Senior Risk Analyst

Senior Risk Analyst

The NYC Financial Information Services Agency-Office of Payroll Administration (FISA-OPA) seeks to hire a Senior Risk Analyst. The Senior Risk Analyst will report directly to the Director of Risk Management. This individual will be responsible for identifying and documenting the risk portfolio of FISA-OPA. This includes translating technical risks to business processes, tracking and updating the KPI dashboard and when applicable, contributing to the updates of the internal Risk Framework. The individual will work closely with the various business team leads and the Chief Information Security Officer (CISO) to understand how business and security risks impact underlying workflow processes within the agency. This individual will also be responsible for working on various technical and policy related functions such as understanding business automation workflows and defining policies around the risks with Al. Primary Responsibilities: - Partner with key stakeholders in the business to identify, assess, aggregate and document risks and controls, including risks associated with new or modified products, services, distribution channels, regulations and third-party operations. - Present findings to various levels of leadership concerning the status of system risk, policy enforcement, and Al strategies that the agency may undertake. - Contribute to the implementation of new risk policies, practices, and solutions to ensure holistic understanding and management of risks according to industry's best practice. - Enhance strategies, tools, and methodologies to measure, monitor, and report data risks. - Support the formulation of stress test plans for a line of business or the enterprise including the evaluation of results and framing of contingency plans in partnership with key business stakeholders. Preferred Skills: - Subject Matter Expert (SME) in Risk Management Frameworks and Processes. - Strong experience documenting critical business functions and operational processes. - Ability to identify and categorize risks across the organization from an operational and compliance standpoint. - Ability to develop risk management policies and procedures for the organization. - Ability to correlate information from disparate systems, business functions and operational teams to evaluate and prioritize operational and business risk based on priority. - Strong experience working on large scale cloud transformation projects, advising and documenting business impacts as part of the migratory path of on-premises to cloud assets. - Strong understanding of Al related strategies and the ability to communicate the risks when engaging with Al capabilities including agentic and LLM solutions in enterprise environments. - Strong experience performing vendor risk management and product risk management. - Strong experience writing automation scripts, SQL queries, and or building interactive dashboards. - Experience with legal contract reviews. - Technical background in Information Security, Cloud Services, Artificial Intelligence, Business Continuity and Disaster Recovery. - Must currently be permanent in the civil service title of Computer Systems Manager (or comparable title).