The Enterprise Risk Analyst plays a significant role in supporting BluPeak Federal Credit Union’s enterprise-wide risk management programs, including risk governance, due diligence, control monitoring, issue management, contract oversight, and ongoing risk assessment across key business relationships. A key responsibility is to develop advanced metrics that measure third party risk exposure, performance, and return on investment using multiple data sources and internal systems, improving visibility into business value and associated costs and enabling leadership to make informed decisions.

This position works with management to design, maintain, and enhance the overall third-party risk management framework, policies, and processes to align with regulatory expectations, business needs and enterprise risk appetite. They recommend risk tiering, assessment and performance methodologies, and minimum control standards, and ensure business units consistently follow these requirements during vendor onboarding and ongoing oversight.
The Analyst coordinates, administers and optimizes the GRC (Governance, Risk & Compliance) tools and data, and produces governance reports and presentations for senior management and governance committees. They lead continuous improvement initiatives as directed by management - such as process redesign, automation, and training—to strengthen the institution’s risk posture.

The role evaluates key metrics to help ensure third-party relationships remain secure, compliant with regulatory requirements and service level agreements, and aligned with the credit union’s strategic objectives. The role also includes administration and support of AI-related tools and automation initiatives designed to improve efficiency, consistency, and reporting accuracy within the program.

This role will manage all areas with independent judgement and effective problem-solving skills.

System Management
• Serve as system administrator for the GRC platform, including access control, configuration management, workflow maintenance, and issue resolution.
• Analyze system data integrity and ensure records align with policy, legal, and regulatory requirements.
• Troubleshoot system and data issues, identify root causes, and implement process improvements to increase reliability and efficiency.
• Leverage automation tools and AI-enabled features to improve data processing, reporting accuracy, workflow efficiency, and operational scale.
• Assist with ad hoc analytics, reporting, and operational requests using system data and reporting tools.

End User Training and Enablement
• Develop and deliver training materials, job aids, and documentation to support user adoption of the GRC platform and related tools.
• Train and support end users on system functionality, workflows, reporting, data quality expectations, and proper system usage.
• Promote adoption of automation and AI-enabled features by providing guidance, best practices, and enablement sessions.

Risk Programs Support
• Provide operational support to adjacent risk programs and initiatives as needed to ensure comprehensive coverage.
• Serve as a flexible resource to assist with ad-hoc projects and strategic goals within the wider risk organization.
• Other duties as assigned.

Third Party Management
• Perform advanced analysis of vendor spend data using multiple internal data sources and enterprise systems to identify cost trends, savings opportunities, and outlier activity.
• Collaborate with business units to develop, validate, and track pre-engagement business cases, including estimated savings, cost avoidance, and post-engagement performance.
• Monitor vendor performance using KPI- and metric-based reporting to identify trends, exceptions, and emerging risk indicators.
• Facilitate recurring vendor performance reviews to verify adherence to contractual commitments, service level agreements, and operational expectations.
• Manage contract lifecycle tracking, including term remaining, renewal timelines, financial exposure, and optimization opportunities.
• Oversee vendor risk workflows, including onboarding, due diligence, risk assessments, ongoing monitoring, and offboarding.
• Maintain third-party risk reporting dashboards and prepare materials for Vendor Oversight Committee governance forums.
• Partner with Information Security to validate timely and accurate review of SOC reports and related control evidence.
• Assist with analysis of vendor pricing proposals, RFP responses, and replacement scenarios by benchmarking current pricing and evaluating comparative vendor options.
• Support regulatory examinations and enterprise risk initiatives by collecting, validating, and delivering required documentation and reporting.
• Support other Regulatory Enterprise Risk functions as requested by management.

Operational Effectiveness & Compliance
• Participate in initiatives and recommend opportunities for improved efficiency, effectiveness and/or risk reduction.
• Contribute to the enhancement of governance practices in alignment with risk and compliance frameworks.
• Adhere to company policy and procedure, complete annual compliance training, comply with business continuity and vendor management policy. These are crucial to the success of the organization and have regulatory compliance and/or safety and soundness for the sustainability of the credit union.
• Comply with all Anti Money Laundering laws such as the Bank Secrecy Act, OFAC and USA PATRIOT Act and all related policies and procedures including accurate Member/Customer Identification Program, member due diligence, accurate OFAC match processing, and reporting unusual activities and suspected fraud.

WORK ENVIRONMENT / CULTURE
Embodies and advances BluPeak's culture by fostering an environment rooted in accountability, high performance, and genuine connection to the organization's purpose and vision. Champions a workplace where professionalism and authenticity coexist, where employees feel empowered to show up fully, contribute meaningfully, find meaning in their work, celebrate wins and enjoy the journey alongside their team.

*Please note that salary is commensurate with experience and may vary based on individual qualifications, role responsibilities, and position requirements.

Education / Experience
• Bachelor's degree or equivalent work experience
• Three (3) or more years of related experience in Compliance, Risk Management, Legal or related field is required. Experience in a financial institution is preferred.
• Enterprise Risk Management or Third-Party Risk Management experience working in procurement, contract management and/or vendor management is required.
• Strong computer skills and willingness to learn GRC specific software programs
• Strong reporting and analytical skills
• Advanced experience in MS Office (Excel, Word, Powerpoint, Access)
• Preferred experience in SQL Server and Power BI
• Effective written and verbal communications, analytical, and interpersonal skills
• Strong problem solving and critical thinking skills
• Professional and service focused communication etiquette
• Organized, efficient, and able to prioritize work to meet deadlines
• Manage and administer processes with appropriate direction from management
• Detail oriented to generate accurate and precise results
• Ability to work effectively with all levels of management and staff

Supervisory Responsibilities
This job does not supervise other staff but will act in a lead capacity for various projects, initiatives, processes and situations.

Communication Skills
• Exceptional written and verbal communication skills with the ability to effectively convey information across all levels of the organization.
• Proficient in preparing professional reports, business correspondence, policies, and procedures.
• Read, analyze, and interpret governmental regulations and governance requirements, and prepare clear reports, business correspondence, and procedure manuals based on those findings.
• Skilled in facilitating discussions and presenting complex information clearly to leadership, staff, members, and external stakeholders.

Analytical & Reasoning Ability
• Apply sound judgment and critical thinking to evaluate situations, identify options, and determine effective courses of action.
• Skilled in identifying risks and opportunities, anticipating complications, and making timely, informed decisions.
• Strong understanding of how products and services align with member and organizational needs; able to address concerns and gain commitment through effective communication.

Technology Proficiency
To perform this job, the employee must possess applicable technology skills and demonstrated expertise. Ability to use Word for Windows, Excel, Power Point and other Microsoft Office applications; requires general knowledge of network and database use. Ability to quickly learn and adapt to new systems and technologies, general understanding of network and database concepts. Experience with SQL Server and Power BI is preferred.

Certificates, Licenses, Registrations
Must have or be willing to obtain job related certifications.

Other Qualifications
To perform this job, the employee must possess strong interpersonal skills, good phone and e-mail etiquette, a professional presentation, and a high degree of personal initiative. Interpersonal skills include, but not limited to, motivating and influencing others, maintaining a significant level of trust and diplomacy, fostering internal and external business relationships.

Must be organized, self-disciplined and detail-oriented with the ability to manage and juggle multiple projects. Persistent and dependable, especially in meeting deadlines; able to manage multiple competing priorities. This position may request occasional scheduling flexibility or overtime. This position requires the employee to work in office as necessary as well as during regular business hours and occasional nights or weekends as needed to meet established department deadlines.

BluPeak Federal Credit Union is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex including sexual orientation and gender identity, national origin, disability, protected Veteran Status, or any other characteristic protected by applicable federal, state, or local law. Employment may be contingent upon BluPeak Credit Union’s receipt of an acceptable and job-related background check, drug screen and credit check, as applicable and permissible by law. BluPeak Credit Union is committed to working and providing reasonable accommodation to applicants with physical, mental disabilities and sincerely held religious beliefs. For more information, contact Human Resources.