
Job Details
Description
The Risk Analyst is responsible for implementing business unit specific risk and governance efforts, including the establishment and maintenance of a risk operating model and facilitating the development of risk-based policies and standards. Performs ongoing activities associated with the risk assessment process. Performs ongoing activities for the bank’s Business Continuity Plan and oversees Disaster Recovery Testing.
ESSENTIAL FUNCTIONS
Risk & Governance
- Maintain governance documentation detailing how information should be secured, including the maintenance and development of internal process/procedure documentation, including but not limited to risk, technology, and cybersecurity policies and standards.
- Perform formal risk analysis and self-assessments for processes, leveraging industry standards like CIS, ITIL, and COBIT to build a unique program for assigned business unit.
- Analyze internal controls to ensure compliance with documented and approved standards. Ensure that information systems within environment comply with company policies, standards, and procedures.
- Assist with regular risk assessments, including organizing recurring meetings, reviewing and implementing process changes, business and/or support function procedures, internal controls, and assessment and/or development of internal documentation.
- Research and respond to risk and governance questions from business units.
- Drive, and provide advisory and subject-matter expertise, to appropriate support teams and business units for risk and compliance readiness.
- Responsible for tracking and monitoring gaps in the risk and governance program; maintain gap analysis documents, gather necessary information from technology and lines of business to identify areas to improve banking practices.
- Implement the process to identify new assets and perform the risk evaluation process to determine risk ranking.
- Facilitate and liaise with technology leaders and key corporate risk groups (including Internal Audit, Operational Risk Management, Corporate Compliance, Enterprise Risk Management and Legal) to ensure the program is aligned with these groups and meeting obligations.
- Support third-party audits and respond to risk/governance requests from regulators and auditors.
- Demonstrate compliance with all bank regulations for job functions and keep up to date on regulation changes.
- In conjunction with management, ensure compliance with appropriate regulatory and internal policies and procedures, including writing/revising policies and procedures as needed.
- Maintain thorough knowledge of risk and compliance as it relates to the Division.
- Conduct training sessions and other information meetings pertaining to Risk and Governance topics.
- Conduct ongoing Graham Leach Bliley Act (GLBA) assessments as assigned.
Business Continuity Coordination
- Performs ongoing activities for the bank’s Business Continuity Plan, maintaining plan information, and oversees Disaster Recovery Testing to include development of tabletop exercises.
- Evaluates the overall condition of the plan(s) and document any necessary changes.
- Assists Risk Management Ambassadors with Business Continuity Plan questions or application support issues during semi-annual and annual reviews.
- Develops disaster recovery plans for physical locations with critical assets such as data centers.
- Analyzes impact on, and risk to, essential business functions or information systems to identify acceptable recovery time periods and resource requirements (Business Impact Analysis).
- Develops emergency management plans for recovery decision making and communications, continuity of critical departmental processes, or temporary shut-down of non-critical departments to ensure continuity of operation and governance.
- Evaluates applicable laws and regulations to determine impact on organizational activities as it relates to business continuity planning.
- Writes reports to summarize testing activities, including descriptions of goals, planning, scheduling, execution, results, analysis, conclusions, and recommendations.
- Identifies opportunities for strategic improvement or mitigation of business interruption and other risks caused by business, regulatory, or industry-specific change initiatives.
- Creates or administers training and awareness presentations or materials.
QUALIFICATIONS
- Bachelor's degree preferred, or equivalent
- 5+ years of experience in or a combination of risk management, compliance, business continuity, audit, or banking operations.
- Knowledge of risk management processes, including internal audit and information management.
- Experience evaluating controls relative to various frameworks such as ISO 27002, NIST CSF, NIST 800 series, or financial services regulatory frameworks such as the FFIEC IT booklets, Cybersecurity Assessment Tool (CAT) and regulatory compliance.
- Knowledge of systems and network concepts including access and authorization.
- Knowledge of applicable regulatory requirements.
- Ability to operate in a cross-functional environment; building and fostering relationships with other departments and stakeholders.
- Ability to anticipate and respond to changing priorities and operate effectively in a dynamic demand-based environment, requiring extreme flexibility and responsiveness
COMPENSATION
The compensation range represents the low and high end of the base compensation range for this position located in Spokane, WA. Actual compensation will vary and may be above or below the range based on various factors including but not limited to location, experience, and performance.
Risk Analyst I (non-exempt / hourly): $53,148 - $79,722 annually
Risk Analyst II (exempt / salary): $69,834 - $104,751 annually
Seattle Metro area differential
Risk Analyst I (non-exempt / hourly): $74,407 - $111,611 annually
Risk Analyst II (exempt / salary): $97,768 - $146,651 annually
What Our Culture Can Offer You:
Our benefit philosophy is to provide you with a comprehensive package to secure your overall wellness and help you become and remain a fulfilled and productive employee. Our benefits include Health, Financial, Retirement and Work/Life Benefits. We are proud to share an overview of our benefits as part of your total compensation.
Washington Trust Bank celebrates diversity in the workplace and actively recruits talent to help reflect the unique communities where we live and work. We are proud to be an equal opportunity employer and prohibit discrimination or harassment based on race, religion, sex, gender identity, sexual orientation, national origin, age, pregnancy, disability, genetic information and any other protected characteristics outlined by state, federal and local laws. We believe strength comes from the diverse backgrounds and experiences of our team, and we are dedicated to fostering a supportive and inclusive work environment.
Qualifications
Skills
Behaviors
:
Motivations
:
Education
Experience
Licenses & Certifications
Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities
The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information. 41 CFR 60-1.35(c)