How RiverWorks Credit Union Consolidated IT, Security & Compliance with GraVoc

Services: Information Security, IT Infrastructure, Managed IT

Industries: Financial

Established in 1936 and fully owned by its members, RiverWorks Credit Union is a non-profit financial institution representing individuals and families in Essex, Middlesex, and Suffolk Counties.

At a Glance

GraVoc has been RiverWorks Credit Union’s trusted IT partner for over a decade. Our team helped establish the IT foundation at both the credit union’s Lynn and newly launched Lynnfield offices from the ground up.

Today, GraVoc delivers RiverWorks’ managed IT, layered security, infrastructure, and regulatory compliance support, replacing vendor sprawl and minimizing risk exposure.

"GraVoc's Managed Services team has become a trusted extension of our IT department, providing responsive support, strategic guidance, and proactive monitoring that keeps our systems running smoothly. Their expertise has helped us improve security, reduce downtime, and give our staff confidence that technology issues will be resolved quickly and effectively. GraVoc's commitment to service and partnership has made them a valuable resource for RiverWorks Credit Union." - Colleen Twinem, EVP Compliance/Operation

The Challenge

Same rules as a bank, a fraction of the team

RiverWorks Credit Union had to manage security and compliance obligations, like NCUA and FFIEC, with a lean IT staff and budget. For many credit unions the size of RiverWorks, efforts to stay on top of digital transformation and regulatory pressure often result in vendor sprawl and greater third-party risk. RiverWorks Credit Union needed a partner that could both manage their IT systems and support them from a security and compliance perspective.

The Solution

IT, security, & compliance under one roof

RiverWorks Credit Union chose to work with GraVoc to bring its IT and information security under one roof, drawn to the compliance-first way the entire engagement is structured. Our team could own the whole stack, from IT helpdesk, layered security, and hardware to the compliance documentation that ties it all together.

A partner through disruption

When the pandemic forced a sudden shift to remote and hybrid work, GraVoc worked as a dedicated partner, helping the credit union equip its team with the necessary infrastructure and hardware, as well as serve members securely.

For a lean institution facing an overnight change to how it operated, having an IT partner who already knew its environment and had the expertise to support them made a difference.

Managed IT and infrastructure

Under a single agreement, GraVoc manages RiverWorks’ helpdesk, 24/7 monitoring, patching, backups, and IT infrastructure. We replaced the credit union’s aging network switches across its Lynn and Dorchester locations.

In a separate project, we installed new workstations and a new Datto backup appliance at the Dorchester location, decommissioning and securely disposing of the old equipment. That’s the advantage of one partner; the team securing the network is the same team that built and maintains it, so nothing falls through the cracks.

Layered security, managed in-house

RiverWorks gets its full security program from the same partner, including 24/7 managed detection and response, SIEM-based logging aligned to compliance, multi-layered email security with phishing defense, and ongoing security awareness training.

GraVoc also manages RiverWorks’ Netwrix auditing platform, giving the credit union continuous visibility into its systems.

Compliance built into the relationship

GraVoc holds a seat on RiverWorks’ Technology Steering Committee, helping leadership weigh technology direction. For a small internal team, that’s the difference between managing a vendor and gaining a technology function they don’t have to staff.

We also authored RiverWorks’ IT Strategic Plan, mapping initiatives like system lifecycle management, server virtualization, and disaster recovery straight to the credit union’s business and compliance goals.

The Outcome

Fewer vendors, more capacity, exam-ready

When audit season comes, RiverWorks isn’t chasing multiple vendors for documentation; the Information Security strategic plan, the policy manual, the Netwrix audit trail, and an independent penetration test are ready.

With GraVoc, RiverWorks also gains capacity. Our IT and security team effectively extends their in-house staff, so a lean team operates like a much larger one. This way, RiverWorks Credit Union can focus on members and expansion with the confidence that its security is being handled proactively.

Need a Trusted IT Partner for Your Credit Union?

GraVoc's Managed IT Services provide proactive monitoring, cybersecurity support, help desk services, and strategic IT guidance to keep your systems running smoothly.