Senior IT Risk Security Analyst

Job Summary

To enhance IT risk management, the full-time Senior IT Risk Security Analyst will serve as a trusted advisor to IT and business teams, leading enterprise risk management activities, supporting third-party technology risk management, and managing IT audit and compliance programs.

Key responsibilities

• Identify technology, security, and operational risks while recommending effective controls and ensuring proper risk assessment and documentation
• Lead annual risk assessments, facilitate risk committees, develop policies, and manage the risk register for continuous improvement of the risk management framework
• Evaluate third-party vendors and emerging technologies to identify security risks and implement monitoring controls, supporting disaster recovery and business continuity planning

Required qualifications

• Bachelor's degree in information systems, Cybersecurity, Computer Science, Accounting, Business, or related field, or equivalent experience
• 5-8 years of experience in IT risk management, information security, IT audit, or related disciplines
• Professional certifications such as CISA, CISSP, CRISC, CISM, or ISO 27001 Lead Implementer/Auditor
• Experience with SOX ITGCs, ISO 27001, and vendor risk management
• Ability to influence stakeholders and communicate complex technical concepts to diverse audiences