Risk Management Specialist

About Hanscom Federal Credit Union

Hanscom Federal Credit Union is a dynamic organization committed to delivering exceptional service to our members. We are a team of dedicated individuals who are passionate about our work and strive to make a positive impact in the lives of our members.

Job Summary

We are seeking a highly skilled Risk Analyst to join our Risk Department. The successful candidate will be responsible for executing risk management processes, identifying and maintaining risk assessments, and developing and executing risk management reporting for management.

Key Responsibilities

• Execute risk management processes to identify and maintain risk assessments that cover the credit union's operations.
• Identify new and changing risk assessments, document objectives, risk profiles, risks, controls, control effectiveness measures, and mitigation plans.
• Assist the Risk Manager with performing risk assessments with business units.
• Responsible for performing vendor inherent risk assessments, including new on-boarding and periodic due diligence.
• Monitor the risk metrics process, report performance against risk tolerances, and ensure results are reported and delivered for the Risk Management Committee and the Board meetings as required.
• Document, monitor, analyze, and report on all risk assessment recommendations through resolution.
• Develop and execute risk management reporting for management as needed.
• Assist management in the execution of enterprise-wide risk assessments, including strategic, IT, compliance, and project-based risk.
• Assist in the development and documentation of risk mitigation and monitoring activities.
• Responsible for performing the business impact assessment process across the credit union, including impact scoring, risk assessment, dependencies, contingency procedures, and call lists.
• Document, monitor, analyze, and report on all Business Continuity issues and recommendations through resolution.
• Responsible for maintaining the off-site repository of key business continuity documentation.
• Assist in the development and implementation of enterprise-wide business continuity planning efforts.
• Assist management in facilitating and documenting Business Continuity program documentation, training, and testing exercises.
• Monitor credit union business continuity events, analyze impact, and document resolution and required mitigation activities.
• Responsible for facilitating the incident assessment and triage process to review, analyze, and document security and data privacy incidents to ensure compliance with state and federal requirements.
• Document, monitor, analyze, and report on all incident response issues and recommendations through resolution.
• Create and maintain reporting for the Risk Management Committee.
• Assist in the development and implementation of enterprise-wide incident response planning efforts.
• Assist management in facilitating and documenting incident response program documentation, training, and testing exercises.
• Facilitate the identified Vendor Management workflows and processes, ensuring compliance with internal policies, procedures, and regulatory requirements.
• Monitor the vendor pipeline to ensure quality and SLA maintenance.
• Perform assigned due diligence activities, including reviewing due diligence documentation, performing preliminary and final reviews, and escalating exceptions.
• Coordinate and lead vendor on-boarding and review meetings with vendor owners and professional reviewers to document internal controls related to vendor services.
• Create draft reports for the Risk Management Committee and maintain applicable dashboards.
• Administer the Enterprise Risk Management platform in support of all Risk functions, including system workflow configuration, testing, reporting, risk analysis, and training.
• Analyze and document the credit union's library of controls to support the risk assessment process.
• Develop reporting and analysis as needed.
• Assist management with internal, external audits, and regulatory examinations.
• Stay current on risk management, business continuity, incident response, and vendor management industry developments and trends, including attending industry training.
• Responsible for effective communication with stakeholders at all levels of the organization.
• Partner with department counterparts and other stakeholders to assess risk and improve Risk Management processes.
• Assist in monitoring and providing content for the related communication channels for the Executive Team and Risk Management Committee.
• Perform such other tasks as requested or required from time to time.

Requirements

• 5 to 10 years of experience in a risk management, business continuity, and/or incident response role within a financial institution.
• A Bachelor's degree.
• Experience configuring and managing ERM platforms preferred.
• Professional certification in a risk management discipline preferred (NCRM, CUERMA, CRMA, RIMS-CRMP, CERA, CFCP, ABCP).
• Strong interpersonal skills to facilitate relationship building with operational counterparts and leadership.
• Demonstrated ability to provide analytical assessment of complex data and produce actionable results.

Physical Demands/Conditions Required

• Is able to bend, sit, and stand in order to perform primarily sedentary work with limited physical exertion and occasional lifting of up to 20 lbs.
• Must be capable of climbing/descending stairs in an emergency situation.
• Must be able to routinely perform work on a computer for an average of 6-8 hours per day, when necessary.
• Must be able to work extended hours or travel off-site whenever required or requested by management.
• Must be capable of regular, reliable, and timely attendance.
• Must be able to routinely perform work indoors in a climate-controlled shared work area with minimal noise.

Equipment Used

• Must be able to operate routine office equipment, including computer terminals and keyboards, telephones, copiers, facsimiles, and calculators.

Mental and/or Emotional Requirements

Must be able to perform job functions independently or with limited supervision and work effectively either on one's own or as part of a team. Must be able to read and carry out various written instructions and follow oral instructions. Must be able to complete basic mathematical calculations, spell accurately, and understand computer basics. Must be able to speak clearly and deliver information in a logical and understandable sequence. Must be capable of dealing calmly and professionally with numerous different personalities from diverse cultures at various levels within and outside of the organization and demonstrate the highest levels of customer service and discretion when dealing with the public. Must be able to perform responsibilities with composure under the stress of deadlines/requirements for extreme accuracy and quality and/or fast pace. Must be able to effectively handle multiple, simultaneous, and changing priorities. Must be capable of exercising the highest level of discretion on both internal and external confidential matters.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities

The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information. 41 CFR c)

---