Senior Risk & Control Self-Assessment (RCSA) Analyst

If you are motivated and believe in the credit union philosophy of "People Helping People," join our team!

The Risk & Control Self-Assessment (RCSA) Senior Analyst plays a key role in supporting the implementation and execution of the enterprise RCSA program. This position is responsible for facilitating assessments, documenting risks and controls, analyzing business unit submissions, and helping ensure RCSA activities are completed in accordance with established methodology and documentation standards. The Senior Analyst will work closely with business units, risk partners, and program leadership to support the consistent identification, assessment, and documentation of operational risks and controls across the organization.

The individual will assist with end-to-end RCSA activities, including meeting preparation, facilitation support, documentation, follow-up, quality review, and reporting. This role contributes to the overall success of the RCSA program by helping business units clearly articulate their processes, risks, controls, and residual risk exposure, while also identifying opportunities to improve documentation quality, control transparency, and risk awareness.

This position requires strong analytical skills, attention to detail, and the ability to communicate effectively with stakeholders across the organization. The role is ideal for someone with a solid understanding of risk management, controls, process analysis, or audit concepts who is interested in contributing to the buildout and maturation of a foundational operational risk management program.

Essential Responsibilities:

• (25%) RCSA Facilitation & Documentation: Support and facilitate RCSA engagements with business units by coordinating meetings, documenting discussions, and capturing risks, controls, control effectiveness assessments, and residual risk determinations. Responsibilities include helping ensure documentation is complete, well-articulated, and aligned with established program standards.
• (20%) Risk & Control Analysis: Analyze business processes, risk statements, and control descriptions to help identify gaps, inconsistencies, or areas requiring clarification. Support the evaluation of inherent and residual risk considerations and help ensure risk and control documentation is logically structured and adequately supported.
• (15%) Assessment Review & Quality Support: Review submitted RCSA documentation for completeness, consistency, and alignment with methodology. Responsibilities include identifying missing information, documentation weaknesses, vague control descriptions, or unsupported conclusions, and working with stakeholders to improve the quality of final assessment outputs.
• (15%) Reporting & Program Analysis: Support preparation of recurring reporting on RCSA progress, assessment results, trends, and observations. Responsibilities include maintaining status trackers, compiling results, analyzing themes across assessments, and helping support management reporting and program oversight activities.
• (10%) Stakeholder Guidance & Program Support: Provide day-to-day support to business units and partners on RCSA expectations, documentation standards, and process requirements. Responsibilities include responding to questions, assisting with follow-up items, helping reinforce timelines and deliverables, and supporting training or awareness activities.
• (10%) Framework & Documentation Support: Assist in maintaining and refining RCSA templates, job aids, guidance documents, and supporting materials. Responsibilities include helping improve consistency of assessment outputs, incorporating lessons learned from completed assessments, and supporting enhancements to the overall program framework.
• (5%) System & Data Support: Support data entry, workflow tracking, and record maintenance within Archer or other tools used to support the RCSA program. Responsibilities may include validating data fields, maintain assessment records, and help ensure information is accurate, complete, and reportable.

Required Education & Experience (Knowledge, Skills, & Abilities):

• Bachelor’s degree in business, finance, risk management, accounting, or related field (or equivalent work experience)
• 3–5 years of relevant experience in operational risk management, internal controls, audit, compliance, process improvement, or related field.
• Foundational understanding of risk and control concepts, including the relationship between processes, risks, controls, and residual risk.
• Ability to analyze information, identify documentation gaps, and support structured, high-quality risk and control assessments.
• Strong written and verbal communication skills, including the ability to document complex discussions in a clear and concise manner.
• Strong attention to detail, organization, and time management skills.
• Ability to manage multiple assignments and work effectively in a cross-functional environment.

Preferred Education & Experience (Knowledge, Skills, & Abilities):

• Experience supporting risk assessments, control assessments, audits, validations, or related governance activities.
• Experience in a financial institution, credit union, bank, or other regulated industry.
• Familiarity with operational risk management, internal control frameworks, or issues management practices.
• Familiarity with risk taxonomies, process documentation, and control inventories.
• Experience supporting reporting, dashboards, trend analysis, or management presentations.

Job Environment & Physical Requirements:

• Hybrid work environment that supports a mix of in-office and remote work, with periodic in-person collaboration based on team or business needs.
• Prolonged periods of sitting at a desk and working on a computer.
• Ability to work independently and manage multiple tasks or projects with minimal supervision.

SECU provides equal employment opportunity to all qualified persons regardless of race, color, religion, age, sex, sexual orientation, gender identity, national origin, genetic information, disability, veteran status, or other classification protected by law.

Disclaimer

State Employees' Credit Union reserves the right to fill this role at a higher/lower level based on business need.