Enterprise Risk Analyst

The Enterprise Risk Analyst plays a significant role in supporting Blu Peak Federal Credit Union’s enterprise-wide risk management programs, including risk governance, due diligence, control monitoring, issue management, contract oversight, and ongoing risk assessment across key business relationships. A key responsibility is to develop advanced metrics that measure third party risk exposure, performance, and return on investment using multiple data sources and internal systems, improving visibility into business value and associated costs and enabling leadership to make informed decisions.

This position works with management to design, maintain, and enhance the overall third-party risk management framework, policies, and processes to align with regulatory expectations, business needs and enterprise risk appetite. They recommend risk tiering, assessment and performance methodologies, and minimum control standards, and ensure business units consistently follow these requirements during vendor onboarding and ongoing oversight.
The Analyst coordinates, administers and optimizes the GRC (Governance, Risk & Compliance) tools and data, and produces governance reports and presentations for senior management and governance committees. They lead continuous improvement initiatives as directed by management - such as process redesign, automation, and training—to strengthen the institution’s risk posture.

The role evaluates key metrics to help ensure third-party relationships remain secure, compliant with regulatory requirements and service level agreements, and aligned with the credit union’s strategic objectives. The role also includes administration and support of AI-related tools and automation initiatives designed to improve efficiency, consistency, and reporting accuracy within the program.

This role will manage all areas with independent judgement and effective problem-solving skills.

System Management

• Serve as system administrator for the GRC platform, including access control, configuration management, workflow maintenance, and issue resolution.

• Analyze system data integrity and ensure records align with policy, legal, and regulatory requirements.

• Troubleshoot system and data issues, identify root causes, and implement process improvements to increase reliability and efficiency.

• Leverage automation tools and AI-enabled features to improve data processing, reporting accuracy, workflow efficiency, and operational scale.

• Assist with ad hoc analytics, reporting, and operational requests using system data and reporting tools.

End User Training and Enablement

• Develop and deliver training materials, job aids, and documentation to support user adoption of the GRC platform and related tools.

• Train and support end users on system functionality, workflows, reporting, data quality expectations, and proper system usage.

• Promote adoption of automation and AI-enabled features by providing guidance, best practices, and enablement sessions.

Risk Programs Support

• Provide operational support to adjacent risk programs and initiatives as needed to ensure comprehensive coverage.

• Serve as a flexible resource to assist with ad-hoc projects and strategic goals within the wider risk organization.

• Other duties as assigned.

Third Party Management

• Perform advanced analysis of vendor spend data using multiple internal data sources and enterprise systems to identify cost trends, savings opportunities, and outlier activity.

• Collaborate with business units to develop, validate, and track pre-engagement business cases, including estimated savings, cost avoidance, and…