Role Description Do you have experience in project risk management and risk analysis for design and construction projects and enjoy collaborating with construction managers, contractors, owners, and designers? MBP is looking for a project risk consultant to support qualitative and quantitative risk management tasks across market sectors including federal government, state/local government, education, healthcare, and transit. If you have experience in this area and are ready to contribute to project success, we want to hear from you. Responsibilities - Lead and support project risk management assignments from inception through final completion. - Lead or support project risk management assignments, in alignment with the full risk management lifecycle. - Support development of a risk management plan. - Coordinate with the project teams and stakeholders to facilitate the identification of risks and develop risk reports and registers, and associated risk response actions. - Facilitate risk interviews, risk workshops, and regular risk meetings. - Develop and utilize a Probability and Impact Matrix to rate each risk on its probability of occurrence and impact on an objective if it does occur. - Perform quantitative cost and schedule risk analysis. - Assist with the prioritization of risks for further analysis. - Identify, analyze, track, record and provide guidance with respect to actions to manage and/or mitigate risks. - Assist construction and project managers to control the risk process by continuously monitoring efforts for new, changing, and outdated risks. Qualifications - Demonstrated experience in qualitative risk management. - Developing project risk management plans. - Facilitating project risk interviews, workshops, and update meetings. - Formulating risk mitigation strategies. - Maintaining project risk register. - Demonstrated familiarity with quantitative risk analysis. - Bachelor’s degree in industry-related field, advanced degree preferred. - Detailed knowledge of construction, principles of construction management and project controls. - Recent experience/technical competence in risk identification, analysis and management for projects and programs of similar scope. - Knowledge of scheduling, cost estimating, documentation, contract administration, and construction techniques. - Preferred Certifications: - AACE Project Risk Management Professional (PRMP) - PMI Project Risk Management Professional (PMI-RMP) - Certified Construction Manager (CCM) - Professional Engineer (PE) - Develop strong relationships with project stakeholders. - Exhibit interpersonal and communication skills. - Lead a team to complete tasks. - Strong verbal, written and presentation skills. - Ability to apply analytical methods and techniques as they relate to risks. - Initiate, organize and facilitate risk interviews and workshops with diverse subject matter experts. - Organizational skills to maintain and communicate risk register information. - Demonstrated skills in Microsoft Excel and other risk register platforms. - Preferred - Demonstrated familiarity with CPM scheduling software applications (e.g. Primavera P6). - Preferred - Demonstrated familiarity with quantitative risk analysis applications (e.g. @Risk, Primavera Risk Analysis, Acumen Risk, Safran Risk, RiskyProject, etc.). Guidance/Responsibility - Able to work independently, seeking guidance and direction when required. Supervisory - Non-supervisory role. Benefits - Comprehensive benefits package including 100% employer-paid medical, dental, vision, life, and disability insurance (for individual employees). - 401(k) profit-sharing plan. - Health savings account with company contributions. - Competitive compensation with opportunities for semi-annual bonuses. - Generous paid time off. - Tuition assistance. - Student loan repayment. - Annual gym reimbursement. - Pet insurance. - Paid volunteer time. - Mental health resources. - Company-wide wellness activities. - Training and development to support your professional growth. Status - Full-time. - The base salary range for this position is $94,000.00 to $114,000.00. Actual compensation will be determined based on work location, qualifications, experience, job-related skills, and relevant education or training. - Applicants must be authorized to work in the U.S. without sponsorship. - MBP is an equal opportunity employer and does not discriminate on the basis of any legally protected status or characteristic. Protected veterans and individuals with disabilities are encouraged to apply.

Role Description The Operational Risk Officer Sr is responsible for executing key oversight activities that support the bank's risk management framework. This role will coordinate risk governance processes, facilitate enterprise-wide oversight forums, and drive execution of risk appetite monitoring and validation, regulatory exam support, and issue validation. The ideal candidate has strong organizational and communication skills and a solid understanding of banking risks and regulatory expectations. - Maintains risk management programs and support risk committees. - May perform additional duties through expertise in a specific area of operational risk such as information technology, cybersecurity, fraud risk management, issue or incident management, or investigations. - Participates in process improvement initiatives to enhance risk oversight effectiveness. - Collaborates with business lines and second line risk functions to ensure alignment with the bank’s risk management program. - Coordinates Risk Management’s response to regulatory exams, internal audits, and supervisory reviews. - Supports the remediation and documentation of regulatory findings. Tracks and manages exam deliverables, data requests, and pre/post-exam communications. - Leads the collection, validation, and analysis of risk appetite metrics. Prepares dashboards and reporting packages for senior management and board committees. - Supports periodic updates and enhancements to the risk appetite framework and thresholds. Tracks committee decisions and ensures follow-up actions are documented and executed. - Familiarity with OCC Heightened Standards and other relevant banking regulations. - Provides guidance and coaching to risk officers and analysts. Represents risk management leadership and provides credible challenge to bank management through quantitative analysis and superior oral and written communication skills. Qualifications - 5 years of experience in Enterprise Risk Management. - Prior experience supporting a large bank or financial institution. Requirements - 7+ years of experience in ERM (Preferred). - Advanced understanding of ERM Frameworks and concepts (Preferred). - Knowledge of OCC regulations (Preferred). - Strong GRC platform experience (Preferred). - Previous Project Management experience (Preferred). - Data Analytics background - Power BI and Tableau is a plus (Preferred). Benefits - Physical Requirements: Sedentary Work. Company Description Posting end date - 7/13/26

• Own complex fraud investigations from end to end • Operate as the senior-most investigative authority • Partner with Compliance, Product, Engineering, and Data teams • Represent fraud findings directly to leadership • Act as senior investigative lead during fraud incidents • Drive fraud rule, threshold, and control changes • Use SQL/Databricks for data analysis behind investigations

Role Description As an Incident Response Specialist, you will leverage your extensive expertise in digital forensics, incident handling, and crisis management to lead the containment, mitigation, and resolution of advanced security incidents across the organization’s enterprise environment. This role is responsible for the end-to-end lifecycle of security incidents, including: - Coordinating cross-functional response efforts - Performing deep-dive forensic analysis - Engineering strategic containment strategies to minimize business impact You will serve as a technical leader with deep hands-on proficiency in host, network, and cloud forensics, applying incident response best practices to drastically reduce mean time to respond and remediate. This role requires exceptional analytical, problem-solving, and decisive communication skills, allowing you to: - Translate complex technical findings into actionable remediation plans for executive leadership - Work closely with Detection Engineering, Threat Intelligence, and key partners across the organization to ensure an integrated, proactive defense - Work independently with minimal supervision - Take ownership of security incidents - Provide technical mentorship and training to team members You will play a key role in shaping the organization's incident response strategy, execution of tabletop exercises, ensuring operational resiliency, and continuously hardening the organization’s overall security posture. Qualifications - H.S. Diploma or GED required - Associate Degree or Bachelor’s Degree in Cyber Security, Computer Science, Information Systems, or related field preferred - 5+ years of IT or Information Security experience, including 3+ years in Digital Forensics and Incident Response - Familiarity with MITRE ATT&CK, Cyber Kill Chain, and other threat modeling frameworks preferred - Experience in scripting, automation (e.g., Python, PowerShell), and AI for security operations preferred Requirements - Perform advanced digital forensics and incident analysis, including host, network, memory, and log analysis, to determine the root cause, scope, and impact of security breaches - Act as the primary technical incident commander during major security events, coordinating cross-functional teams, communication channels, and executive updates - Develop, govern, and continuously optimize incident response playbooks, runbooks, and tabletop simulation exercises to ensure organizational readiness - Collaborate with the Detection Engineering, Threat Intelligence, and organization stakeholders to translate post-incident findings into proactive detection rules and monitoring controls - Author detailed incident post-mortem reports and root-cause analysis documentation for technical teams and executive leadership - Conduct post-incident reviews to identify control gaps, procedural bottlenecks, and security weaknesses, translating lessons learned into strategic remediation projects - Maintain comprehensive documentation of incident timelines, evidence custody chains, response activities, and compliance metrics - Maintain comprehensive documentation of processes and activities - Provide technical leadership, guidance, and mentorship to junior and senior incident response analysts and SOC team members - Stay abreast of emerging threat actor tactics, techniques, and procedures (TTPs) and regulatory reporting requirements to ensure incident handling processes remain cutting-edge and compliant Company Description