Risk Management Analyst

Centris Federal Credit Union•Omaha, NE

1d•Hybrid

About The Position

The Risk Management Analyst provides independent risk oversight and manages the day-to-day administration and continuous improvement of Centris’s Third-Party Risk Management and Business Continuity Management programs. The role identifies, assesses, monitors, and reports risk; provides challenge and guidance to business owners and management; and supports mitigation and escalation to help protect credit union assets, strengthen operational resilience, and maintain compliance with applicable requirements and Centris’s risk appetite. The position collaborates with business units, management, third parties, auditors, regulators, and other stakeholders to identify, assess, monitor, and mitigate risk and maintain audit and examination readiness. It also administers the corporate insurance program, including renewals, coverage analysis, claims, insurer communications, recordkeeping, and evaluation of coverage needs.

Requirements

Bachelor’s degree in Business Administration, Finance, Risk Management, Accounting, Economics, Law, or a related field and/or related work experience.
Minimum of 3–5 years of experience in risk management, third-party/vendor risk, business continuity, audit, regulatory compliance, or a related field.
Experience in business continuity management, including BIA, RTO/RPO testing, and resiliency strategies.
Strong analytical, critical-thinking, and risk-assessment skills.
Ability to analyze contracts, audit reports, regulatory guidance, financial information, and technical documentation.
Proficiency with Microsoft Office applications, including Excel, Word, PowerPoint, and Outlook.
Ability to work effectively independently and collaboratively.
Strong written, verbal, and interpersonal communication skills, including the ability to communicate risks and recommendations clearly to business owners and management.
Strong organizational skills and ability to manage multiple priorities and deadlines.
Ability to exercise sound judgment, make recommendations, and escalate issues with limited direction.
Must be knowledgeable in BSA and compliance requirements applicable to the credit union under state and federal law.
Must be bondable.
Must report to work regularly and on time and work the hours necessary to fulfill the responsibilities of the position.

Nice To Haves

Risk management, third-party/vendor risk, business continuity, audit, or regulatory compliance experience within a financial institution.
Experience managing or administering a risk management program, including process and procedure development, risk assessment, monitoring, and issue remediation.
Experience reviewing financial statements, SOC reports, contracts, insurance documentation, and risk assessments.
Knowledge of NCUA, FFIEC, and applicable regulatory requirements related to third-party risk, business continuity, operational resilience, and financial institution risk management.
Experience with Onspring software.

Responsibilities

Promote and model Centris’s Vision, Mission, Values, and Team Principles, and deliver service in accordance with the Centris Service Promises.
Build and maintain collaborative relationships with business units, management, third parties, auditors, regulators, and other stakeholders.
Administer and enhance the Third-Party Risk Management Program in alignment with Centris’s risk appetite, policies, and regulatory expectations.
Guide management and business owners on third-party governance, risk assessment, due diligence, monitoring, mitigation, and lifecycle management.
Coordinate third-party onboarding, assessment, due diligence, monitoring, renewal, and offboarding.
Ensure third-party relationships are risk rated, documented, approved, monitored, and periodically reassessed using established methodologies.
Request, review, and analyze third-party financial statements, SOC and audit reports, information security assessments, business continuity documentation, insurance, and regulatory or compliance information.
Evaluate third-party risks and control deficiencies and work with business owners and management on mitigation, remediation, risk acceptance, or escalation.
Monitor third-party contracts, renewals, amendments, material changes, and terminations in coordination with relevant stakeholders.
Identify and monitor concentration, critical third-party, subcontractor/fourth-party, and other emerging risks.
Prepare and maintain third-party risk reporting, metrics, dashboards, and management information.
Administer third-party risk management technology, including configuration, data integrity, workflows, reporting, enhancements, and process improvements.
Maintain third-party risk policies, procedures, standards, and supporting documentation, recommending updates as needed.
Support audits, regulatory examinations, and other oversight activities related to third-party risk management.
Administer and continuously improve the Business Continuity Management Program.
Facilitate and coordinate Business Impact Analyses, business continuity risk assessments, recovery strategies, and planning activities.
Work with business owners and Technology Services to identify critical processes, dependencies, recovery requirements, RTOs, RPOs, and recovery strategies.
Coordinate periodic review and maintenance of business continuity plans and related documentation.
Plan, facilitate, document, and coordinate continuity exercises, tabletop exercises, and other testing.
Support business continuity activities during significant operational disruptions.
Maintain business continuity systems, program documentation, reporting, and organizational awareness materials.
Report periodically to management on continuity program status, testing results, significant risks, corrective actions, and areas requiring attention.
Support audits, regulatory examinations, and other oversight activities related to business continuity and operational resilience.
Manage the corporate insurance program, including policy renewals, coverage analysis, claims administration, and insurer communications.
Maintain insurance records and assist in evaluating organizational insurance needs and coverage requirements.
Work regularly and on time, for the hours necessary to fulfill the position’s responsibilities.