Senior Third Party Enterprise Risk Management Analyst

When you join the Members 1st team, you become part of something much bigger than a credit union. You become part of our faM1ly—a tight-knit bunch with big dreams and even bigger values. It is an exciting time for us as we continue to grow, and we hope that you will choose to grow along with us. Wanting the absolute best for our associates means more than just competitive pay.

It means fantastic healthcare, paid benefits, opportunities for professional advancement and work-life balance - and best of all, a place where you are accepted and respected for your individuality.

The Senior Third Party Enterprise Risk Management Analyst plays a critical role in protecting the organization from risks associated with vendors, suppliers, contractors, and other external partners. This role evaluates third party relationships throughout their lifecycle—onboarding, ongoing monitoring, and offboarding to ensure compliance with internal policies, regulatory requirements, and industry best practices.

• Conduct comprehensive risk assessments for more complex new and existing third party vendors, including financial, operational, IT security, and compliance risks.
• Obtain and ensure vendor documentation such as SOC reports, penetration test results, business continuity plans, and security questionnaires are reviewed.
• Identify and document control gaps and recommend remediation actions.
• Support the onboarding process by evaluating vendor criticality and determining required due diligence levels.
• Monitor vendors on an ongoing basis, including periodic reviews, risk scoring updates, and performance tracking.
• Ensure third party risk processes align with regulatory frameworks such as NIST, SOC 2, GDPR, FFIEC, or other industry specific standards.
• Maintain documentation and audit trails for internal and external audits.
• Track and manage vendor remediation plans, exceptions, and risk mitigation activities.
• Prepare dashboards and reports for leadership, risk committees, and auditors.
• Escalate high risk findings and collaborate with stakeholders to resolve issues.
• Partner with Legal, Procurement, IT Security, Compliance, and Business Units to ensure consistent vendor oversight.
• Provide guidance and training to internal teams on third party risk policies and best practices.
• Provide guidance, mentorship, and hands on training to associates to strengthen team capabilities and ensure consistent application of third party risk processes.

• Advanced analytical, problem-solving and critical thinking skills
• Strong interpersonal, communication and collaboration skills
• Knowledge on Credit Union products, services, and processes
• Strong research skills
• Strong working knowledge of third-party risk management theory, tools, and practices

• Accountability and self-management
• Communication
• Effective knowledge
• Innovation and problem-solving
• Teamwork and leadership

• Ability to communicate effectively in English, both orally and in writing
• Visually able to perform activities such as preparing and analyzing data and figures, viewing a computer terminal, and extensive reading
• Ability to sit for extended time periods
• Sufficient manual skill for operation of PC keyboard and other standard office equipment
• Ability to travel, including occasional overnight travel
• Ability to exert minimum amounts of force occasionally to lift, carry, push, pull or move objects

5-8 years of related experience

No

General and business knowledge equivalent to a bachelor's degree

CTPRP, CTPRA, CRISC preferred

At Members 1st, we look for individuals who will show up as their whole self because we value…