Third-Party and Business Resiliency Analyst

First Internet Bank•Fishers, IN

1d•Onsite

About The Position

The Third-Party and Business Resiliency Analyst supports administration of the Bank’s Third-Party Risk Management (TPRM) Program and helps maintain compliance with regulatory expectations. The role also supports the Bank’s Business Resiliency Program, helping business units prepare for, withstand, respond to, and recover from operational disruptions. The analyst works with business units, technology, and risk functions to assess risk, maintain resiliency plans, conduct testing, and support real-time incident response. The role supports development and maintenance of Business Continuity, Disaster Recovery, and Operational Resiliency plans; conducts Business Impact Analyses; coordinates exercises and testing; supports incident and crisis response; maintains procedures, plans, policies, and training materials; monitors program metrics; and facilitates remediation of continuity and resiliency issues. It also supports third-party resilience oversight through due diligence, joint testing, and monitoring. For third-party risk, the analyst coordinates vendor oversight, risk analysis, issue management, due diligence, lifecycle assessments, contract reviews, documentation, reporting, and program improvement. The role involves collaboration with internal stakeholders and vendors, maintaining TPRM records and systems, and supporting audits, examinations, regulatory readiness, annual program assessments, and risk and control self-assessments. Other duties may be assigned.

Requirements

At least two years of experience in TPRM, business continuity, operational risk, resiliency, or incident management.
Strong data analytical skills using Microsoft Excel.
Strong presentation skills using PowerPoint.
Excellent verbal and written communication skills.
Ability to make sound decisions using analysis, experience, and judgment.
Ability to prioritize and manage multiple tasks effectively while maintaining high-quality work.
Ability to perform the essential functions of the position with or without reasonable accommodation.
The position is primarily sedentary, involving long periods working at a computer, and requires moving throughout the office and buildings to obtain or relay information.

Nice To Haves

Bachelor’s degree in business administration, risk management, or a similar field of study.
Experience with Banking-as-a-Service or fintech partnerships.
Experience coordinating and participating in business recovery exercises.
Familiarity with U.S. banking regulatory expectations, including OCC, Federal Reserve, and FDIC concepts.
Knowledge of SOC and SSAE 18 reports, contract language and terms, data security, disaster recovery, and insurance.

Responsibilities

Support development, maintenance, implementation, and testing of Business Continuity, Disaster Recovery, and Operational Resiliency plans.
Conduct Business Impact Analyses to identify critical processes, assess disruption impacts, establish Recovery Time Objectives, and facilitate remediation of identified gaps.
Coordinate and support resiliency testing, including tabletop exercises, crisis simulations, scenario analyses, and after-action reviews.
Participate in incident and crisis management activities, including response coordination, impact assessment, recovery tracking, and stakeholder communications.
Partner with Technology, Information Security, Facilities, Risk Management, and business units to strengthen resilience capabilities and recovery strategies.
Maintain Standard Operating Procedures, recovery plans, policies, training materials, and awareness communications, and support policy updates.
Monitor and report Key Risk Indicators, Key Performance Indicators, program metrics, dashboards, and management reports.
Track and facilitate timely remediation of continuity and resiliency issues in alignment with policy, regulatory expectations, and the enterprise risk framework.
Support third-party resilience oversight through due diligence reviews, joint testing, and monitoring compliance with business continuity and resiliency requirements.
Contribute to continuous improvement of the Business Continuity and Operational Resiliency Program by evaluating emerging risks, regulatory developments, industry practices, and enabling technologies.
Support administration of the TPRM Program through vendor oversight, risk analysis, issue management, and reporting.
Coordinate third-party risk activities with Information Security, Business Continuity, Compliance, Legal, BSA/AML, Credit, Accounts Payable, and business units.
Conduct risk-based due diligence reviews and assessments for new, existing, and Banking-as-a-Service third-party relationships.
Assess third-party relationships throughout onboarding, ongoing monitoring, contract renewals, and offboarding.
Collect, review, and analyze due diligence documentation covering vendor financial condition, operational resilience, information security, compliance, and overall risk exposure.
Coordinate contract reviews and risk mitigation activities with vendors, business units, and subject matter experts.
Identify, document, escalate, and track third-party risk issues, findings, and operational events through resolution.
Maintain accurate TPRM systems, databases, risk assessments, vendor inventories, and supporting documentation.
Prepare TPRM metrics, Key Risk Indicators, dashboards, and management reports for senior leadership, committees, and the Board.
Support TPRM policy and procedure maintenance, annual program assessments, regulatory readiness, audits, examinations, and risk and control self-assessments.
Perform other duties as assigned.

Benefits

Medical, dental, and vision insurance for full-time employees, with eligibility beginning on the first day of employment.
401(k) retirement plan with a generous match for full-time and part-time employees, with eligibility beginning on the first day of employment.
Professional development reimbursement.
At least three weeks of paid vacation annually; new employees’ paid vacation is adjusted based on start date.
Eleven paid holidays.
Paid volunteer time.
Annual First Internet Bank-branded merchandise allowance.
Unlimited volunteer time off.
Continuous education opportunities for development.
Onsite fitness center.
Free snacks and soft drinks.
Beer on tap.
Regular team events.