Welcome to PeoplesBank! We are the largest mutually chartered bank in Western Mass and Northern Connecticut, we are proud to lead the way in green values, sustainable energy financing, and charitable giving. Our commitment to operating in the best interest of our customers is matched by our dedication to fostering an inclusive and engaging work environment. We offer excellent compensation, workplace flexibility, and a competitive benefits package to our associates. Our award-winning culture has earned us recognition as the Best Place to Work and Best Local Bank. Join our team of dedicated and innovative individuals and be a part of our dynamic, successful organization. Let's make a difference together!
Summary:
Reporting to the Senior Operational Risk Analyst, the Operational Risk Associate provides administrative, analytical, and project support for enterprise risk management activities, with a focus on technology risk, third-party risk management, due diligence, monitoring, reporting, and risk management platform maintenance. The Associate supports effective and efficient risk management processes across PeoplesBank and Cornerstone Bank by gathering and organizing risk information, assisting with risk assessments and control-related follow-up, maintaining accurate inventories and documentation, and helping identify potential gaps or emerging areas of risk for escalation to management. This Corporate Services role requires attention to detail, sound judgment, strong communication, and the ability to support risk awareness and regulatory compliance across business units.
Essential Duties and Responsibilities:
Third-Party and Technology Risk Management:
-
Support third-party due diligence and ongoing monitoring by requesting information, reviewing submissions for completeness, documenting status, and escalating gaps or outstanding items to management.
-
Collect, organize, and maintain due diligence, monitoring, contract, risk assessment, and supporting documentation for third-party and technology risk management activities.
-
Assist with review of contracts, agreements, and related onboarding materials by identifying missing information, tracking required approvals, and routing potential risk or compliance concerns to appropriate stakeholders.
-
Assist with maintaining accurate technology, model, fourth-party, control, and third-party inventory information within SharePoint, Outlook, and the Risk Management System.
Controls and Governance:
-
Assist with control inventory maintenance, including tracking new controls, changes to existing complementary user entity controls, and related applicability or implementation information in the Risk Management System.
-
Support risk exception, issue tracking, and follow-up processes by maintaining documentation, monitoring due dates, and helping ensure required information is complete and current.
-
Assist with documentation and evidence gathering for internal audits, external audits, regulatory exams, model risk activities, and information security-related third-party risk reviews.
-
Assist with maintaining and improving procedures, templates, onboarding materials, and risk management platform content used by the Risk Oversight department.
-
Stay informed of operational risk, third-party risk, technology risk, contract management, and regulatory developments relevant to assigned responsibilities, and share observations with management as appropriate.
FDICIA and Financial Reporting Controls:
-
Support the upkeep of FDICIA control matrices, narratives, and process flows by gathering updates from business units, documenting changes so materials reflect evolving processes, and helping confirm that referenced controls are properly scoped and clearly documented for each business unit's risk exposure.
-
Organize FDICIA matrices and supporting documentation, tracking updates and follow-up items, and flagging potential control-to-risk alignment or documentation gaps to senior staff so matrices remain complete, accurate, and audit/test-ready.
Risk Acceptance Program Support:
-
Support the Bank's Risk Finding Management program by maintaining the risk acceptance log, tracking re-acceptance due dates, and coordinating timely re-acceptance cycles under the direction of senior staff.
-
Assist with preparing risk acceptance memos and gathering supporting documentation and help route items for proper escalation and approval consistent with existing process and procedure.
Risk Reporting and Analytics:
-
Assist with enterprise risk management dashboard data collection, metric input, aggregation, analysis, and reporting to support operational risk oversight and program performance monitoring.
-
Validate and analyze data inputs, track trends, identify discrepancies or potential control gaps, and communicate or escalate issues when additional review is needed.
Administrative and Operational Support:
-
Perform administrative and analytical support tasks, including data entry, document updates, email coordination, meeting preparation, report preparation, and tracking of risk-related activities.
-
Prepare meeting materials and reports, gather information from business units and third parties, and support reassessments, reconciliations, project risk activities, and other program enhancement initiatives.
-
Coordinate with business units, project teams, vendors, and coworkers to support timely completion of risk management activities and promote positive working relationships.
Other related duties as assigned.
Education and/or Experience:
-
Bachelor's degree (B. A.) from four-year college or university preferred
-
Or one to two years related experience and/or training
-
Or equivalent combination of education and experience
-
Prior experience in risk management, third-party risk management
Skills Required:
-
Excellent analytical skills
-
Ability to effectively present information and respond to questions from internal and external customers
-
Strong written and verbal communication skills
-
Meticulous and organized
-
Critical thinking skills with the ability to independently solve problems
-
Excellent time management and organization
-
Demonstrated ability to prioritize responsibilities and work products of varying complexity and duration
-
Ability to collect, organize, validate, and summarize risk-related data and documentation
-
Ability to identify discrepancies, documentation gaps, or potential control concerns and escalate appropriately
-
Familiarity with third-party risk, technology, risk, audit, compliance, contract management, or information security concepts is a plus
Computer Skills:
-
Microsoft Office (Outlook, PowerPoint, Word, Excel); SharePoint
-
Enterprise-level databases and systems exposure
-
Database management
-
Report writing
-
Exposure to GRC or risk management technology, such as WolfPac, RSA Archer, MetricStream, or similar platforms, a plus.
Work Environment and Physical Demands:
Fast-paced working environment; flexible - ability to quickly address issues or concerns; attention to detail, while still understanding the big picture – strategic objectives of the organization. Position requires standing, sitting, lifting, keyboarding, and other physical office movements.
