Senior Third Party Enterprise Risk Management Analyst

Members 1st Partnership; Enola (PA); On-site; USD 63,000 - 77,000; Full time

Job summary

Members 1st Partnership is seeking a Senior Third Party Enterprise Risk Management Analyst to protect the organization from vendor-related risks throughout onboarding, monitoring, and offboarding. You will review SOC reports, security tests, and BC plans, document gaps, and guide remediation actions.

You will collaborate with Legal, Procurement, IT Security, Compliance, and business units to ensure consistent oversight and training on risk policies.

Qualifications

• Advanced analytical, problem-solving and critical thinking skills.
• Strong interpersonal and communication skills.
• Knowledge of Credit Union products, services, and processes.
• Strong research skills.
• Strong working knowledge of third‑party risk management theory, tools, and practices.

Responsibilities

• Conduct comprehensive risk assessments for more complex new and existing third-party vendors, including financial, operational, IT security, and compliance risks.
• Obtain and ensure vendor documentation such as SOC reports, penetration test results, business continuity plans, and security questionnaires are reviewed.
• Identify and document control gaps and recommend remediation actions.
• Support onboarding by evaluating vendor criticality and required due diligence levels.
• Monitor vendors on an ongoing basis with periodic reviews and risk scoring updates.
• Ensure third-party risk processes align with frameworks like NIST, SOC 2, GDPR, FFIEC, or other standards.
• Maintain documentation and audit trails for audits.
• Track and manage vendor remediation plans, exceptions, and risk mitigation activities.
• Prepare dashboards and reports for leadership, risk committees, and auditors.
• Escalate high-risk findings and collaborate with stakeholders to resolve issues.
• Partner with Legal, Procurement, IT Security, Compliance, and Business Units for consistent oversight.
• Provide guidance and training on third-party risk policies and best practices.
• Provide mentorship and hands-on training to associates to strengthen team capabilities.

Skills

Advanced analytics

Communication skills

Credit union knowledge

Risk research

Critical thinking

Education

General and business knowledge equivalent to a bachelor's degree

Job description

Overview

When you join the Members 1st team, you become part of something much bigger than a credit union. You become part of our faM1ly—a tight-knit bunch with big dreams and even bigger values. It is an exciting time for us as we continue to grow, and we hope that you will choose to grow along with us. Wanting the absolute best for our associates means more than just competitive pay. It means fantastic healthcare, paid benefits, opportunities for professional advancement and work-life balance - and best of all, a place where you are accepted and respected for your individuality.

Responsibilities

The Senior Third Party Enterprise Risk Management Analyst plays a critical role in protecting the organization from risks associated with vendors, suppliers, contractors, and other external partners. This role evaluates third party relationships throughout their lifecycle—onboarding, ongoing monitoring, and offboarding to ensure compliance with internal policies, regulatory requirements, and industry best practices.

Key responsibilities

• Conduct comprehensive risk assessments for more complex new and existing third party vendors, including financial, operational, IT security, and compliance risks.
• Obtain and ensure vendor documentation such as SOC reports, penetration test results, business continuity plans, and security questionnaires are reviewed.
• Identify and document control gaps and recommend remediation actions.
• Support the onboarding process by evaluating vendor criticality and determining required due diligence levels.
• Monitor vendors on an ongoing basis, including periodic reviews, risk scoring updates, and performance tracking.
• Ensure third party risk processes align with regulatory frameworks such as NIST, SOC 2, GDPR, FFIEC, or other industry specific standards.
• Maintain documentation and audit trails for internal and external audits.
• Track and manage vendor remediation plans, exceptions, and risk mitigation activities.
• Prepare dashboards and reports for leadership, risk committees, and auditors.
• Escalate high risk findings and collaborate with stakeholders to resolve issues.
• Partner with Legal, Procurement, IT Security, Compliance, and Business Units to ensure consistent vendor oversight.
• Provide guidance and training to internal teams on third party risk policies and best practices.
• Provide guidance, mentorship, and hands on training to associates to strengthen team capabilities and ensure consistent application of third party risk processes.

SKILLS

• Advanced analytical, problem-solving and critical thinking skills
• Strong interpersonal, communication and collaboration skills
• Knowledge on Credit Union products, services, and processes
• Strong research skills
• Strong working knowledge of third-party risk management theory, tools, and practices

COMPETENCIES

• Accountability and self-management
• Communication
• Effective knowledge
• Innovation and problem-solving
• Teamwork and leadership

WORKING CONDITIONS/PHYSICAL DEMANDS

• Ability to communicate effectively in English, both orally and in writing
• Visually able to perform activities such as preparing and analyzing data and figures, viewing a computer terminal, and extensive reading
• Ability to sit for extended time periods
• Sufficient manual skill for operation of PC keyboard and other standard office equipment
• Ability to travel, including occasional overnight travel
• Ability to exert minimum amounts of force occasionally to lift, carry, push, pull or move objects

Qualifications

5-8 years of related experience

Does this position require a valid Drivers License?

No

Education Level

General and business knowledge equivalent to a bachelor's degree

Certifications

CTPRP, CTPRA, CRISC preferred

About Us

At Members 1st, we look for individuals who will show up as their whole self because we value diversity, inclusion, and belonging, as well as people who believe in the philosophy of, WE>me. To be sure you align with our company mission, vision, values and culture reference the information below.

Company Culture is at Our Core

If there is one concept, we want you to understand about us, it is this. WE. It is a simple little word but means everything here. We think as one. One faM1ly. One community. One place where everyone belongings. Everything we do is in the best interest of all of us.

What WE Believe

Our Missions: WE serve our members, associates, and communities through support, empowerment, and meaningful relationships.

Our Vision

WE are growing our faM1ly by delivering everything they need to live well financially, through all life’s moments and milestones.

Our Values

WE deliver unparalleled experiences through a culture of WE. WE > me. WE are servant leaders- at work and in the communities we serve. WE are financially safe and sound stewards of members dollars. WE are faM1ly.

Join a company that grows with you – personally and professionally

Equal Opportunity Employer

Members 1st provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

Compensation Overview

We are excited to offer a competitive salary for this position. This figure serves as the entry point in our salary range, and there is potential for the actual salary to be higher based on a variety of factors, such as your experience, skills, education, and location. We believe in recognizing and rewarding talent, so our compensation packages are thoughtfully designed to reflect the unique qualifications and contributions of each candidate.

The minimum salary for this position is:

$70,000.00+/yr

Certifications

CTPRP, CTPRA, CRISC preferred