Third Party Relationship & Enterprise Risk Manager
hace 1 día
Bakersfield
Job Description Our Core Values The credit union is a values-driven organization. Our Core Values are at the center of everything we do and are the driving force behind our mission: We help people and communities prosper. 1. Everyone Counts - We promote a diverse and fair workplace to better serve our Members, Team Members and Communities, fostering an environment of transparency, trust, and respect., 2. Innovate Boldly – We dream big, challenge the status quo, move with agility, and embrace data-driven decisions. We listen and continuously make the impossible possible., 3. Embrace the Fun! – We take joy in our work by welcoming kindness, integrity, and authenticity., 4. Own It – Valley Strong is ours to grow. We hold ourselves accountable to doing our best work every day and are empowered to do what’s right. Position Summary Department Enterprise Risk and Compliance The Enterprise Risk and Third-Party Risk Manager is responsible for the oversight, administration, and ongoing effectiveness of the Credit Union’s enterprise risk management and third-party risk management programs. This position operates as a second line of defense role within the Enterprise Risk and Compliance department and provides independent risk identification, assessment, monitoring, and reporting across operational, compliance, strategic, and third-party risk areas. This role does not own or administer BSA AML or OFAC programs. The position is responsible for ensuring that relevant regulatory and risk considerations including financial crime, data protection, and privacy requirements are appropriately identified, assessed, documented, and monitored within third party relationships. The role provides objective risk analysis, reporting, and documentation to inform management and governance decision making. The position does not negotiate contracts or manage vendors operationally and maintains independence from first line business activities. Essential Duties • Enterprise Risk Management, • Manage the enterprise risk management framework, including administration, maintenance, and periodic enhancement, • Conduct enterprise-wide risk assessments and maintain the enterprise risk register, • Identify emerging, cross functional, and systemic risks and document mitigation actions and risk ownership, • Develop, maintain, and monitor key risk indicators and escalation thresholds, • Prepare risk summaries, dashboards, and reporting for Senior Management, Supervisory Committee, and Board level review, • Maintain ERM related policies, procedures, methodologies, and supporting documentation, • Coordinate with business units to ensure risks are appropriately identified and assessed while maintaining second line independence, • Third Party and Vendor Risk Management, • Manage the third-party risk management program including onboarding, due diligence, inherent and residual risk assessments, ongoing monitoring, and issue remediation tracking, • Evaluate third parties for financial condition, operational capability, business continuity, information security posture, regulatory considerations, and concentration risk, • Ensure regulatory and risk considerations including financial crime, privacy, and data protection requirements are addressed within third party relationships without assuming program ownership, • Review vendor requests, renewals, and material changes to ensure required documentation is complete and risk assessments are performed, • Monitor vendor performance against contractual requirements, internal standards, and risk expectations, • Track, trend, and report third party risk issues, findings, and remediation status, • Maintain complete, accurate, and audit ready third party files and annual reviews, • Coordinate with Compliance, Information Security, Legal, Internal Audit, and business owners to support effective oversight, • Ensure third party relationships align with Board approved budgets and governance requirements, • Risk, Audit, and Oversight Activities, • Serve as the primary point of coordination for audits, examinations, and internal reviews related to enterprise risk and third-party risk oversight, • Maintain workpapers, documentation, and evidence supporting independent oversight activities, • Analyze data and trends to identify control gaps, risk exposures, and improvement opportunities, • Track and report remediation progress related to risk and third-party findings, • Performs other duties as assigned. Supervisory Responsibilities Supervisory Responsibilities • Leadership and Continuous Improvement, • Independently manage assigned risk programs with minimal supervision and escalate material issues as appropriate, • Identify opportunities to improve the consistency, efficiency, and effectiveness of risk management and oversight processes, • Contribute to risk awareness and risk culture initiatives across the organization, • Perform additional related duties as assigned to meet business, operational, or regulatory needs Qualifications To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Education Min/Preferred Education Level Description Minimum 4 Year / Bachelor's Degree In business, finance, accounting, risk management, or a related field Preferred Graduate Degree Experience Minimum Years of Experience Comments 5 Five to eight years of progressively responsible experience in enterprise risk management, third party risk management, internal audit, compliance, or related areas Experience performing independent risk assessments, oversight activities, or control evaluations Experience working in a regulated or complex operating environment preferred Language Skills Ability to read and comprehend instructions, short correspondence, and memos. Ability to write simple correspondence. Ability to effectively present information in one-on-one and small group situations to Members and other Team Members at the organization. Mathematical Skills Ability to add, subtract, multiply, and divide in all units of measure, using whole numbers, common fractions, and decimals. Ability to compute dividends and interest. Reasoning Ability Ability to solve practical problems and deal with a variety of concrete variables in situations where only limited standardization exists. Ability to interpret a variety of instructions furnished in written or oral form. Physical Demands The physical demands described here are representative of those that must be met by a Team Member to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Other Skills and Abilities Must be able to process transactions in an efficient manner. Must be able to communicate policies and procedures to Members in an easily understood and professional manner. Must comply with all Bank Secrecy Act (BSA) and other Anti-Money Laundering (AML) laws and regulations, as they pertain to federal guidelines and internal policies and procedures. The above statements are intended to describe the general nature and level of work being performed by people assigned to this job. They are not intended to be an exhaustive list of all responsibilities, duties, skills, or working conditions.