Senior Third Party Enterprise Risk Management Analyst

Members 1st Federal Credit Union; Enola (PA); On-site; USD 63,000 - 77,000; Full time

Job summary

Members 1st Federal Credit Union is seeking a Senior Third Party Enterprise Risk Management Analyst to lead vendor risk programs and ensure regulatory compliance across the vendor lifecycle. The role emphasizes evaluating complex vendor relationships, monitoring ongoing risk, and guiding cross-functional teams to strengthen controls.

The position requires 5–8 years of related experience, a bachelor’s degree or equivalent, and familiarity with frameworks such as NIST, SOC 2, GDPR, and FFIEC.

Qualifications

• 5–8 years of related experience.
• Bachelor’s degree or equivalent.
• CTPRP, CTPRA, CRISC preferred.

Responsibilities

• Conduct comprehensive risk assessments for complex third party vendors (financial, operational, IT security, compliance).
• Review vendor documentation such as SOC reports, penetration test results, business continuity plans, and security questionnaires.
• Identify control gaps and recommend remediation steps.
• Evaluate vendor criticality during onboarding and determine required due diligence.
• Monitor vendors with periodic reviews, risk scoring updates and performance tracking.
• Ensure third party risk processes align with NIST, SOC 2, GDPR, FFIEC and other standards.
• Maintain audit trails for audits and remediation tracking.
• Prepare dashboards and reports for leadership and audits.
• Escalate high risk findings and collaborate with stakeholders to resolve issues.
• Partner with Legal, Procurement, IT Security, Compliance, and business units for consistent oversight.
• Provide guidance and training on third party risk policies.

Skills

Analytical skills

Interpersonal skills

Credit union product knowledge

Research skills

Third-party risk knowledge

Education

Bachelor’s degree or equivalent

Job description

Overview

When you join the Members 1st team, you become part of something much bigger than a credit union. You become part of our faM1ly—a tight-knit bunch with big dreams and even bigger values. It is an exciting time for us as we continue to grow, and we hope that you will choose to grow along with us. Wanting the absolute best for our associates means more than just competitive pay. It means fantastic healthcare, paid benefits, opportunities for professional advancement and work-life balance - and best of all, a place where you are accepted and respected for your individuality.

Overview

When you join the Members 1st team, you become part of something much bigger than a credit union. You become part of our faM1ly—a tight-knit bunch with big dreams and even bigger values. It is an exciting time for us as we continue to grow, and we hope that you will choose to grow along with us. Wanting the absolute best for our associates means more than just competitive pay. It means fantastic healthcare, paid benefits, opportunities for professional advancement and work-life balance - and best of all, a place where you are accepted and respected for your individuality.

Responsibilities

The Senior Third Party Enterprise Risk Management Analyst plays a critical role in protecting the organization from risks associated with vendors, suppliers, contractors, and other external partners. This role evaluates third party relationships throughout their lifecycle—onboarding, ongoing monitoring, and offboarding to ensure compliance with internal policies, regulatory requirements, and industry best practices.

Key Responsibilities Include But Are Not Limited To

• Conduct comprehensive risk assessments for more complex new and existing third party vendors, including financial, operational, IT security, and compliance risks.
• Obtain and ensure vendor documentation such as SOC reports, penetration test results, business continuity plans, and security questionnaires are reviewed.
• Identify and document control gaps and recommend remediation actions.
• Support the onboarding process by evaluating vendor criticality and determining required due diligence levels.
• Monitor vendors on an ongoing basis, including periodic reviews, risk scoring updates, and performance tracking.
• Ensure third party risk processes align with regulatory frameworks such as NIST, SOC 2, GDPR, FFIEC, or other industry specific standards.
• Maintain documentation and audit trails for internal and external audits.
• Track and manage vendor remediation plans, exceptions, and risk mitigation activities.
• Prepare dashboards and reports for leadership, risk committees, and auditors.
• Escalate high risk findings and collaborate with stakeholders to resolve issues.
• Partner with Legal, Procurement, IT Security, Compliance, and Business Units to ensure consistent vendor oversight.
• Provide guidance and training to internal teams on third party risk policies and best practices.
• Provide guidance, mentorship, and hands on training to associates to strengthen team capabilities and ensure consistent application of third party risk processes.

Skills

• Advanced analytical, problem-solving and critical thinking skills
• Strong interpersonal, communication and collaboration skills
• Knowledge on Credit Union products, services, and processes
• Strong research skills
• Strong working knowledge of third-party risk management theory, tools, and practices

COMPETENCIES

• Accountability and self-management
• Communication
• Effective knowledge
• Innovation and problem-solving
• Teamwork and leadership

WORKING CONDITIONS/PHYSICAL DEMANDS

• Ability to communicate effectively in English, both orally and in writing
• Visually able to perform activities such as preparing and analyzing data and figures, viewing a computer terminal, and extensive reading
• Ability to sit for extended time periods
• Sufficient manual skill for operation of PC keyboard and other standard office equipment
• Ability to travel, including occasional overnight travel
• Ability to exert minimum amounts of force occasionally to lift, carry, push, pull or move objects

Qualifications

5-8 years of related experience

Does this position require a valid Drivers License?

No

Education Level

General and business knowledge equivalent to a bachelor's degree

Certifications

CTPRP, CTPRA, CRISC preferred

About Us

At Members 1st, we look for individuals who will show up as their whole self because we value diversity, inclusion, and belonging, as well as people who believe in the philosophy of, WE>me. To be sure you align with our company mission, vision, values and culture reference the information below.

Company Culture is at Our Core

If there is one concept, we want you to understand about us, it is this. WE. It is a simple little word but means everything here. We think as one. One faM1ly. One community. One place where everyone belongings. Everything we do is in the best interest of all of us.

What WE Believe

Our Missions: WE serve our members, associates, and communities through support, empowerment, and meaningful relationships.

Our Vision: WE are growing our faM1ly by delivering everything they need to live well financially, through all life’s moments and milestones.

Our Values: WE deliver unparalleled experiences through a culture of WE. WE > me. WE are servant leaders- at work and in the communities we serve. WE are financially safe and sound stewards of members dollars. WE are faM1ly.

Join a company that grows with you - personally and professionally

Equal Opportunity Employer

Members 1st provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

Compensation Overview

We are excited to offer a competitive salary for this position. This figure serves as the entry point in our salary range, and there is potential for the actual salary to be higher based on a variety of factors, such as your experience, skills, education, and location. We believe in recognizing and rewarding talent, so our compensation packages are thoughtfully designed to reflect the unique qualifications and contributions of each candidate.

The Minimum Salary For This Position Is

$70,000.00+/yr

Certifications

CTPRP, CTPRA, CRISC preferred