Senior Compliance Testing Analyst

The Sr. Compliance Testing Analyst executes the compliance monitoring and testing program. The incumbent develops testing scripts, defines sampling approaches and test attributes, executes testing across consumer deposit, lending, digital, and marketing activities, and determines whether identified exceptions represent isolated errors or systemic control weaknesses. The incumbent evaluates results, prepares workpapers and findings, and tracks remediation to closure.

This position is dedicated to compliance monitoring and testing.

Contributes to the development of the annual risk-based compliance monitoring and testing plan by providing testing history, exception data, and prior findings, and executes assigned coverage under the approved plan. Scope and frequency are aligned to the compliance risk assessment, regulatory change, examination findings, and complaint trends identified by the complaint program.

Develops monitoring and testing scripts for assigned regulatory areas, confirming that testing methodology, sampling approach, and documentation standards are sound and consistently applied. Submits scripts to the AVP for review and approval prior to execution.

Performs compliance monitoring and testing across consumer deposit, lending, digital, and marketing activities; gathers and evaluates supporting documentation; and determines whether identified exceptions represent isolated errors or systemic control weaknesses. Expands samples as necessary to determine the scope and impact of identified exceptions, including the members, accounts, and time period affected, and documents the basis for any expansion.

Serves as the department’s senior resource for testing methodology and workpaper standards. Performs quality review of monitoring and testing workpapers prepared by other analysts, provides technical direction and coaching, and confirms that conclusions are supported by the evidence in the file.

Incorporates the results of first-line quality assurance and quality control functions into second-line monitoring coverage where available, and identifies gaps between first-line and second-line coverage

Meets with business unit management to communicate testing results, reviews management action plans for sufficiency including root cause, corrective action, ownership, and target date, and returns insufficient plans to the business unit. Does not author the business unit’s corrective action. Tracks remediation to closure, validates the sufficiency of closure evidence, and escalates aging or unresolved items to the AVP.

Uses complaint trend data provided by the complaint program as an input to testing scope and sample selection, and refers control weaknesses identified through testing to the complaint program where they may explain complaint volume. Does not perform complaint intake, research, or response.

Performs targeted or expanded testing at the direction of the AVP in response to complaint trends, examination findings, self-identified issues, or suspected control failures, and documents the scope, basis, and results.

Maintains program documentation for the areas assigned, including monitoring and testing procedures, quality standards, and workpaper retention practices.

Tests marketing materials, advertisements, disclosures, and member communications across print, digital, and social media channels against applicable regulatory requirements, and documents results and feedback provided to Marketing.

Independently researches and responds to routine compliance questions arising from testing work, citing the applicable regulatory authority. Escalates novel, contested, or higher-risk interpretive questions to the AVP or VP, Compliance; does not issue formal second-line opinions or engage outside counsel.

Evaluates the impact of regulatory change on monitoring scope and test attributes, and recommends adjustments to program coverage.

Supports compliance examinations and internal audits by preparing requested documentation, demonstrating the design and operating effectiveness of monitoring and testing controls, and drafting responses to findings. Prepares monitoring, testing, and remediation reporting for the AVP’s presentation to the VP, Compliance, senior management, the Compliance Committee, and the Board of Directors.

Contributes to the compliance risk assessment process by providing monitoring and testing results and exception data that inform inherent risk, control effectiveness, and residual risk conclusions.

Performs testing of regulated processes executed by third parties on TFCU’s behalf, and supports co-sourced testing engagements, including workpaper review and confirmation that TFCU’s methodology is applied rather than the vendor’s.

Identifies opportunities to enhance program efficiency and effectiveness, including the use of data analytics, automation, and reporting tools to expand testing coverage and improve exception detection.

Maintains a high level of compliance expertise, including consumer compliance laws and regulations and a current working knowledge of emerging risks, how they may impact the credit union, and mitigating controls, by attending training, participating in professional organizations, and reviewing industry publications.

Performs related tasks and other projects as assigned.

Bachelor’s degree in business, accounting, finance, or a related field.

Five to eight years of related compliance, risk, audit, or quality control experience in the financial services industry, preferably in a credit union or bank, including at least three years executing a compliance monitoring and testing program with responsibility for workpaper documentation and finding development

Demonstrated experience designing test scopes, defining sampling approaches, and developing test attributes, not solely executing scripts prepared by others.

Experience with quality control and quality assurance in a financial institution, with specific experience in deposits and lending, is preferred.

Experience drafting compliance procedures, workpapers, testing scripts, and testing summaries with limited revision required by a reviewer.

Working knowledge of consumer deposit and lending products, services, and the regulations that govern them.

Professional certification in compliance or auditing (such as NCCO, CRCM, or CUCE) is preferred, or willingness to obtain.

Or an equivalent combination of education and experience.

Thorough knowledge of key credit union regulations, including ECOA/Reg B, HMDA/Reg C, TILA/Reg Z, RESPA/TRID, FCRA, GLBA/Reg P, Reg E, Reg CC, Truth in Savings/Part 707, SCRA, MLA, flood, and UDAAP, sufficient to scope and execute testing without step-by-step direction.

Demonstrated ability to design testing methodology, define sampling approaches, and evaluate whether exceptions indicate isolated errors or systemic control weaknesses.

Ability to read, analyze, and interpret regulations, regulatory guidance, professional journals, and technical procedures, and to apply them to TFCU products and processes.

Ability to define problems, collect and analyze data, establish facts, and draw valid conclusions.

Ability to develop and execute testing procedures and to document work so that an independent reviewer, internal auditor, or examiner can follow the work performed and reach the same conclusion from the file alone.

Ability to review the work of other analysts constructively and to raise a documentation or conclusion gap without discouraging the preparer.

Ability to deliver difficult findings constructively and to sustain productive working relationships with business units under disagreement.

Ability to distinguish research and analysis from regulatory interpretation, and to recognize when a question exceeds the position’s authority and must be escalated.

Ability to write clear, well-organized reports, workpapers, procedures, and testing summaries.

Ability to focus on detail and verify the accuracy of numbers, data, and text.

Proficiency with Microsoft Office applications, including the ability to create, edit, and format documents and to sort, filter, and analyze data in Excel. In-depth knowledge and experience with data analysis is preferred, including the ability to work with transaction-level data sets to build samples, identify outliers, and expand testing coverage.

Ability to enter, sort, and extract information from database and reporting systems.

Ability to interact tactfully and effectively with all levels of management, business unit staff, auditors, regulators, and examiners while maintaining strict confidentiality.

Ability to collaborate and build partnerships with multiple business units and to communicate compliance requirements to audiences with varying levels of regulatory knowledge.

Ability to handle sensitive and confidential information appropriately and to maintain the confidentiality of testing results prior to issuance.

Ability to independently prioritize and sequence a portfolio of concurrent testing and remediation assignments, manage competing deadlines, and work independently as well as collaboratively.

Has knowledge of and adheres to credit union policies and procedures and all regulations related to the Bank Secrecy Act, the USA PATRIOT Act and OFAC.

Ability to sit, stand, and walk for extended periods and demonstrate sufficient dexterity and vision to operate a variety of office equipment.

Ability to work the hours needed which may extend beyond the defined work schedule when operating conditions dictate.

Ability to lift up to 15 lbs., with or without assistance, in compliance with ADA.