Caitlin Thivierge

In my current role as Senior Business Risk Analyst involves spearheading the deployment of cutting-edge GRC software solutions and working alongside the Director of Business Risk. With a focus on consultation for new vendors, projects, and processes, we ensure comprehensive risk considerations during onboarding, reinforcing the company's defenses against emerging threats and vulnerabilities.

Senior Business Risk Analyst , February 2024- Present
Collaborate with the Director of Business Risk to advance the maturity of the Enterprise Risk
Management (ERM) program, aligning risk strategies with business objectives.

Facilitate the review and update of the Risk Appetite Statement (RAS) and associated Key
Indicators (KIs), ensuring alignment with evolving risk appetites and strategic goals.
Lead the development of third-party risk monitoring processes, staying current with vendor
performance, regulatory changes, and emerging threats.
Conduct comprehensive third-party risk assessments covering Cybersecurity, data privacy,
compliance, and financial stability, ensuring vendor resilience.
Vendor Risk Awareness Training: Guide internal stakeholders on third-party risk
management policies, procedures, and best practices.
Coordinate Disaster Recovery and Business Continuity tabletop exercises and gap analysis,
ensuring preparedness and identifying areas for improvement.
 

Business Risk Analyst II, April 2023- February 2024
Coordinated and facilitated Enterprise Risk Management risk assessments for all operational
and lending areas.

Provided risk appetite reporting and escalation to the Board, ensuring transparency and timely
decision-making.
Collaborated with senior leadership to integrate ERM frameworks within a $2B credit union,
driving consistent risk mitigation across departments.
Spearheaded over 70 Enterprise Risk Management risk assessments across operational and
lending areas, identifying and mitigating high-risk processes, resulting in reduction in operational risk.
Identify significant operational processes across the for evaluation of design and controls.
Update, analyze and manage risk and control library and mappings in the GRC system based
on new/modified process, policies and procedures.
Led Enterprise Risk Awareness training initiatives, increasing employee understanding of
risk management practices by 75% over a 6-month period.
Oversaw annual review of organizations Business Continuity and Crisis Management Plan
Worked with external vendor to conduct Business Continuity annual tabletop exercise and
gap analysis
Internal Control Specialist, December 2021– April 2023
Partnered with subject matter experts (SMEs) to ensure operational and compliance controls
effectively mitigated risks, enhancing process integrity.
Conducted Quality Control and Internal Fraud Monitoring through file maintenance changes
(rate changes, loan due date changes, dormant account reactivation's, member information
changes, and core system changes).
Led internal fraud monitoring initiatives, identifying and investigating suspicious activities,
resulting in 5 of incidents prevented or mitigated.
Managed risk factor identification processes for employee fraud prevention, reducing internal
fraud cases by 50%.

 

Business Administration: Operations and Project Management, B.A., SNHU

Certified Regulatory Vendor Program Manager