Enterprise Risk Analyst

BluPeak Federal Credit Union•San Diego, CA

3d•$75,000 - $85,000

About The Position

The Enterprise Risk Analyst supports BluPeak Federal Credit Union’s enterprise-wide risk management programs, including risk governance, due diligence, control monitoring, issue management, contract oversight, and ongoing risk assessment across key business relationships. The role develops metrics using multiple data sources and internal systems to measure third-party risk exposure, performance, costs, and return on investment, helping leadership make informed decisions. Working with management, the Analyst designs, maintains, and enhances the third-party risk management framework, policies, and processes to align with regulatory expectations, business needs, and enterprise risk appetite. The position recommends risk tiering, assessment and performance methodologies, and minimum control standards, and supports consistent application of requirements during vendor onboarding and ongoing oversight. It also coordinates, administers, and optimizes GRC tools and data, and prepares governance reports and presentations for senior management and committees. The Analyst leads management-directed continuous improvement efforts, including process redesign, automation, and training. The role evaluates metrics to help ensure third-party relationships remain secure, compliant with regulatory requirements and service level agreements, and aligned with strategic objectives. It also supports administration of AI-related tools and automation initiatives that improve program efficiency, consistency, and reporting accuracy.

Requirements

Bachelor’s degree or equivalent work experience.
Three or more years of related experience in Compliance, Risk Management, Legal, or a related field.
Enterprise Risk Management or Third-Party Risk Management experience in procurement, contract management, and/or vendor management.
Strong computer skills and willingness to learn GRC-specific software.
Strong reporting and analytical skills.
Advanced experience with Microsoft Office, including Excel, Word, PowerPoint, and Access.
Effective written and verbal communication, analytical, and interpersonal skills.
Strong problem-solving and critical-thinking skills.
Professional, service-focused communication etiquette.
Organization, efficiency, and ability to prioritize work and meet deadlines.
Ability to manage and administer processes with appropriate direction from management.
Attention to detail and ability to produce accurate, precise results.
Ability to work effectively with all levels of management and staff.
Exceptional written and verbal communication skills to convey information across all organizational levels.
Ability to prepare professional reports, business correspondence, policies, and procedures.
Ability to read, analyze, and interpret governmental regulations and governance requirements and prepare clear written materials based on findings.
Ability to facilitate discussions and present complex information clearly to leadership, staff, members, and external stakeholders.
Sound judgment and critical thinking to evaluate situations, identify options, and determine effective courses of action.
Ability to identify risks and opportunities, anticipate complications, and make timely, informed decisions.
Strong understanding of how products and services align with member and organizational needs, and ability to address concerns and gain commitment through communication.
Ability to use Microsoft Office applications and general knowledge of network and database use and concepts.
Strong interpersonal skills, professional phone and email etiquette, professional presentation, and personal initiative.
Ability to motivate and influence others, maintain trust and diplomacy, and foster internal and external business relationships.
Ability to manage multiple projects and competing priorities, remain dependable, and meet deadlines.
Must have or be willing to obtain job-related certifications.
Able to work in the office as necessary during regular business hours, with occasional nights or weekends as needed to meet department deadlines.

Nice To Haves

Experience in a financial institution.
Experience with SQL Server and Power BI.

Responsibilities

Manage assigned areas with independent judgment and effective problem-solving.
Administer the GRC platform, including access control, configuration management, workflow maintenance, and issue resolution.
Analyze GRC system data integrity and ensure records align with policy, legal, and regulatory requirements.
Troubleshoot system and data issues, identify root causes, and implement improvements to reliability and efficiency.
Use automation tools and AI-enabled features to improve data processing, reporting accuracy, workflow efficiency, and operational scale.
Respond to ad hoc analytics, reporting, and operational requests using system data and reporting tools.
Develop and deliver training materials, job aids, and documentation for the GRC platform and related tools.
Train and support end users on system functionality, workflows, reporting, data quality expectations, and appropriate system use.
Promote adoption of automation and AI-enabled features through guidance, best practices, and enablement sessions.
Provide operational support to adjacent risk programs and initiatives, and assist with ad hoc projects and strategic goals in the wider risk organization.
Analyze vendor spend data from multiple internal sources and enterprise systems to identify cost trends, savings opportunities, and outlier activity.
Collaborate with business units to develop, validate, and track pre-engagement business cases, including estimated savings, cost avoidance, and post-engagement performance.
Monitor vendor performance using KPI- and metric-based reporting to identify trends, exceptions, and emerging risk indicators.
Facilitate recurring vendor performance reviews to verify adherence to contractual commitments, service level agreements, and operational expectations.
Track contract lifecycle details, including remaining term, renewal timelines, financial exposure, and optimization opportunities.
Oversee vendor risk workflows, including onboarding, due diligence, risk assessments, ongoing monitoring, and offboarding.
Maintain third-party risk reporting dashboards and prepare materials for Vendor Oversight Committee governance forums.
Partner with Information Security to validate timely and accurate review of SOC reports and related control evidence.
Analyze vendor pricing proposals, RFP responses, and replacement scenarios by benchmarking current pricing and evaluating comparative vendor options.
Support regulatory examinations and enterprise risk initiatives by collecting, validating, and delivering documentation and reporting.
Support other Regulatory Enterprise Risk functions as requested by management.
Participate in initiatives and recommend opportunities to improve efficiency, effectiveness, or risk reduction.
Contribute to governance practices aligned with risk and compliance frameworks.
Follow company policies and procedures, complete annual compliance training, and comply with business continuity and vendor management policies.
Comply with anti-money-laundering laws and related policies, including the Bank Secrecy Act, OFAC, and USA PATRIOT Act; perform accurate identification and due diligence, process OFAC matches accurately, and report unusual activity and suspected fraud.