Enterprise Risk Analyst II at FFB Bank

, California, United States -

Full Time

Start Date

Immediate

Expiry Date

27 May, 26

Salary

40.0

Posted On

26 Feb, 26

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Data Analysis, Risk Assessment, Vendor Due Diligence, SOC Reviews, Risk Monitoring, GRC System Management, Archer GRC, Regulatory Alignment, Incident Management, Business Continuity Planning, Risk Reporting, Problem-Solving, Communication, Organizational Skills, Time Management, Teamwork

Industry

Banking

Description

Description Who We Are: FFB, a dynamic and acclaimed single-branch bank born in the heart of Fresno, CA in 2005, is on a mission to redefine the banking experience. Our commitment to delivering top-notch banking services has propelled us to the forefront of the industry, earning us accolades and recognition. At FFB, we recognize the uniqueness of each individual who walks through our doors, and our dedicated team strives to craft personalized banking solutions that cater to their distinct needs. What sets FFB apart is not just our Fresno roots but the diverse talents that make up our team, hailing from every corner of the country. We firmly believe that our people are our greatest strength, and we're constantly on the lookout for ambitious and passionate individuals who align with FFB's vision, regardless of their location. If you're ready to be part of a winning team and contribute to our ongoing success story, we invite you to apply and join the FFB family! Recent Achievements Speak Louder Than Words: 2024 & 2025 - American Banker - #1 Top Performing Publicly Traded Bank with under $2b in assets 2023 - American Banker - "Top 5" Community Bank in the Country #4 2023 - OTCQX - Best 50 Companies #3 2023 - 5-star Rating Bauer Financial What You Should Expect While Working at FFB: Company ownership through our Employee Stock Ownership Program (ESOP) A friendly, close-Knit work culture that encourages growth Opportunities to Participate in Community Networking Events Benefits Package o Medical/Dental/Vision o Life Insurance o Paid Vacation o 401(k) Retirement Plan o Training & Development o Tuition Reimbursement o Employee Assistance Program o Internal Job Posting & Referral Program Ideal Candidate: FFB prides itself on its core values of Teamwork, Relationship, Authenticity, and Commitment (TRAC). We expect that our team members will reflect these values in the workplace in various ways: Teamwork – We collaborate, hold each other accountable, and win together. Relationship – We are trustworthy, transparent, and respectful. Authentic – We are humble, vulnerable, and we speak up. Commitment – We are owners...Be hungry, responsive, and have a sense of urgency. About the Position: The Enterprise Risk Analyst II supports the Bank’s enterprise risk management framework by identifying, assessing, and monitoring operational, compliance, reputational, and financial risks while partnering with business units to evaluate controls, recommend mitigation strategies, and support regulatory and internal reporting. The role contributes across core ERM programs including operational risk, third party vendor risk, disaster recovery and business continuity, incident management, and risk and control self-assessments, and provides specialized support for the Third-Party Vendor Management program through vendor due diligence, SOC reviews, and ongoing risk monitoring to strengthen enterprise risk awareness, governance, and regulatory alignment. Essential Duties: Supports the Director of Enterprise Risk Management in implementing and maintaining the bank’s enterprise risk strategy. Performs data analysis to support risk reports and proposals presented to the Board of Directors, senior executives, and staff. Serves as a Third-Party Risk Management specialist supporting the Bank’s vendor lifecycle processes, including onboarding, risk assessment, due diligence, monitoring, renewal, and termination. Performs vendor risk assessments to evaluate inherent and residual risk based on criticality, data sensitivity, operational impact, and regulatory considerations. Reviews SOC 1 and SOC 2 reports, cybersecurity questionnaires, financial information, and business continuity documentation to assess control effectiveness. Assists vendor owners in identifying, documenting, and tracking remediation actions and risk mitigation plans. Supports periodic vendor reviews to ensure alignment with contractual requirements and regulatory expectations. Maintains accurate and complete vendor risk records within the Bank’s GRC system such as Archer. Supports vendor contract reviews to confirm appropriate risk, confidentiality, business continuity, and termination provisions are addressed. Collaborates with Information Security and Compliance to ensure vendors meet data protection and security standards. Supports the Director of ERM in maintaining and enhancing the Third-Party Risk Management program in alignment with FDIC Interagency Guidance. Assists in developing and maintaining vendor due diligence templates, risk scoring methodologies, and reporting tools. Supports migration, configuration, and ongoing maintenance of vendor workflows within Archer GRC. Identifies opportunities to improve vendor risk processes, documentation quality, and reporting consistency. Assists with integrating vendor-related risks into RCSA processes, disaster recovery and business continuity testing, and incident management workflows. Supports development of vendor-related risk metrics, KRIs, and dashboards for management and committee reporting. Participates in enterprise risk assessments, audits, and regulatory examinations related to third-party risk. Provides analytical support for ERM reports, dashboards, and risk summaries. Prepares vendor risk reports, summaries, and supporting documentation for senior management and risk committees. Tracks vendor-related issues, findings, and corrective actions through resolution. Maintains regular communication with internal stakeholders and vendors to support effective risk oversight. Embodies the TRAC Values and Critical Behaviors (Teamwork, Relationship, Authenticity, Commitment) as core principles, using them to guide daily interactions and decision-making. Completes administrative tasks with a sense of urgency, including required Bank Compliance Training. Responds to internal and external inquiries via email, phone, or messaging platforms in a timely and professional manner. Positively represents the Bank through ethical conduct and community involvement. Demonstrates an understanding of and commitment to EEO policies. Fosters a respectful, inclusive workplace by valuing cultural differences, preventing harassment of any kind, and supporting a diverse workforce. Ensures adherence to all Bank policies, procedures, and processes, along with applicable state and federal laws, rules, and regulations, ensuring confidentiality and data privacy while carrying out AML/CFT (Anti-Money Laundering and Countering the Financing of Terrorism) responsibilities specific to the role. Performs duties in an office or home office environment, involving tasks such as writing, typing, speaking, lifting moderate weights, and operating office equipment. The position requires physical activities like sitting, walking, and reaching. Reasonable accommodation can be made for individuals with disabilities to perform essential functions. Travels up to 10%, including but not limited to attending company meetings, training sessions, and corporate events, with travel typically being regional or local based on business needs. Requirements Bachelor’s degree from an accredited college or university in a relevant field (e.g., Business, Finance, or related) preferred. Advanced degree or relevant certifications strongly preferred for senior-level roles. Minimum 2–4 years of related banking industry and risk analysis experience required. Proficient analytical and problem-solving skills; capable of interpreting complex data and providing meaningful insights. Experience, knowledge and training in financial statement and tax return analysis typically resulting from a combination of education in accounting, financial and/or credit analysis or related areas. Experience with Governance, Risk, & Control (GRC) Tools preferred. Proficiency with Microsoft Office Suite (Excel, Word, Outlook) required. Effective oral, written, and interpersonal communication skills with the ability to apply common sense to carry out instructions, interpret documents, understand procedures, write reports and correspondence, and speak clearly to customers, vendors and employees. Strong organizational and time management abilities with attention to detail. Proficient teamwork and relationship skills to contribute to cross-functional collaboration and team success. Willingness to take on special projects and perform other duties as assigned, beyond core responsibilities, to support team and organizational needs. Commitment to continuous learning and professional development to stay current with industry standards and best practices. Ability to maintain authenticity and integrity in all professional interactions, ensuring trust and credibility with stakeholders. Capable of managing multiple priorities and meeting deadlines in a dynamic environment. Ability to work independently with minimal supervision and as part of a team. Proven ability to adapt to changing priorities and procedures. Current driver’s license and a vehicle with appropriate insurance coverage if required to drive while performing assigned duties and responsibilities.

Responsibilities

The Enterprise Risk Analyst II supports the bank’s ERM framework by identifying, assessing, and monitoring various risks (operational, compliance, reputational, financial) and partners with business units on control evaluation and mitigation strategies. This role specializes in the Third-Party Vendor Management program, handling due diligence, SOC reviews, and ongoing risk monitoring to enhance governance and regulatory alignment.