Enterprise Risk Analyst II

Job Type

Full-time

FFB, a dynamic and acclaimed single-branch bank born in the heart of Fresno, CA in 2005, is on a mission to redefine the banking experience. Our commitment to delivering top‑notch banking services has propelled us to the forefront of the industry, earning us accolades and recognition. At FFB, we recognize the uniqueness of each individual who walks through our doors, and our dedicated team strives to craft personalized banking solutions that cater to their distinct needs.

What sets FFB apart is not just our Fresno roots but the diverse talents that make up our team, hailing from every corner of the country. We firmly believe that our people are our greatest strength, and we're constantly on the lookout for ambitious and passionate individuals who align with FFB’s vision, regardless of their location. If you’re ready to be part of a winning team and contribute to our ongoing success story, we invite you to apply and join the FFB family!

• 2024 & 2025 – American Banker – #1 Top Performing Publicly Traded Bank with under $2b in assets
• 2023 – American Banker – “Top 5” Community Bank in the Country #4
• 2023 – OTCQX – Best 50 Companies #3
• 2023 – 5‑star Rating Bauer Financial

• Company ownership through our Employee Stock Ownership Program (ESOP)
• A friendly, close‑knit work culture that encourages growth
• Opportunities to participate in community networking events
• Benefits package
• Medical / Dental / Vision
• Life insurance
• Paid vacation
• 401(k) retirement plan
• Training & development
• Tuition reimbursement
• Employee assistance program
• Internal job posting & referral program

FFB prides itself on its core values of Teamwork, Relationship, Authenticity, and Commitment (TRAC). We expect that our team members will reflect these values in the workplace in various ways:

• Teamwork – We collaborate, hold each other accountable, and win together.
• Relationship – We are trustworthy, transparent, and respectful.
• Authentic – We are humble, vulnerable, and we speak up.
• Commitment – We are owners…Be hungry, responsive, and have a sense of urgency.

The Enterprise Risk Analyst II supports the Bank’s enterprise risk management framework by identifying, assessing, and monitoring operational, compliance, reputational, and financial risks while partnering with business units to evaluate controls, recommend mitigation strategies, and support regulatory and internal reporting. The role contributes across core ERM programs including operational risk, third party vendor risk, disaster recovery and business continuity, incident management, and risk and control self‑assessments, and provides specialized support for the Third‑Party Vendor Management program through vendor due diligence, SOC reviews, and ongoing risk monitoring to strengthen enterprise risk awareness, governance, and regulatory alignment.

• Supports the Director of Enterprise Risk Management in implementing and maintaining the bank’s enterprise risk strategy.
• Performs data analysis to support risk reports and proposals presented to the Board of Directors, senior executives, and staff.
• Serves as a Third‑Party Risk Management specialist supporting the Bank’s vendor lifecycle processes, including onboarding, risk assessment, due diligence, monitoring, renewal, and termination.
• Performs vendor risk assessments to evaluate inherent and residual risk based on criticality, data sensitivity, operational impact, and regulatory considerations.
• Reviews SOC 1 and SOC 2 reports, cybersecurity questionnaires, financial information, and business continuity documentation to assess control effectiveness.
• Assists vendor owners in identifying, documenting, and tracking remediation actions and risk mitigation plans.
• Supports periodic vendor reviews to ensure alignment with contractual requirements and regulatory expectations.
• Maintains accurate and complete vendor risk records within the Bank’s GRC system such as Archer.
• Supports vendor contract reviews to confirm appropriate risk, confidentiality, business continuity, and termination provisions are…