Technology Risk Senior Analyst- Data, AI and Emerging Technology

The Data, AI and Emerging Technology Risk Senior Analyst will support first-line technology risk oversight for customized data platforms, data engineering enablement, and emerging AI/ML enablement capabilities. This role is designed as a low-to-no-code governance and oversight position focused on identifying, assessing, documenting, and helping mitigate technology, data, security, stability, third-party, and AI-related risks across hybrid-cloud and on-premises environments. The analyst will partner directly with engineering, data, API, BI, AI/ML, and risk stakeholders to provide risk coverage for data transformation platforms, customized subprocess tools, AI use case triage, model/AI engineering tooling, process mapping, RCSA work, issue management, and control uplift activities.

• Act as a first-line technology risk partner for customized data platforms and data engineering enablement areas, including Talend, CCM, Commercial Data Solutions, HR Data Solutions, Fraud Data Solutions, Leapfrog & Payments Solutions, Wealth Data Solutions, and related RFT engineering processes.
• Support oversight of enterprise AI/ML enablement and tooling, including AWS Bedrock, SageMaker, H2O.ai, MLflow, Galileo/Arize, Gloo, AgentCore, and related AI/ML engineering processes.
• Serve as a delegate for AI use case triage by reviewing intake information, identifying potential technology, data, security, operational, model, and control considerations, and coordinating with appropriate stakeholders for follow-up.
• Perform stability and security discovery through periodic review of applications, code bases, logging and monitoring capabilities, authentication patterns, vulnerability data, and operational signals to identify gaps requiring risk escalation or remediation.
• Lead or support process mapping, RCSA activities, control adequacy reviews, control uplift efforts, procedure updates, and control testing support across assigned data platform and AI/ML domains.
• Identify, document, and steward technology risk issues through the enterprise issue management lifecycle, including issue creation, second-line challenge, action plan tracking, target date management, evidence review, closure, and significance downgrade support.
• Analyze risk, security, operational, and compliance data from tools such as GRC Archer, ServiceNow, Splunk, Datadog, Qualys, Sonatype IQ, Nexus, Jira, and similar platforms to identify trends, gaps, and actionable risk insights.
• Partner with first-line risk, technology, data engineering, AI/ML engineering, cybersecurity, third-party risk, audit, and second-line stakeholders to assess control design and effectiveness, support remediation, and drive risk-aligned outcomes.
• Support third-party risk coordination, internal audit inquiries, regulatory requests, and information requests related to customized data platforms, AI/ML tooling, security findings, and technology control environments.
• Develop clear, well-researched, data-driven risk reports, issue summaries, control documentation, stakeholder updates, and decision support materials within assigned deadlines.
• Use strong organizational skills and tools such as Jira, Confluence, Visio, Excel, Tableau, and enterprise documentation repositories to manage concurrent workloads, stakeholder meetings, deliverables, and follow-ups.
• Stay current on evolving data engineering, cloud, DevSecOps, AI/ML, model risk, data governance, security, and regulatory trends that may affect the bank’s technology risk profile.

This backfill is focused on customized data platform support, data integration engineering enablement, AI/ML enablement tooling, stability/security discovery, RCSA and process mapping, issue management, control uplift, third-party coordination, and AI use case triage.

Domain-Specific Technical Skills

• Working knowledge of data processing, transformation, integration, ETL/ELT, data sharing, reporting, and analytics enablement patterns across hybrid-cloud and on-premises environments.
• Familiarity with customized data platforms across a variety of deployment mores (private cloud, commercial-off-the-shelf, in-house, etc.) and technology tools supporting commercial, HR, fraud, payments, wealth, and risk/finance technology data solutions (e.g. Firco, Oracle EBS, Black Diamond Wealth, etc.).
• Understanding of DevSecOps, CI/CD, source co