Senior Technology Risk Analyst

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Ware, MA, US

3 days ago Requisition

Salary Range: $75,000.00 To $85,000.00 Annually

Being a Country Bank team member has a lot of perks! Our competitive total compensation package and comprehensive benefit package include:

• Medical, dental and vision insurance, a 401(k) Plan with a generous employer contribution plus match;
• Educational assistance and tuition reimbursement benefits;
• Remote work and flexible scheduling options;
• Generous total paid time off, and more!

Country Bank is a growing mutual community bank with locations in Hampden, Hampshire and Worcester counties. We are Made to Make a Difference in the lives of our customers, our communities, and for our team members every day since 1850. It is our people that drive our success and create our inclusive and engaging culture. We’re excited to meet you to discuss our career opportunities and how you can make a difference as a part of our growing Corporate Risk team!

We’re excited to announce an opportunity for the position of Senior Technology Risk Analyst! This position supports the risk management and information security functions to ensure compliance with the Bank’s Vendor Management Program, IT Risk Management Program, and Information Technology Risk Assessment process. This position works closely with the IT Security Department and all business areas to ensure that the appropriate level of vendor and application oversight is maintained throughout the Bank.

Within the department, the Technology Risk Analyst collaborates directly with the Operational Risk Analyst and provides support and back-up when opportunities arise.

The hiring range for this position is $75,000 to $85,000. Starting pay determined based on candidate’s qualifications and experience.

This position is Full Time, 40 hours weekly.

• Vendor Management and IT Risk Assessments
  • Lead comprehensive Vendor and IT risk assessments across third-party relationships and applications, including inherent and residual risk evaluations.
  • Evaluate the design and operating effectiveness of controls, ensuring assessments are evidence-based and aligned with internal policies and regulatory requirements.
  • Conduct detailed walkthroughs and interviews with business stakeholders to validate processes and risks, identify control gaps, and obtain and evaluate appropriate documentation and evidence.
  • Analyze risk and control data to identify trends, recurring issues, or systemic weaknesses to translate findings into actionable insights.
  • Maintain sufficient documentation of assessments performed and issues noted in the Bank’s systems of record, ensuring clarity, completeness, and alignment with Bank and regulatory methodology and requirements.
  • Performs reviews of other risk assessments as needed.
• Communicate findings, risk implications, control gaps, or other such issues to stakeholders in a professional, credible, and constructive manner.
• Support, advise, and challenge remediation plans to ensure proposed actions effectively mitigate identified risks.
• Coordinate responses to audit, regulatory, or other internal inquiries, ensuring timely and accurate resolution of outstanding issues.
• Track and monitor remediation efforts and key milestones to facilitate risk closure, proactively identifying potential bottlenecks or emerging risks.
• Provide guidance and informal coaching to team members, reviewing work products to ensure adherence to risk assessment standards and quality expectations.
• Contribute to continuous improvement initiatives for Vendor Management and IT risk assessment methodologies, reporting practices, and other opportunities.
• Serve as a trusted resource on risk-related topics, fostering a risk‑aware culture and promoting best practices.
• Stay current with regulatory guidance, industry standards, and emerging risks to support program maturity and long‑term risk management effectiveness.

It is required that the employee in this…