Operational Risk Associate

PeoplesBank•Holyoke, MA

9h•$31 - $33•Hybrid

About The Position

Reporting to the Senior Operational Risk Analyst, the Operational Risk Associate provides administrative, analytical, and project support for enterprise risk management activities, with a focus on technology risk, third-party risk management, due diligence, monitoring, reporting, and risk management platform maintenance. The Associate supports effective and efficient risk management processes across PeoplesBank and Cornerstone Bank by gathering and organizing risk information, assisting with risk assessments and control-related follow-up, maintaining accurate inventories and documentation, and helping identify potential gaps or emerging areas of risk for escalation to management. This Corporate Services role requires attention to detail, sound judgment, strong communication, and the ability to support risk awareness and regulatory compliance across business units.

Requirements

Bachelor's degree (B. A.) from four-year college or university preferred
One to two years related experience and/or training
Equivalent combination of education and experience
Prior experience in risk management, third-party risk management
Excellent analytical skills
Ability to effectively present information and respond to questions from internal and external customers
Strong written and verbal communication skills
Meticulous and organized
Critical thinking skills with the ability to independently solve problems
Excellent time management and organization
Demonstrated ability to prioritize responsibilities and work products of varying complexity and duration
Ability to collect, organize, validate, and summarize risk-related data and documentation
Ability to identify discrepancies, documentation gaps, or potential control concerns and escalate appropriately
Microsoft Office (Outlook, PowerPoint, Word, Excel); SharePoint
Enterprise-level databases and systems exposure
Database management
Report writing

Nice To Haves

Familiarity with third-party risk, technology, risk, audit, compliance, contract management, or information security concepts is a plus.
Exposure to GRC or risk management technology, such as WolfPac, RSA Archer, MetricStream, or similar platforms, a plus.

Responsibilities

Support third-party due diligence and ongoing monitoring by requesting information, reviewing submissions for completeness, documenting status, and escalating gaps or outstanding items to management.
Collect, organize, and maintain due diligence, monitoring, contract, risk assessment, and supporting documentation for third-party and technology risk management activities.
Assist with review of contracts, agreements, and related onboarding materials by identifying missing information, tracking required approvals, and routing potential risk or compliance concerns to appropriate stakeholders.
Assist with maintaining accurate technology, model, fourth-party, control, and third-party inventory information within SharePoint, Outlook, and the Risk Management System.
Assist with control inventory maintenance, including tracking new controls, changes to existing complementary user entity controls, and related applicability or implementation information in the Risk Management System.
Support risk exception, issue tracking, and follow-up processes by maintaining documentation, monitoring due dates, and helping ensure required information is complete and current.
Assist with documentation and evidence gathering for internal audits, external audits, regulatory exams, model risk activities, and information security-related third-party risk reviews.
Assist with maintaining and improving procedures, templates, onboarding materials, and risk management platform content used by the Risk Oversight department.
Stay informed of operational risk, third-party risk, technology risk, contract management, and regulatory developments relevant to assigned responsibilities, and share observations with management as appropriate.
Support the upkeep of FDICIA control matrices, narratives, and process flows by gathering updates from business units, documenting changes so materials reflect evolving processes, and helping confirm that referenced controls are properly scoped and clearly documented for each business unit's risk exposure.
Organize FDICIA matrices and supporting documentation, tracking updates and follow-up items, and flagging potential control-to-risk alignment or documentation gaps to senior staff so matrices remain complete, accurate, and audit/test-ready.
Support the Bank's Risk Finding Management program by maintaining the risk acceptance log, tracking re-acceptance due dates, and coordinating timely re-acceptance cycles under the direction of senior staff.
Assist with preparing risk acceptance memos and gathering supporting documentation and help route items for proper escalation and approval consistent with existing process and procedure.
Assist with enterprise risk management dashboard data collection, metric input, aggregation, analysis, and reporting to support operational risk oversight and program performance monitoring.
Validate and analyze data inputs, track trends, identify discrepancies or potential control gaps, and communicate or escalate issues when additional review is needed.
Perform administrative and analytical support tasks, including data entry, document updates, email coordination, meeting preparation, report preparation, and tracking of risk-related activities.
Prepare meeting materials and reports, gather information from business units and third parties, and support reassessments, reconciliations, project risk activities, and other program enhancement initiatives.
Coordinate with business units, project teams, vendors, and coworkers to support timely completion of risk management activities and promote positive working relationships.
Other related duties as assigned.