Analyst Compliance Risk - Testing & Oversight

Mountain America Credit Union•Sandy, UT

About The Position

As part of the credit union’s risk management infrastructure and second line of defense, the Compliance Risk Testing & Oversight Analyst supports the design, execution and ongoing enhancement of key components of the Compliance Management System (CMS). The role conducts risk-based testing and targeted reviews of first line of defense controls, performs analytical and gap analysis to evaluate control design and operating effectiveness, and provides credible challenge to drive timely remediation of compliance risk. The role partners with business leaders, subject matter experts, audit, risk management and technology teams to obtain evidence, clarify expectations, track milestones, and communicate results through clear, data-informed reporting to stakeholders and management.

Requirements

Bachelor’s degree in business/finance or related field, or equivalent combination of education and relevant experience.
Four years of experience in financial services, including two or more years experience in compliance, risk management, audit, quality assurance, and/or control testing (or an equivalent combination of financial operations and compliance oversight experience).
Demonstrated experience conducting risk-based testing and control assessments; experience performing compliance gap analysis and supporting issue management and remediation tracking preferred.
Advanced skills with Microsoft Office Suite including Outlook, Word, PowerPoint, and Excel; strong Excel proficiency for analysis (e.g., pivot tables, formulas, data validation).
Strong written and verbal communication skills; ability to convey methodology, results, and recommendations to diverse audiences.
Ability to influence and coordinate across a matrixed environment without direct authority; strong stakeholder management and escalation skills.
Demonstrated ability to apply credible challenge using evidence, risk-based judgment, and clear rationale.
High attention to detail and documentation discipline; strong organizing and time management skills.
Analytical thinking and problem solving; ability to identify trends, themes, and root causes and translate them into actionable recommendations.
Comfort operating in a dynamic, evolving environment; self-starter who can build structure and drive continuous improvement.

Nice To Haves

Experience with analytical and reporting software preferred.
Experience with financial institution platforms and risk/compliance systems such as Archer and/or similar; experience with core banking platforms (e.g., Keystone) is a plus.
Compliance, risk, audit, or testing certifications (e.g., CRCM, CAMS, CUCE, CRISC, PMP) are preferred.

Responsibilities

Conduct risk-based testing and targeted reviews of first line of defense controls to assess compliance effectiveness and identify potential violations of regulatory requirements and internal policy.
Execute all phases of testing and monitoring (planning, fieldwork, reporting, and finalization) in accordance with department standards, budgets, and deadlines.
Develop and apply test criteria by translating applicable regulatory requirements and internal policies into clear control expectations and testing steps.
Perform analytical control testing, data validation, and trend analysis to expand the breadth and depth of testing coverage and to inform risk-based prioritization.
Perform compliance gap analysis of procedures, control documentation, and supporting artifacts; identify themes and root causes and recommend sustainable corrective actions.
Issue clear observations and findings supported by evidence; evaluate management responses and remediation plans; and apply credible challenge when actions are insufficient or timelines are not risk-appropriate.
Support issue management by documenting findings, tracking corrective actions, monitoring milestones and dependencies, and validating closure evidence.
Partner with business stakeholders to obtain documentation and evidence, coordinate follow-ups, and influence progress without direct authority; escalate roadblocks as appropriate.
Prepare formalized reports and executive-ready summaries that communicate scope, methodology, results, risks, recommendations, and remediation status to stakeholders and management.
Maintain organized testing workpapers and evidence repositories within designated systems/tools to support audits, exams, and internal governance.
Proactively troubleshoot issues with testing processes, data quality, or systems; identify opportunities to improve efficiency, consistency, and data quality.
Collaborate with second line partners to align on focus areas for testing, share insights, and reduce duplicative effort.
Ensure compliance with all relevant regulations required by law, which may include (but are not limited to) Reg B, Reg Z, RESPA, HMDA, Fair Lending, FCRA, CARD Act, BSA, OFAC, FACT Act, GLBA, Reg CC, Reg DD, Reg E, UDAAP, and other regulations pertinent to the role.
Perform other duties as assigned.