Caitlin Thivierge

In my current role as Senior Business Risk Analyst involves spearheading the deployment of cutting-edge GRC software solutions and working alongside the Director of Business Risk. With a focus on consultation for new vendors, projects, and processes, we ensure comprehensive risk considerations during onboarding, reinforcing the company's defenses against emerging threats and vulnerabilities.

Senior Business Risk Analyst , February 2024- Present

Collaborate with the Director of Business Risk to advance the maturity of the Enterprise Risk

Management (ERM) program, aligning risk strategies with business objectives.

Facilitate the review and update of the Risk Appetite Statement (RAS) and associated Key

Indicators (KIs), ensuring alignment with evolving risk appetites and strategic goals.

Lead the development of third-party risk monitoring processes, staying current with vendor performance, regulatory changes, and emerging threats.

Conduct comprehensive third-party risk assessments covering Cybersecurity, data privacy,

compliance, and financial stability, ensuring vendor resilience.

Vendor Risk Awareness Training: Guide internal stakeholders on third-party risk management policies, procedures, and best practices.

Coordinate Disaster Recovery and Business Continuity tabletop exercises and gap analysis,

ensuring preparedness and identifying areas for improvement.

Business Risk Analyst II, April 2023- February 2024

Coordinated and facilitated Enterprise Risk Management risk assessments for all operational and lending areas.

Provided risk appetite reporting and escalation to the Board, ensuring transparency and timely decision-making.

Collaborated with senior leadership to integrate ERM frameworks within a $2B credit union,

driving consistent risk mitigation across departments.

Spearheaded over 70 Enterprise Risk Management risk assessments across operational and lending areas, identifying and mitigating high-risk processes, resulting in reduction in operational risk.

Identify significant operational processes across the for evaluation of design and controls.

Update, analyze and manage risk and control library and mappings in the GRC system based on new/modified process, policies and procedures.

Led Enterprise Risk Awareness training initiatives, increasing employee understanding of risk management practices by 75% over a 6-month period.

Oversaw annual review of organizations Business Continuity and Crisis Management Plan

Worked with external vendor to conduct Business Continuity annual tabletop exercise and gap analysis

Internal Control Specialist, December 2021– April 2023

Partnered with subject matter experts (SMEs) to ensure operational and compliance controls effectively mitigated risks, enhancing process integrity.

Conducted Quality Control and Internal Fraud Monitoring through file maintenance changes

(rate changes, loan due date changes, dormant account reactivation's, member information changes, and core system changes).

Led internal fraud monitoring initiatives, identifying and investigating suspicious activities,

resulting in 5 of incidents prevented or mitigated.

Managed risk factor identification processes for employee fraud prevention, reducing internal fraud cases by 50%.

Business Administration: Operations and Project Management, B.A., SNHU

Certified Regulatory Vendor Program Manager