Business Continuity Vendor Manager

Kitsap Credit Union
is a not-for-profit, member-owned financial cooperative with more than 300 employees and 14 branches throughout Western Washington.
We have a passion for making a positive difference.As a $2 + billion-asset credit union, we are deeply committed to our members' financial wellbeing and the prosperity and quality of life in the communities we serve. We are proud to be led by individuals with the experience and skills to drive our organization towards our goals for strategic growth and operational excellence.

Our KCU Cares Foundation program focuses on providing resources and support for those struggling with homelessness or hunger and improving the financial well-being of the people in our communities. And beyond monetary efforts, we have provided thousands of hours in staff volunteerism and in-kind support.

At Kitsap Credit Union, our success is built on trust-based relationships and personalized service. We understand our employees are key to our success. They provide the personalized service to our members and contribute to the communities where we live. We are committed to providing a supportive, mission-driven, and inclusive culture where employees can grow their careers. To learn more, visitkitsapcu.org.

The Business Continuity & Vendor Risk Manager is responsible for the leadership, administration, and continuous improvement of Kitsap Credit Union's Business Continuity Management and Third-Party/Vendor Risk Management programs. Serving as the primary subject matter expert for operational resilience and third-party risk, this position ensures critical business functions, external service provider relationships, and third-party engagements are identified, assessed, monitored, tested, and governed in alignment with regulatory expectations, internal policies, and KCU's risk appetite.

As an individual contributor, the role provides enterprise-wide leadership through program ownership, governance, risk oversight, reporting, and cross-functional collaboration. The position partners closely with business owners, Information Security, Information Technology, Compliance, Internal Audit, and executive leadership to strengthen organizational resilience, enhance third-party risk management practices, reduce operational risk exposure, and support audit and examination readiness.

Reports to:VP, Risk Management

Salary Range: $91,536.68 - $ depending on experience

Working Hours:Monday - Friday 8:00 AM - 5:00 PM / Hybrid - 2 days in office

Grade: 12BC

• Own and manage the credit union’s Business Continuity Management (BCM) program framework, including business impact analysis, continuity planning, recovery strategy documentation, plan maintenance, testing, exercises, and issue tracking.
• Organization wide leadership of departmental continuity plans are current, actionable, and aligned to critical business processes, recovery objectives, dependencies, and member-impact considerations.
• Lead enterprise-level tabletop exercises, scenario testing, and post-exercise reviews; document results, lessons learned, and remediation activities through closure.
• Partnering cross functionally identifying critical operations, internal and external dependencies, recovery gaps, and opportunities to strengthen continuity capabilities across the organization.
• Collaborate with IT, Information Security, Operations, Facilities, and other stakeholders on disaster recovery dependencies, incident response coordination, and continuity-related communications.

• Own and manage the third-party risk management (TPRM)/vendor risk program lifecycle, including vendor onboarding, inherent risk assessments, due diligence, risk tiering, ongoing monitoring, contract review, issue escalation, and periodic reassessments.
• Provide risk-based oversight of critical and high-risk vendors, including review of financial, operational, information security, business continuity, compliance, privacy, and service performance considerations.
• Partner with business owners to clarify vendor ownership, monitoring…