IT Risk Management

Who you are

• Minimum of 3 years of progressive experience supporting technology risk or control assessment activities
• Strong understanding of risk and control concepts across cloud platforms, applications, networks, infrastructure, mobile technologies, and emerging technologies
• Working knowledge of technology risk and risk management frameworks such as ISO 27005, NIST CSF, and NIST 800-30 (or equivalent)
• Risk or audit-related certifications (e.g., CRISC, CISA) are considered strong assets
• Ability to clearly communicate risk concepts and findings to non-technical stakeholders
• Strong analytical skills with the ability to assess complex and interconnected technology environments
• Practical problem-solving capabilities with a focus on control effectiveness and risk reduction
• Ability to align risk analysis and recommendations with business objectives and operational constraints
• Strong research abilities related to technology controls, platforms, and risk practices
• Ability to work independently, manage priorities, and meet deadlines in a fast-paced environment
• Excellent written and verbal communication skills
• Collaborative, team-oriented mindset with experience working across multiple stakeholder groups

What the job involves

• The Senior Analyst, Technology Risk supports the organization’s Technology Risk and Governance programs through hands-on analysis, assessment, and reporting activities
• This role works closely with Digital, IT, and business stakeholders to identify technology-related risks, perform detailed risk assessments, recommend practical mitigation approaches, and track risks throughout their lifecycle
• This position requires a technically strong individual contributor with a deep understanding of risk management practices and control environments across diverse technologies and platforms
• The role emphasizes execution, analysis, and operational support rather than enterprise-level risk ownership or strategic leadership
• Identify and assess technology risks that may impact business objectives, operational resilience, and regulatory obligations
• Partner with technology and business teams to evaluate risks associated with applications, infrastructure, platforms, and data processing environments
• Document risk assessments, control observations, and mitigation recommendations in alignment with established risk frameworks
• Support risk owners by developing practical mitigation plans and tracking remediation progress
• Maintain and update risk registers, action plans, and related documentation
• Operate and maintain risk and governance tools to support consistent risk assessment and reporting processes
• Contribute to the development and maintenance of technology risk policies, standards, and procedures
• Support internal and external audit activities, including evidence collection, issue tracking, and validation of remediation efforts
• Stay current on emerging technology risks, control practices, and industry trends; apply insights to ongoing assessments
• Identification, assessment, documentation, and monitoring of technology risks
• Evaluation of existing controls and recommendation of compensating measures to reduce residual risk
• Creation and maintenance of technology risk policies, standards, and governance documentation
• Use and administration of risk and governance tools and reporting platforms
• Ongoing collaboration with technology, operations, and business teams to address risks in a timely manner
• Other responsibilities as assigned by management