Director- Third Party Risk and Business Continuity

Director
- Third Party Risk and Business Continuity Skip to main content#  Director
- Third Party Risk and Business Continuity page is loaded## Director
- Third Party Risk and Business Continuity Apply locations:
Sandy, UTtime type:
Full time posted on:
Posted Todayjob requisition :
R20363#
** Please reference the schedule and minimum qualifications listed below before applying.
** If you need assistance with filling out our application form or during any phase of the application, interview, or employment process, please notify our Human Resources Team at  option 1 or email  and every reasonable effort will be made to accommodate your needs in a timely manner.#
** Job Summary
** The Director of Third-Party Risk and Business Continuity is a key leader within Mountain America Credit Union’s Enterprise and Operational Risk function, reporting to the Vice President of Enterprise and Operational Risk. The role is responsible for overseeing the day-to-day execution and continued maturity of the third-party risk management and operational resilience programs, including business continuity, crisis management, operational scenario analysis, and alignment with technology recovery capabilities and disaster recovery dependencies.

As part of the second line of defense, the Director partners with business units, Legal, Procurement, Compliance, IT, Information Security, and other stakeholders to align program execution with strategic objectives, regulatory expectations, and enterprise risk standards.#
** Job Description
**** LOCATION
* * Mountain America Center - Hybrid
9800 S Monroe St  Sandy, UT 84070
** SCHEDULE
* * Full Time; this is a hybrid schedule with some weekly in office expectation, based on business need.

To be effective, an individual must be able to perform each job duty successfully.# Business Continuity and Operational Resilience
* Lead the design, implementation, testing, and continued maturity of the enterprise business continuity and operational resilience program, including business impact analyses, risk assessments, operational scenario analysis, tabletop exercises, and crisis management simulations.
* Partner with IT and Information Security to align business continuity planning with technology recovery capabilities, disaster recovery dependencies, and business response requirements.
* Coordinate crisis response governance, escalation protocols, decision rights, leadership communications, situational risk reporting, lessons learned, and prioritized remediation for significant operational events.
* Monitor emerging threats and trends, including cyber, technology, supply chain, regulatory, physical security, climate, and geopolitical events; maintain related program documentation, reporting, and remediation visibility for operational continuity risks.# Third-Party Risk and Contract Oversight
* Direct the continued maturity of a scalable third-party risk management program aligned to the credit union’s vendor ecosystem, operational complexity, internal governance standards, and regulatory expectations.
* Oversee the third-party risk lifecycle, including due diligence, risk assessments, contract risk reviews, ongoing monitoring, issue escalation, remediation tracking, exit planning, and senior-level credible challenge of evidence-based risk conclusions.
* Partner with business units, Vendor Relationship Owners, Subject Matter Experts, Legal, Procurement, Information Security, Compliance, and other stakeholders to identify, assess, mitigate, monitor, and document third-party risks, contract provisions, controls, and risk mitigation strategies.
* Monitor third-party performance, control effectiveness, key risk indicators, critical vendor exposure, concentration risk, fourth-party risk, and emerging risk themes, escalating issues when risk exposure exceeds defined thresholds.
* Lead TPRM responses for regulatory exams, internal audits, and independent reviews, including documentation, analysis, issue remediation, and management responses.
* Drive the TPRM program maturity roadmap, including process improvements, automation, data quality, GRC optimization, regulatory alignment, and adoption of sound industry practices.
* Provide executive, committee, and Board-level reporting and recommendations on third-party risk exposure, trends, issues, concentrations, emerging risks, program maturity, remediation priorities, and related governance documentation.
** Education and Experience
*** Bachelor’s degree in finance, risk management, business administration, economics, or related field required; advanced degree preferred.
* Minimum of 8 years of experience in enterprise risk, operational risk, business continuity, third-party risk management, contract management, or related risk disciplines.
* Minimum of 3 years of experience leading teams, business processes, or cross-functional initiatives with notable risk and complexity.
* Experience developing or maturing risk, resilience, third-party, or contract management programs in a regulated…