able to routinely perform work on computer for an average of 6-8 hours per day, when necessary. Must be able to work extended hours or travel off site whenever required or requested by management. Must be capable of regular, reliable and timely attendance.

WORKING CONDITIONS
Must be able to routinely perform work indoors in climate-controlled shared work area with minimal noise.

MENTAL AND/OR EMOTIONAL REQUIREMENTS
Must be able to perform job functions independently or with limited supervision and work effectively either on own or as part of a team. Must be able to read and carry out various written instructions and follow oral instructions. Must be able to complete basic mathematical calculations, spell accurately, and understand computer basics. Must be able to speak clearly and deliver information in a logical and understandable sequence. Must be capable of dealing calmly and professionally with numerous different personalities from diverse cultures at various levels within and outside of the organization and demonstrate highest levels of customer service and discretion when dealing with the public. Must be able to perform responsibilities with composure under the stress of deadlines / requirements for extreme accuracy and quality and/or fast pace. Must be able to effectively handle multiple, simultaneous, and changing priorities. Must be capable of exercising highest level of discretion on both internal and external confidential matters.

** Must be authorized to work in the US **