Resilience Program and Technology Risk Manager

Full Time, Permanent Opportunity for Resilience Program and Technology Risk Manager (Must be local to Plano, TX; Hybrid)

Catalyst and Your Career Catalyst is igniting change and unlocking new possibilities for credit unions and the members they serve. Whether through innovative payments, asset management or liquidity solutions, we’re passionate about transforming goals into achievements and helping credit unions grow. To accomplish this, we actively pursue talented individuals capable of making a positive impact on member credit unions, and we do our best to retain these employees. Among the ways we do this are generous benefits, a safe work environment and promotion of a strong work-life balance. We believe in our employees’ success, and the average employee tenure of 14 years suggests that our employees feel the same way! The Work Itself The Resilience Program & Technology Risk Manager is primarily responsible for managing Catalyst's Enterprise Resilience Program and ensuring the ongoing execution, maintenance, and regulatory readiness of the program in accordance with applicable requirements and industry guidance. Enterprise Resilience is the position's primary accountability and takes precedence over technology risk responsibilities when competing priorities arise. The position also performs technology-focused risk management activities within the Enterprise Risk Management (ERM) function, including IT and cybersecurity risk assessments, control evaluations, and third-party technology risk analysis. This position manages the resilience lifecycle, including product/service impact analysis, business impact analyses, risk assessments, recovery strategies, Resilience Plans, exercises, incident support, and program governance. The position also leads and supports IT/technical risk assessments, evaluates technology controls, incorporates IT and cybersecurity considerations into operational risk assessments, provides technical risk analysis in support of third-party risk reviews, and supports the administration and continued development of Fusion Risk Management. The role is expected to maintain working knowledge of cyber resilience concepts, including ransomware preparedness, response, recovery, and the ability to restore critical services following destructive cyber events, while partnering with Information Technology and Information Security to evaluate the effectiveness of cybersecurity controls and recovery capabilities, without responsibility for designing or implementing those controls. The role works closely with business units, Information Technology, Information Security, Internal Audit, and management to identify risk, evaluate controls and recovery capabilities, document remediation, and provide governance reporting. The Talent You Bring

The Essential Requirements:

• Bachelor’s degree in Business, Information Technology, Information Security, Computer Science, or a related field; applicable work experience may be considered in lieu of the education requirement.
• Three to five years of relevant experience in enterprise resilience, business continuity, IT risk management, information security, IT audit, operational risk, or a related field, preferably within financial services.
• Working knowledge of enterprise/operational resilience, business continuity, disaster recovery, incident response, and cyber resilience, including ransomware preparedness, response, recovery, and restoration of critical services.
• Working knowledge of IT general and application controls, cybersecurity and technology-risk frameworks (e.g., NIST CSF, ISO 27001, COBIT), and associated risks involving access management, cloud/SaaS, third-party technology, data protection/privacy, and related IT operations.
• Ability to identify and assess inherent and residual risks, evaluate control design and effectiveness, and document risk conclusions, recovery capabilities, control gaps, remediation requirements, and risk acceptance decisions.
• Advanced analytical, problem-solving, organizational, and project-management skills, including the ability to manage multiple assessments, exercises, incidents, and program deliverables concurrently.
• Strong written and verbal communication skills, including the ability to translate technical and resilience concepts into business-focused risk language, effectively challenge stakeholders, and collaborate with employees and management across departments.
• Proficiency in using generative AI tools, including Microsoft Copilot or comparable platforms, for research, analysis, information synthesis, and workflow efficiency, with an understanding of responsible AI usage, information security, data confidentiality, and the need to validate AI-generated outputs.

Additional skills and experience are a plus:

• Working knowledge of applicable FFIEC, NCUA, and other regulatory guidance affecting financial institutions, including technology, information security, authentication/access, business continuity, cyber resilience, and third-party risk expectations.
• Professional certifications in business continuity, resilience, risk management, IT audit, or information security, such as CBCP, CRISC, CISA, CISM, CISSP, CCSP, or comparable credentials.
• Experience evaluating technology recovery capabilities, including IT disaster recovery plans, recovery procedures, ransomware recovery strategies, and validation through exercises or testing; experience assessing third-party technology and cybersecurity risks, including review of SOC reports, penetration tests, and other security assurance documentation.
• Experience administering or enhancing GRC/ERM platforms, preferably Fusion Risk Management, including operational resilience capabilities, workflows, reporting, dashboards, and Salesforce-based administration.
• Experience using Microsoft Power Platform tools (including Power Automate, Power Apps, and Power BI), SharePoint, or comparable technologies to automate business processes, integrate systems, analyze data, and improve reporting; experience developing or configuring AI agents, including Microsoft Copilot Studio or comparable agentic AI solutions, is desirable.

How We'll Have Your Back Catalyst Corporate’s compensation structure offers market-competitive base pay. However, Catalyst's full compensation package is more than just your paycheck and is meant to support and improve your personal and professional life, including:

• Time Away: Federal Holidays, Vacation, Sick Time, and Parental Leave, as well as time off for volunteering.
• Planning for the Future: 401K retirement savings plan with matching and company contributions.
• Supporting your Health & Well-Being: Flexible health and insurance options, including Medical, Dental, and Vision Insurance choices, Long and Short-Term Disability Insurance, Life Insurance, Supplemental Life and AD&D Insurance, as well as a Flexible Spending Account.
• Building a Family: We were named “Best Place for Working Parents” since 2021 due to our commitment to family-friendly policies and practices.
• Work-Life Integration: Other benefits include credit union membership, a casual work environment, paid covered parking, and an onsite fitness facility with showers. In addition, we also offer access to a variety of onsite services, such as a massage therapist and personal trainer, car wash and detail service, vehicle refueling service, and food delivery service.

Who We Are With innovative payments, asset management and liquidity solutions, Catalyst is unlocking new possibilities for credit unions across the nation, and the members they serve. We are passionate about transforming goals into achievements and helping credit unions grow. Discover why more than 1,500 credit unions are using Catalyst’s solutions today: catalystcorp.org. Catalyst is an equal opportunity employer committed to diversity and inclusion in the workplace. All qualified applicants will receive consideration for employment without regard to age, race, color, sex, religion, national origin, disability, sexual orientation, gender identity or expression, pregnancy status, marital status, military or veteran status, genetic disposition or any other reason protected by law.