Operational Risk Analyst III (Procurement & Vendor Management)

The Procurement and Vendor Management Operational Risk Analyst III supports effective departmental management under NFCU Data Governance Standards.  In collaboration with business process owners, the Analyst role proactively builds and maintains risk and control matrices to identify, assess, monitor, update, and report operational control monitoring results related to procurement and vendor management.

Develop, lead and approve risk assessment projects to assess compliance with federal and state regulatory requirements, industry standards, and Navy Federal operating procedures. Maintain and update Operational Risk procedural manuals, job aides, and tools. Develop and assist in overseeing the most complex and highly specialized risk assessment scopes. Perform and validate in depth and comprehensive gap analyses to determine the root cause of process gaps and regulatory compliance failures. Serve as liaison with Internal Audit and Regulatory Compliance to ensure adherence with Enterprise and Compliance Risk Management requirements. Administer and oversee the compliance monitoring platform and data entry to ensure adherence with regulatory government agencies requirements. Lead and assist in leading complex/difficult tasks of significant impact and latitude requiring advanced analysis.

This position is eligible for the TalentQuest employee referral program. If an employee referred you for this job, please apply using the system-generated link that was sent to you.

• Perform and facilitate the collection, review and assimilation of RCSA assessment data and reporting into concise and meaningful reports
• Develop and monitor Procurement and Vendor Management Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs) and contribute to development of dashboards, scorecards and reports to support management activities 
• Supports the execution of front-line controls, self-assurance, RCSAs, independent risk testing, and audit activities as directed
• Evaluate and enhance the Data Governance 
• Plan the research for and development of specialized risk assessment scopes
• Collaborate with management and personnel to optimize risk assessment scope development
• Identify potential business risks, operational and regulatory process deficiencies and improvement opportunities
• Gather and synthesize data; present conclusions and offer risk mitigation, remediation and process improvement solutions to management
• Lead/conduct and assists provide expertise in with the administration of specialized risk assessment and testing lifecycles of business activities, processes, policies and procedures for operational effectiveness and compliance with regulatory requirements, federal and state laws, and Navy Federal’s quality control standards, policies and procedures
• Develop, lead and oversee efforts to improve the efficiency and effectiveness of operations and risk mitigation processes
• Prepare and present to management and/or affected business unit summaries, operational and regulatory risk assessment reports, trending, and remedial or mitigation solutions
• Maintain effective communication with other business units and support teams to remediate errors and assist with implementation of corrective actions related to non-compliance with policies and procedures
• Partner and maintain effective working relationships with management to evaluate the progress of risk assessments and key issues raised during the review process and to facilitate the overall improvement of internal control structures
• Develop and help administer optimal data testing and sampling strategies to ensure the most effective risk detection, analyses and control solutions
• Develops new and updates Operational Risk policies and procedures
• Analyzes the impact of changes to federal and state regulations and makes recommendations for changes to policies, procedures and practices to ensure compliance
• Perform other duties as assigned

• Expert knowledge and understanding of risk-based auditing techniques and methodologies
• Minimum of 5-7 years of hands-on experience with risk and controls self-assessments (RCSA)
• Significant experience that demonstrates the ability to research, compile, and document data, business processes, and workflow
• Advanced knowledge in Procurement and Vendor Management, and Third-Party Risk Management
• Demonstrated experience supporting or evaluating data integration processes across common platforms (e.g., Service Now, Pega, SharePoint Online, PowerBI, etc.)
• Advanced skill interpreting, extrapolating, and interpolating data for statistical research and modeling
• Advanced knowledge of applicable federal and state regulations, company policies, and industry best practices
• Working knowledge of various data structures and ability to extract data sou