Senior Risk Management Analyst

Control Testing Leadership and SME

Leads the design, execution, and oversight of control testing across the enterprise

Acts as a subject matter expert on control design, effectiveness, and testing methodologies

Evaluates control design and operating effectiveness, identifying gaps and recommending improvements

Drives consistency in control testing standards, documentation, and quality expectations

Provides guidance and effective challenge to business units and analysts on control effectiveness and testing outcomes

Risk Assessment and ERM Integration

Partners with business units to support risk assessments, ensuring alignment between risks and key controls

Apply effective challenge to ensure risk ratings are supported by control performance, issues, and other relevant indicators

Contributes to ERM program enhancements, including methodology, taxonomy, and reporting

Analyzes risk and control data to identify trends, themes, and emerging risks

Stakeholder Influence and Governance

Engages and influences stakeholders to strengthen control environments and risk management practices

Applies independent judgment to assess control effectiveness and escalate issues where appropriate

Supports adherence to regulatory requirements and internal policies related to controls and risk management

Identifies gaps and drives continuous improvement in control testing practices and governance standards

KNOWLEDGE, SKILLS, and ABILITIES

The requirements listed are representative of the knowledge, skills, and/or abilities required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential job functions.

Education and Experience

• 4+ years related experience in risk, compliance, or internal audit, including RCSA and control testing
• Bachelor's degree in business administration, finance, risk management, information technology, or equivalent experience
• Experience with GRC tools such as Archer preferred
• Experience leading testing, reviewing, and challenging control environments and risk assessments

Licenses, Certifications, Registrations

• Relevant professional certifications (e.g., CRCM, CIA) preferred but not required.

Knowledge & Skills

• Advanced knowledge of control testing methodologies, control design, and effectiveness evaluation
• Strong working knowledge of RCSA, ERM frameworks, and three lines of defense, with ability to connect control outcomes to risk exposure
• Ability to apply risk management principles to complex and ambiguous scenarios
• Proficiency with data analysis, reporting tools, and GRC platforms such as Archer
• Strong skills in Excel, Word, PowerPoint, and AI tools such as Copilot to drive efficiency and insight generation
• Strong analytical, problem solving, and critical thinking capabilities
• Excellent written and verbal communication skills with the ability to translate complex risk concepts into clear business insights

Leadership and Organization Development

• Serves as a control testing SME, providing guidance and mentorship to analysts and stakeholders
• Leads onboarding and ongoing education related to control testing standards, practices, and tools
• Builds strong partnerships across business units to strengthen control environments and risk awareness
• Contributes to team effectiveness, knowledge sharing, and capability development
• Promotes accountability, quality, and continuous improvement

Scope and Strategic Impact

• Leads control testing activities and establishes consistency in execution, documentation, and quality standards
• Influences how control effectiveness is evaluated and incorporated into risk assessments and reporting
• Identifies control weaknesses, systemic issues, and thematic risks, driving actionable improvements
• Contributes to the enhancement of ERM frameworks, including control standards, testing methodologies, and reporting practices
• Serves as a key advisor to stakeholders on control related decisions and remediation strategies
• Ensures strong data integrity and traceability across control testing and issue management processes

PHYSICAL ABILITIES / WORKING CONDITIONS

Physical Demands

Ability to sit, talk and hear consistently

Vision Requirements

Close vision (clear vision at 20 inches or less)

Distance vision (clear vision at 20 feet or more)

Color vision (ability to identify and distinguish colors)

Weight Lifted or Force Exerted

Ability to lift up to 10 pounds frequently and up to 25 pounds occasionally

Environmental

There are no unusual environmental factors (such as a typical office)

Noise Environment

Moderate noise (business office with computers and printers, light traffic)

***This Job is not eligible to be performed in Colorado or Connecticut, either remotely or in-person.***

Mountain America Credit Union is an EEO/AA/ADA/Veterans employer.