Business Resilience Analyst

Job Type Full-time Description

  

SUMMARY 

Reporting to the Business Resilience Manager, the Business Resilience Analyst will be responsible for performing due diligence and monitoring of third parties in accordance with the organization Third-Party Risk Management Program and for assisting with defining the business continuity management processes  (including disaster recovery) and monitoring testing strategies. They will be responsible maintaining the inventory of all of the organizations third-parties and business processes, including the completeness and accuracy of third-party contact information, contract information, and services provided.  

For those seeking to deliver the latest financial solutions rooted in trustworthy, high-quality service, Charlesbridge, a mutual organization holding company, provides the operational support, resources, legacy, and innovative thinking to financial institutions so they can deliver a suite of flexible, personalized solutions designed to meet the evolving needs of our clients and our communities. Our local roots, dedication to the communities we serve, loyalty to our people, and commitment to excellence ensure that we remain a trusted partner in an ever-evolving financial journey, today and tomorrow.  While our employees are committed to helping our clients, we are committed to our employees. To support our employees, we offer a competitive benefit package with Medical, Dental, Vision, Flexible Spending, Tuition Reimbursement, Childcare Subsidy, Retirement, Life Insurance, and many other benefits.

ESSENTIAL DUTIES AND RESPONSIBILITIES 

• Working with the Business Resilience Manager on the development, implementation and maintenance of the Third-Party Risk Management Program (TPRMP) ensuring it adheres to regulatory requirements and best practices. 
• Working with the Business Resilience Manager on the development, implementation of the business continuity and incident response policies, plans, and/or programs ensuring they adhere to regulatory requirements and best practices. 
• Training key stakeholders in their roles and responsibilities in third-party risk management and business continuity management.
• Executing the due diligence and ongoing monitoring of third parties, including concluding on each task, identifying weaknesses, and working with the third-party relationship owner on these tasks and remediation efforts. 
• Tracking third-party weaknesses “red flags” and monitoring the remediation efforts; reporting these items to the appropriate committee for awareness and closure. 
• Assisting with the facilitation of the annual third-party risk assessment process, working with the third-party relationship owners, and reviewing results for consistency across the organization.
• Maintaining checklists, forms, and templates used to facilitate communication or task completion, including but not limited to SOC reviews, BCP reviews, due diligence checklists, termination letters, etc. 
• Maintaining the contract database including the centralized file storage of all contracts throughout the organization.
• Ensuring all contractual details are maintained in the GRC tool, including the updating of all contractual dates, services, and amounts. Following up with third-party relationship owners upon contractual renewals. 
• Assisting with the coordination of the completion of annual third-party risk, business continuity, and incident response reports to the Board or designated committee.
• Identifying and staying informed of new third-parties under consideration and ensuring they are added to the appropriate inventory to facilitate third-party risk management activities.
• Ensuring completeness and accuracy of the organization’s third-party relationship information, including contact information and services provided. 
• Assisting with the development and maintenance of the business continuity/incident response testing schedule, signing off on test scripts, following up on results, signing off on results, and compiling results. Adding issues for tracking  or rescheduling tests, when required.
• Tracking business continuity and incident response issues / findings and monitoring the remediation efforts. 
• Assisting with the facilitation of the annual business continuity update process, working with the process owners, and reviewing results for consistency across the organization.
• Maintaining checklists, forms, and templates used to facilitate communication or task completion, during different types of disaster scenarios. 
• Maintaining documentation throughout an incident. 
• Acting as a backup for communicating organization-wide incidents through the emergency notification system. 
• Ensuring the GRC tool reflects the current environment and is updat