POSITION TITLE: Risk Management Analyst
DEPARTMENT: Risk
REPORTS TO: VP, Risk
SUPERVISES: No
CLASSIFICATION: Exempt
DATE REVISED: August 2025
SUMMARY:
The Risk Management Analyst is a key member of the risk management team and is responsible for conducting risk identification, measurement, mitigation, monitoring, and reporting activities in accordance with the enterprise strategy and risk appetite of Corporate America Credit Union. This spans all individual risk categories and third party relationships. The Risk Management Analyst is also responsible for supporting the outsourced internal audit function and performing duties as a backup to the Information Security Director.
ESSENTIAL DUTIES AND RESPONSIBILITIES: (including the following and others as assigned)
- Implement, document, coordinate, review, and maintain CACU’s risk-based due diligence processes for all third parties.
- Facilitate completion of periodic due diligence questionnaires by third parties.
- Facilitate completion of periodic third party due diligence reviews by relationship owners within the organization.
- Develop and maintain reports and dashboards for oversight and analysis of third party risk management assessment results and processes.
- Develop robust risk assessments and control enhancement activities for various activities, processes, products, and functions at the Corporate.
- Monitor and report risk mitigation plans associated with the ERM process and risk management processes in individual risk categories.
- Track key risk indicators and key performance indicators across the organization.
- Develop and manage reporting to effectively communicate key risks, findings, and recommendations for improvement and discuss with key stakeholders.
- Evaluate the design and operation of internal controls by periodically testing key controls performed by business units.
- Remain current on trends and current events affecting the industry including economic developments to identify new risks.
- Administratively support the fully outsourced internal audit function by following up on action plans with management and obtaining evidence to close those action plans.
- Provide periodic reports to the Supervisory Committee regarding audit findings and remediation efforts.
- Backup to the Information Security Director (review vulnerability scans, monitor vendors for zero-day exploits, review reported phishing emails, administer information security training, etc.) and other information security duties as assigned.
- Perform other duties as assigned.
QUALIFICATIONS:
- Bachelor’s Degree in Accounting, Business Administration, or related field.
- Understanding of risk management functions, including IT and audit, cyber security, and compliance.
- Experience identifying and defining risks in a financial institution.
- Knowledge of third party/vendor management lifecycle.
- Ability to research and analyze data.
- Ability to use logic and reasoning to identify the strengths and weaknesses of alternative solutions, conclusions, or approaches to problems.
- Ability to gain a thorough understanding of all aspects of operations.
- Excellent interpersonal, written, and verbal communication skills.
- Proficiency in Microsoft Office (Excel, Word, Outlook, etc.)
- Experience with Archer software is a plus.
- Must be detail oriented and self-motivated.
- Ability to perform multiple tasks and prioritize accordingly.
- Ability to work independently, meet deadlines and maintain a high level of confidentiality.
- Ability to effectively interface with all levels, internal and external.
DEPARTMENT AND/OR JOB SPECIFIC COMPLIANCE REQUIREMENTS:
- Adhere to Corporate, departmental, and governmental policies and regulations, laws, and policies.
- Adhere to the ERM framework designated by the Corporate, the Committee of Sponsoring Organizations (COSO) ERM framework.
PHYSICAL DEMANDS AND WORK ENVIRONMENT:
- This position is performed in an office setting.
- The work environment and physical demands of this position are representative of similar jobs in comparable companies.