Operational Risk Associate

Operational Risk Associate

Reporting to the Senior Operational Risk Analyst, the Operational Risk Associate provides administrative, analytical, and project support for enterprise risk management activities, with a focus on technology risk, third-party risk management, due diligence, monitoring, reporting, and risk management platform maintenance. The Associate supports effective and efficient risk management processes across Peoples Bank and Cornerstone Bank by gathering and organizing risk information, assisting with risk assessments and control-related follow-up, maintaining accurate inventories and documentation, and helping identify potential gaps or emerging areas of risk for escalation to management.

This Corporate Services role requires attention to detail, sound judgment, strong communication, and the ability to support risk awareness and regulatory compliance across business units.

• Support third-party due diligence and ongoing monitoring by requesting information, reviewing submissions for completeness, documenting status, and escalating gaps or outstanding items to management.
• Collect, organize, and maintain due diligence, monitoring, contract, risk assessment, and supporting documentation for third-party and technology risk management activities.
• Assist with review of contracts, agreements, and related onboarding materials by identifying missing information, tracking required approvals, and routing potential risk or compliance concerns to appropriate stakeholders.
• Assist with maintaining accurate technology, model, fourth-party, control, and third-party inventory information within SharePoint, Outlook, and the Risk Management System.
• Assist with control inventory maintenance, including tracking new controls, changes to existing complementary user entity controls, and related applicability or implementation information in the Risk Management System.
• Support risk exception, issue tracking, and follow-up processes by maintaining documentation, monitoring due dates, and helping ensure required information is complete and current.
• Assist with documentation and evidence gathering for internal audits, external audits, regulatory exams, model risk activities, and information security-related third-party risk reviews.
• Assist with maintaining and improving procedures, templates, onboarding materials, and risk management platform content used by the Risk Oversight department.
• Stay informed of operational risk, third-party risk, technology risk, contract management, and regulatory developments relevant to assigned responsibilities, and share observations with management as appropriate.
• Support the upkeep of FDICIA control matrices, narratives, and process flows by gathering updates from business units, documenting changes so materials reflect evolving processes, and helping confirm that referenced controls are properly scoped and clearly documented for each business unit's risk exposure.
• Organize FDICIA matrices and supporting documentation, tracking updates and follow-up items, and flagging potential control-to-risk alignment or documentation gaps to senior staff so matrices remain complete, accurate, and audit/test-ready.
• Support the Bank's Risk Finding Management program by maintaining the risk acceptance log, tracking re-acceptance due dates, and coordinating timely re-acceptance cycles under the direction of senior staff.
• Assist with preparing risk acceptance memos and gathering supporting documentation and help route items for proper escalation and approval consistent with existing process and procedure.
• Assist with enterprise risk management dashboard data collection, metric input, aggregation, analysis, and reporting to support operational risk oversight and program performance monitoring.
• Validate and analyze data inputs, track trends, identify discrepancies or potential control gaps, and communicate or escalate issues when additional review is needed.
• Perform administrative and analytical support tasks, including data entry, document updates, email coordination, meeting preparation, report preparation, and tracking of risk-related activities.
• Prepare meeting…