Risk Management Analyst

Centris FCU•Omaha, NE

12h•Hybrid

About The Position

The Risk Management Analyst provides independent risk oversight and manages the day-to-day administration and continuous improvement of Centris’s Third-Party Risk Management and Business Continuity Management programs. The position identifies, assesses, monitors, and reports risk; provides effective challenge and guidance to business owners and management; and supports risk mitigation and escalation. It helps protect credit union assets, strengthen operational resilience, and maintain compliance with applicable regulatory requirements and Centris’s risk appetite. The role works collaboratively with business units, management, third parties, auditors, regulators, and other stakeholders to mitigate risk and maintain audit and examination readiness. The position administers the third-party risk lifecycle, including onboarding, risk assessment, due diligence, monitoring, renewal, and offboarding. It reviews third-party documentation, evaluates risks and control deficiencies, supports mitigation and escalation, monitors contract changes and emerging third-party risks, and maintains program technology, governance documentation, metrics, and reporting. It also supports audit and regulatory oversight activities. The position administers and improves the Business Continuity Management Program, coordinating business impact analyses, risk assessments, recovery strategies, continuity plans, exercises, testing, and reporting. It works with business owners and Technology Services to identify critical processes, dependencies, recovery requirements, RTOs, and RPOs, and supports continuity activities during significant operational disruptions. In addition, the role manages the corporate insurance program, including renewals, coverage analysis, claims, insurer communications, and insurance records.

Requirements

Bachelor’s degree in Business Administration, Finance, Risk Management, Accounting, Economics, Law, or a related field, and/or related work experience.
Minimum of 3–5 years of experience in risk management, third-party/vendor risk, business continuity, audit, regulatory compliance, or a related field; preferably within a financial institution.
Experience in business continuity management, including BIA, RTO/RPO testing, and resiliency strategies.
Strong analytical, critical-thinking, and risk-assessment skills.
Ability to analyze contracts, audit reports, regulatory guidance, financial information, and technical documentation.
Proficiency with Microsoft Office applications, including Excel, Word, PowerPoint, and Outlook.
Ability to work effectively both independently and collaboratively.
Strong written, verbal, and interpersonal communication skills, including the ability to communicate risk and recommendations clearly to business owners and management.
Strong organizational skills and ability to manage multiple priorities and deadlines.
Ability to exercise sound judgment, make recommendations, and escalate issues with limited direction.
Must report to work regularly and on time and work the hours necessary to fulfill the responsibilities of the position.
Must be knowledgeable in BSA and compliance requirements enforced on the credit union by state and federal law, as applicable.
Must be bondable.

Nice To Haves

Experience managing or administering a risk management program, including development of processes, procedures, risk assessments, monitoring, and issue remediation.
Experience reviewing financial statements, SOC reports, contracts, insurance documentation, and risk assessments.
Knowledge of NCUA, FFIEC, and applicable regulatory requirements related to third-party risk, business continuity, operational resilience, and financial institution risk management.
Experience with Onspring software.

Responsibilities

Promote and model Centris’s Vision, Mission, Values, and Team Principles, and deliver service in accordance with the Centris Service Promises.
Build and maintain collaborative relationships with business units, management, third parties, auditors, regulators, and other stakeholders.
Administer and continuously enhance the Third-Party Risk Management Program in alignment with Centris’s risk appetite, policies, and regulatory expectations.
Guide management and business owners on third-party governance, risk assessment, due diligence, monitoring, mitigation, and lifecycle management.
Coordinate third-party onboarding, risk assessment, due diligence, monitoring, renewal, and offboarding.
Ensure third-party relationships are appropriately risk rated, documented, approved, monitored, and periodically reassessed.
Request, review, and analyze third-party financial statements, SOC and audit reports, information security assessments, business continuity documentation, insurance, and regulatory or compliance information.
Evaluate risks and control deficiencies and work with stakeholders on mitigation strategies, remediation plans, risk acceptance, or escalation.
Monitor third-party contracts, renewals, amendments, material changes, and terminations in coordination with business, legal, procurement, and other stakeholders.
Identify and monitor concentration, critical-third-party, subcontractor/fourth-party, and other emerging risks.
Prepare and maintain third-party risk reporting, metrics, dashboards, and management information.
Administer third-party risk management technology, including configuration, data integrity, workflows, reporting, enhancements, and process improvements.
Maintain third-party risk policies, procedures, standards, and documentation, and recommend updates.
Support audit, regulatory examination, and oversight activities relating to third-party risk management.
Administer and continuously improve the Business Continuity Management Program.
Facilitate and coordinate Business Impact Analyses, business continuity risk assessments, recovery strategies, and continuity planning.
Work with business owners and Technology Services to identify critical processes, dependencies, recovery requirements, RTOs, RPOs, and recovery strategies.
Coordinate periodic review and maintenance of business continuity plans and related documentation.
Plan, facilitate, document, and coordinate business continuity exercises, tabletop exercises, and other testing activities.
Support business continuity activities during significant operational disruptions.
Maintain business continuity management systems, program documentation, reporting, and organizational awareness materials.
Report to management on business continuity program status, testing results, significant risks, corrective actions, and matters requiring management attention.
Support audit, regulatory examination, and oversight activities relating to business continuity and operational resilience.
Manage the corporate insurance program, including policy renewals, coverage analysis, claim administration, and insurer communications.
Maintain insurance records and assist in evaluating organizational insurance needs and coverage requirements.
Meet performance expectations for program administration and improvement, timely and accurate assessments and testing, risk escalation, reporting quality, audit readiness, governance, collaboration, and attention to detail.