Senior Technology Risk Analyst

Being a Country Bank team member has a lot of perks! Our competitive total compensation package and comprehensive benefit package include:

• Medical, dental and vision insurance, a 401(k) Plan with a generous employer contribution plus match;
• Income protection benefits;
• Educational assistance and tuition reimbursement benefits;
• Remote work and flexible scheduling options;
• Generous total paid time off, and more!

Country Bank is a growing mutual community bank with locations in Hampden, Hampshire and Worcester counties. We are Made to Make a Difference in the lives of our customers, our communities, and for our team members every day since 1850. It is our people that drive our success and create our inclusive and engaging culture. We're excited to meet you to discuss our career opportunities and how you can make a difference as a part of our growing Corporate Risk team!

About the Job:

We're excited to announce an opportunity for the position of Senior Technology Risk Analyst! This position supports the risk management and information security functions to ensure compliance with the Bank's Vendor Management Program, IT Risk Management Program, and Information Technology Risk Assessment process. This position works closely with the IT Security Department and all business areas to ensure that the appropriate level of vendor and application oversight is maintained throughout the Bank.

Within the department, the Technology Risk Analyst collaborates directly with the Operational Risk Analyst and provides support and back-up when opportunities arise.

The hiring range for this position is $75,000 to $85,000. Starting pay determined based on candidate's qualifications and experience.

This position is Full Time, 40 hours weekly.

Essential Duties and Responsibilities (Other Duties May be Assigned):

• Vendor Management and IT Risk Assessments
  • Lead comprehensive Vendor and IT risk assessments across third-party relationships and applications, including inherent and residual risk evaluations.
  • Evaluate the design and operating effectiveness of controls, ensuring assessments are evidence-based and aligned with internal policies and regulatory requirements.
  • Conduct detailed walkthroughs and interviews with business stakeholders to validate processes and risks, identify control gaps, and obtain and evaluate appropriate documentation and evidence.
  • Analyze risk and control data to identify trends, recurring issues, or systemic weaknesses to translate findings into actionable insights.
  • Maintain sufficient documentation of assessments performed and issues noted in the Bank's systems of record, ensuring clarity, completeness, and alignment with Bank and regulatory methodology and requirements.
  • Performs reviews of other risk assessments as needed.
• Risk Communication & Issue Resolution
  • Communicate findings, risk implications, control gaps, or other such issues to stakeholders in a professional, credible, and constructive manner.
  • Support, advise, and challenge remediation plans to ensure proposed actions effectively mitigate identified risks.
  • Coordinate responses to audit, regulatory, or other internal inquiries, ensuring timely and accurate resolution of outstanding issues.
  • Track and monitor remediation efforts and key milestones to facilitate risk closure, proactively identifying potential bottlenecks or emerging risks.
• Program Support & Mentorship
  • Provide guidance and informal coaching to team members, reviewing work products to ensure adherence to risk assessment standards and quality expectations.
  • Contribute to continuous improvement initiatives for Vendor Management and IT risk assessment methodologies, reporting practices, and other opportunities.
  • Serve as a trusted resource on risk-related topics, fostering a risk-aware culture and promoting best practices.
  • Stay current with regulatory guidance, industry standards, and emerging risks to support program maturity and long-term risk management effectiveness.

Knowledge and Skills

It is required that the employee in this position can work independently while interpreting ideas and facts, while also analyzing and interpreting federal and state laws and/or regulations. This employee should have keen attention to detail, excellent organizational skills, and ability to manage multiple projects within set deadlines.

This employee should have strong written and verbal communication skills to effectively communicate risk and control concepts to staff and develop reports and memos to articulate risks. This position requires the proven ability to partner effectively across all levels of the organization and develop positive working relationships, along with the ability to work with confidential information. Employees who have demonstrated high motivation and a results-oriented mindset are preferred.

This position requires intermediate knowledge of the Microsoft Office Suite, including Excel and Outlook, along with experience with GRC platforms.

Education and Work Experience

A High School diploma or equivalent is required; A…