RESPONSIBILITIES:

• Ensures that WECU maintains appropriate and well-managed third-party vendor relationships across the organization.
• Ensures that appropriate due diligence is exercised in all phases of third-party relationships.
• Works with vendor relationship managers on a routine basis for continual compliance and assurance that they are holding vendors accountable for their actions in relation to our contract and service agreements.
• Ensures through documentation that all vendor contracts are in line with our vendor management policy and are reviewed by the vendor relationship manager on a routine basis for continual compliance.
• Develops and performs risk assessments on all current and future relationships and contracts with third party service providers to ensure that WECU maintains strong working relationships that serve to benefit the organization, and its employees and members.
• Administers WECU’s vendor management program (VMP), including all supporting contract information, by utilizing technology to its fullest within legal guidelines.
• Ensures business continuity, disaster recovery, insurance, financial, and information security reviews and analysis are completed as required for all new, existing, and prospective third-party vendors and facilitate the processes with internal and external subject matter experts, as applicable.
• Working in conjunction with the Training & Development to coordinate and facilitate appropriate vendor management training to all vendor relationship managers across the organization and ensure that expectations are clear.
• Proposes updates to management regarding vendor management policies and procedures as necessary to ensure compliance and best practices, disseminating information to management as necessary.
• Develops and maintains all contract and vendor management forms for use by staff to ensure timely reviews and updates of our contracts.
• Establishes a time frame for ongoing vendor due diligence reviews of our existing vendors, following up with managers to ensure that appropriate due diligence reviews are conducted as required.
• Works with managers to ensure that they are holding vendors accountable for their actions in relation to our contract and service agreements.
• Ensures that all vendors have appropriate contact information to notify WECU of any security breaches and integrate their planned actions regarding a security breach into the contract.
• Prepares and analyzes reports for management on the Vendor Management Program.
• Provides subject matter expertise in the creation, implementation, and maintenance of appropriate enterprise risk management tools, policies, and procedures to be compliant with applicable rules and regulations and industry best practices.
• Identifies and recommends proactive and reactive risk management measures to VP, Risk Management & Audit to detect potential risk exposures and to defend against external and internal risk threats.
• Maintain and update WECU’s enterprise risk and control registries.
• Works closely with business units to identify and assess risks, map control structures, evaluate the effectiveness of existing controls, and recommends additional controls as appropriate.
• Works with VP, Risk Management & Audit to conduct WECU’s annual enterprise risk assessment
• Works with the Project Management team to conduct comprehensive risk assessments for all new projects that may pose strategic, reputational, financial, member, employee, and compliance impacts.
• Works with applicable business units to ensure required risk assessments, including Bank Secrecy Act/Anti-Money Laundering Risk Assessment, Red Flags/Identity Theft Risk Assessment, Business Continuity & Disaster Recovery Risk Assessment, Business Impact Analysis, and project risk assessments, are conducted and updated and incorporated into WECU’s enterprise risk assessment as appropriate.
• Prepares periodic and regular updates and reports to WECU’s Enterprise Risk Management Committee (RMCO).

QUALIFICATIONS:

• Bachelors’ degree in business, risk management, or related field or equivalent work experience
• Ability to exercise independent judgment.
• Exceptional analytical and problem-solving abilities.
• Ability to utilize working knowledge of risk management best practices such as COSO Risk Management Framework
• Project Management knowledge and experience is a strong plus.

NOTE: Job descriptions are not intended and should not be construed to be exhaustive lists of all responsibilities, skills, efforts, or working conditions associated with a job.

COMPENSATION:

The salary range for this position is $70,678 to $99,781 annually.

WECU provides a comprehensive benefits package that includes medical, dental, and vision benefits with premiums for employee coverage paid in full, 401(k) retirement plan with an 8% annual contribution from WECU, bonus plan, two or more weeks of vacation, up to 11 paid holidays, paid life and disability insurance, annual wellness benefit, loan discounts, professional development, and much more.

ABOUT WECU:

WECU is a not-for-profit financial cooperative where members are encouraged to save and borrow responsibly at fair and competitive rates. Headquartered in Bellingham, WA, WECU has over 130,000 members and over $2.3 billion in assets.

It is WECU's mission to make a meaningful difference in the lives of our members. We strive to treat both members and staff with honesty and integrity and to be a socially responsible part of our community. WECU also endeavors to be an employer of choice.

WECU is an Equal Opportunity Employer that is committed to diversity and inclusion in the workplace. We make employment decisions based on merit and qualifications and seek to have the best qualified person in every job. WECU policy prohibits discrimination based on race, color, religion, creed, sex, gender, sexual orientation, gender identity, marital status, age, national origin, or ancestry, physical or mental disability, veteran status, genetic characteristics or information, or any other consideration made unlawful by federal, state, or local laws.