Senior Third-Party Risk & Compliance Lead

Members 1st Federal Credit Union; Enola (PA); On-site; USD 63,000 - 77,000; Full time

Job summary

Members 1st Federal Credit Union is seeking a Senior Third Party Enterprise Risk Management Analyst to lead vendor risk programs and ensure regulatory compliance across the vendor lifecycle. The role emphasizes evaluating complex vendor relationships, monitoring ongoing risk, and guiding cross-functional teams to strengthen controls.

The position requires 5–8 years of related experience, a bachelor’s degree or equivalent, and familiarity with frameworks such as NIST, SOC 2, GDPR, and FFIEC.

Qualifications

• 5–8 years of related experience.
• Bachelor’s degree or equivalent.
• CTPRP, CTPRA, CRISC preferred.

Responsibilities

• Conduct comprehensive risk assessments for complex third party vendors (financial, operational, IT security, compliance).
• Review vendor documentation such as SOC reports, penetration test results, business continuity plans, and security questionnaires.
• Identify control gaps and recommend remediation steps.
• Evaluate vendor criticality during onboarding and determine required due diligence.
• Monitor vendors with periodic reviews, risk scoring updates and performance tracking.
• Ensure third party risk processes align with NIST, SOC 2, GDPR, FFIEC and other standards.
• Maintain audit trails for audits and remediation tracking.
• Prepare dashboards and reports for leadership and audits.
• Escalate high risk findings and collaborate with stakeholders to resolve issues.
• Partner with Legal, Procurement, IT Security, Compliance, and business units for consistent oversight.
• Provide guidance and training on third party risk policies.

Skills

Analytical skills

Interpersonal skills

Credit union product knowledge

Research skills

Third-party risk knowledge

Education

Bachelor’s degree or equivalent

Job description

Members 1st Federal Credit Union is seeking a Senior Third Party Enterprise Risk Management Analyst to lead vendor risk programs and ensure regulatory compliance across the vendor lifecycle. The role emphasizes evaluating complex vendor relationships, monitoring ongoing risk, and guiding cross-functional teams to strengthen controls.

The position requires 5–8 years of related experience, a bachelor’s degree or equivalent, and familiarity with frameworks such as NIST, SOC 2, GDPR, and FFIEC.