Senior Operational Risk Analyst

Job Summary

Owning the third-party risk program, the full-time Senior Operational Risk Analyst will build and manage GRC risk reporting as a continuous operation, producing monthly risk reports framed by business impact and tracking remediation across all frameworks.

Key responsibilities

• Build and run GRC risk reporting, including risk intake, scoring, treatment tracking, and centralizing risk data into actionable dashboards
• Produce monthly risk reports for security leadership with executive-ready commentary focused on business impact
• Manage the third-party risk program, including vendor tiering, security assessments, and remediation tracking

Required qualifications

• 5+ years of experience in operational risk, IT risk, or GRC within a regulated environment
• Proven experience in producing monthly risk reporting for risk committees and executives
• Experience in testing controls for effectiveness and conducting third-party risk assessments
• Familiarity with GRC tooling is preferred