Enterprise Risk Management Analyst

Enterprise Risk Management (ERM) provides a comprehensive, cross-functional view of risk across the organization, ensuring risks are consistently identified, assessed, prioritized, and managed in alignment with the Company's strategic objectives. Through collaboration and proactive risk management, ERM helps strengthen organizational resilience and supports informed business decision-making.

The Risk Analyst plays an important role in supporting the Company's Enterprise Risk Management program and broader risk management initiatives. This position works closely with risk professionals, business stakeholders, and subject matter experts across the organization to support risk identification, assessment, documentation, monitoring, and reporting activities.

The Risk Analyst will contribute to the ongoing maturity and effectiveness of the Company's risk management practices while gaining broad exposure to a variety of risk disciplines and business functions.

The ideal candidate will have an interest in risk management, compliance, AI, or related disciplines and possess strong analytical, organizational, and communication skills. This role is well suited for an individual who is detail-oriented, eager to learn, and motivated to develop expertise in enterprise risk management.

Success in this role requires a collaborative mindset and the ability to build productive working relationships across the organization. The Risk Analyst will regularly engage with stakeholders to gather information, clarify processes, and support risk management activities. The ideal candidate can communicate effectively, ask thoughtful questions, and translate information into clear, accurate, and actionable documentation.

This position offers an excellent opportunity to develop a strong foundation in enterprise risk management while working alongside experienced risk professionals and contributing to the Company's ongoing efforts to strengthen its risk culture and overall risk management capabilities.

- Support the execution of risk assessments in alignment with the Enterprise Risk Identification and Assessment Standard and established risk management methodologies. - Support governance and oversight activities by preparing assessment materials, maintaining documentation, tracking action items, and facilitating adherence to enterprise standards. - Assist in the preparation of risk reports, dashboards, and presentations used to communicate assessment results, risk exposures, and identified issues to stakeholders and management. - Partner with business and risk stakeholders to gather information, support assessment activities, and promote consistent application of enterprise risk management practices. - Contribute to quality assurance, effective challenge, and continuous improvement activities designed to strengthen the maturity and consistency of the Enterprise Risk Management program - Support the ongoing maintenance, enhancement, and governance of enterprise risk management processes, standards, taxonomies, and methodologies.. - Demonstrates compliance with all bank regulations for assigned job function and applies to designated job

responsibilities - knowledge may be gained through coursework and on-the-job training. Keeps up to date on regulation changes. - Follows all Bank policies and procedures, compliance regulations, and completes all required annual or job-specific training. - Maintain a working knowledge of Bank's written policies and procedures regarding Bank Secrecy Act, Regulation CC, Regulation E, Bank Security and other regulations as applicable to this job description. - May be asked to coach, mentor, or train others and teach coursework as subject matter expert. - Actively learns, demonstrates, and fosters the Columbia corporate culture in all actions and words. - Takes personal initiative and is a positive example for others to emulate. - Embraces our vision to become "Business Bank of Choice" - May perform other duties as assigned.

- Bachelor's Degree in business, technology (IT/infosec/AI), risk management, or other applicable discipline or equivalent experience. Required - 1-3 years of banking, risk management, compliance, IT/InfoSec, AI, or audit experience. Required - Working knowledge of tools and techniques employed in risk identification, risk assessment, monitoring, and reporting. - Ability to work under the direction of Manager or Risk Officer/Senior Risk Analyst on assigned work efforts, which may involve working with a multitude of business units/key stakeholders or other risk professionals. - Possess strong oral and written communication skills.

Ability to present complex information to a variety of different audiences. - Knowledge of operational and enterprise risk management concepts, best practices, and regulatory guidance. - Working knowledge of Excel, Microsoft Powerpoint, MicroSoft PowerBI and knowledge IRM/GRC systems helpful. - Proven ability to problem-solve issues with moderate supervision.