Senior Technology Risk Analyst

Job Description:

Position Description: 

Identifies risk by performing readiness assessments for externally audited systems. Provides technical assistance on risk related systems issues and serves as a liaison for technology risk management. Determines appropriate KPIs/KRIs for IT risk monitors. Oversees the management of controls and the mitigation of risk related to the technology environment, systems, and processes. Works closely with technology and business owners, compliance and cybersecurity teams, Information Security Officers (ISOs), and external auditors and regulators. Keeps abreast of the updates in industry standards, frameworks, and methodologies. 

Primary Responsibilities: 

• Performs proactive risk and control assessments, monitors technology controls, documents and oversees remediation plans, consults on technology control readiness, and engages with internal/external audit. 

• Assesses the various information technology risks that the business faces in its operations and implements action plans, policy and procedural changes for risk avoidance and mitigation.  

• Provides technical assistance on risk-related technology controls. 

• Evaluates control maturity by performing control design and operates effectiveness reviews and peer reviews as needed. 

• Conducts in-depth information technology risk assessments including documents controls, identifies potential gaps and/or inconsistencies and makes sound recommendations for improvement and/or mitigation. 

• Consults on information security standards and industry best practices. 

• Answers questions from internal and external audit on information technology controls.  

• Tracks action steps and ensures that findings are remediated appropriately and in a timely manner. 

• Participates, develops and leads application code and test code reviews with Analytics team. 

• Builds and maintains collaborative working relationships with Information Technology and Business personnel to design and assist in the execution of appropriate controls design and monitors. 

• Develops communications for both internal and external audiences. 

Education and Experience: 

Bachelor’s degree (or foreign education equivalent) in Computer Science, Engineering, Information Technology, Information Systems, Mathematics, Physics, or a closely related field and three (3) years of experience as a Senior Technology Risk Analyst (or closely related occupation) defining and executing technology strategy and risk management using a comprehensive governance, risk, and compliance (GRC) platform in a financial services environment. 

Or, alternatively, Master’s degree (or foreign education equivalent) in Computer Science, Engineering, Information Technology, Information Systems, Mathematics, Physics, or a closely related field and one (1) year of experience as a Senior Technology Risk Analyst (or closely related occupation) defining and executing technology strategy and risk management using a comprehensive governance, risk, and compliance (GRC) platform in a financial services environment. 

Skills and Knowledge: 

Candidate must also possess: 

• Demonstrated Expertise (“DE”) auditing internal controls and examining re