Senior Business Risk Control Analyst

About the role

The Senior Business Risk Control Analyst role provides independent assurance and governance support over the design and operating effectiveness of internal controls across the credit union. This role supports ERM governance activities, methodologies, standards, and reporting, ensuring consistency with the organization’s ERM framework, risk appetite, and regulatory expectations. Testing and oversight span all major risk categories, including Credit, Interest Rate Risk (IRR), Liquidity, Operational/Transaction, Compliance, and Strategic Risk, as well as controls supporting technology enabled processes, including IT, cybersecurity, cloud, digital, or system-based operations, where applicable.

Responsibilities

• Serve as a senior Second Line of Defense (2LoD) subject matter resource for control testing, assurance practices, and risk governance.
• Exercise independent challenge and credible oversight of first-line risk identification, control design, and remediation effectiveness.
• Function as a trusted partner to ERM leadership in risk governance activities, including committee reporting, escalation practices, and issue management oversight.
• Lead the development and maintenance of testing standards, methodologies, and quality expectations.
• Reinforce strong risk ownership and accountability, maintaining clear separation from control ownership while reinforcing accountability and effective risk ownership across the organization.
• Lead the development and execution of the annual ERM risk-based control testing plan.
• Own and continuously enhance testing methodologies, standards, templates, and documentation guidance.
• Lead preparation materials and analysis for risk governance committees, management, regulators, and internal audit.
• Influence risk ratings, issue severity, and escalation considerations.
• Champion consistent application of ERM practices across control testing, issue management, and reporting.
• Function as a senior independent advisor by providing objective insights into control effectiveness and residual risk exposure.
• Provide credible challenge and guidance to business leaders, Compliance, Information Security, Finance, and Internal Audit to identify opportunities to enhance control design, automation, and monitoring, while preserving 2LoD independence.
• Lead coordination across assurance functions to reduce duplication and strengthen enterprise risk oversight.
• Perform other duties as assigned.
• Mentor and influence peers and stakeholders, elevating risk and control maturity through thought leadership and constructive challenge.

Requirements

• Education: Bachelor’s degree required; advanced degree preferred.
• Experience: 4+ years of experience in enterprise risk management, second-line control assurance, internal audit, or compliance testing within financial services.
• Demonstrated experience operating in a Second Line of Defense role, including governance and oversight responsibilities.
• Strong experience conducting control testing, RCSAs, issue management, and remediation validation.
• Experience with controls supporting technology-enabled processes, with exposure to one or more of the following: Information Technology, Cybersecurity, Cloud or third-party technology environments, Digital platforms or system-enabled business processes.
• Strong understanding of ERM frameworks, risk and control methodologies (e.g., COSO, Three Lines of Defense), and governance practices.
• Working knowledge of financial services regulatory expectations.
• Advanced analytical skills with the ability to synthesize results into enterprise-level risk insights.
• Advanced proficiency in Excel and data analysis tools.
• Excellent written and verbal communication skills, including experience supporting management or governance-level reporting.
• Professional certifications (e.g., CRISC, CISA, CIA, CISSP) are a plus.

Qualifications

• Disclaimers and Work Environment: Nothing in this position description is an implied contract for employment. The functions are not all encompassing and are subject to change at any time by management.
• Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.

Skills

• Conflict resolution management.
• Ability to effectively work with both internal and external partners in a highly collaborative environment.
• Ability to communicate complex concepts and findings in a clear and concise manner.
• Ability to assist with multiple projects, work in fast-paced environment and meet deadlines.
• Professional composure, objectivity and fairness when dealing with conflict or sensitive matters.
• Excellent ability to rely on experience and judgment to plan and accomplish various goals and objectives and to produce high quality materials within tight time limits.

Benefits

At VyStar, we offer competitive pay, an excellent benefit package that includes a 401(k) Plan, an extensive paid technical and on-the-job training program, and tuition reimbursement—available to all full and part-time employees. Part-time positions start at a minimum of 30 hours per week.

Pay

Competitive pay is offered based on experience and qualifications.

Schedule

Part-time positions start at a minimum of 30 hours per week.