Third-Party and Business Resiliency Analyst

About the Position:

As the Third-Party and Business Resiliency Analyst, you will support the administration of the Bank’s third-party relationship portfolio pursuant to the Bank’s Third-Party Risk Management (TPRM) Program and policy. You will assist management with selection and vetting of prospective third-party relationships. You will also help maintain and ensure the Bank’s TPRM Program is compliant with regulatory expectations. You will support the bank’s Business Resiliency program by helping business units prepare for, withstand, respond to, and recover from operational disruptions.

Your role will partner with lines of business, technology, and risk functions to assess risk, maintain resiliency plans, conduct testing, and support response during real‑time incidents.

What You Will Do:

Business Resilience Responsibilities Support the development, maintenance, implementation, and testing of Business Continuity, Disaster Recovery, and Operational Resiliency plans across the organization.

Conduct Business Impact Analyses (BIAs) to identify critical processes, assess disruption impacts, establish Recovery Time Objectives (RTOs), and facilitate remediation of identified gaps.

Coordinate and support resiliency testing programs, including tabletop exercises, crisis management simulations, scenario analyses, and after-action reviews.

Participate in incident and crisis management activities, supporting response coordination, impact assessment, recovery tracking, and stakeholder communications during operational disruptions.

Partner with Technology, Information Security, Facilities, Risk Management, and business units to strengthen resilience capabilities and recovery strategies.

Help maintain Standard Operating Procedures (SOPs), recovery plans, policies, training materials, awareness communications and support policy updates.

Monitor and report on Key Risk Indicators (KRIs), Key Performance Indicators (KPIs), program metrics, dashboards, and management reporting.

Track, manage, and facilitate the timely remediation of continuity and resiliency issues, ensuring alignment with policy requirements, regulatory expectations, and the enterprise risk framework.

Support third-party resilience oversight through due diligence reviews, joint testing activities, and monitoring of compliance with business continuity and resiliency requirements.

Contribute to the continuous improvement of the Business Continuity and Operational Resiliency Program by evaluating emerging risks, regulatory developments, industry practices, and enabling technologies, including continuity management and incident response tools.

Third-Party Responsibilities Support the ongoing administration of the Third-Party Risk Management (TPRM) Program through vendor oversight activities, risk analysis, issue management, and reporting.

Partner with internal stakeholders including Information Security, Business Continuity, Compliance, Legal, BSA/AML, Credit, Accounts Payable, and business units to coordinate third-party risk management activities.

Conduct due diligence reviews and risk assessments for new, existing, and Banking-as-a-Service (BaaS) third-party relationships using a risk-based approach.

Assess third-party relationships throughout the vendor lifecycle, including onboarding, ongoing monitoring, contract renewals, and offboarding activities.

Collect, review, and analyze due diligence documentation to evaluate vendor financial condition, operational resilience, information security, compliance, and overall risk exposure.

Coordinate contract reviews and risk mitigation activities with vendors, business units, and subject matter experts.

Identify, document, escalate, and track third-party risk issues, findings, and operational events through…