Information Risk Analyst

Sr. Information Risk AnalystLocation: Boston, MA or Dallas, TX (Remote Start, Hybrid future)Rate: Negotiable based on experienceDuration: 6 Mo. + (perm potential if local)Position Description:Our Sr. Information Risk Analyst is responsible for the strategic development, implementation, and effective execution of the Information Risk Management (IRM) program, the key program elements of which include internal loss, external loss, risk assessment, business impact assessments, Key Risk Indicators (KRIs), scenario analysis & stress testing.Essential Functions:Analyzes, measures IT process and control performance, monitors trends, defines limits according for Corporate Banking Op Risk exposures in accordance with the Risk AppetiteAssist in the ongoing oversight of Operational Risk (OR) Framework and Information Risk Management (IRM) requirements in support of the first line of defenseContributes to escalation, reporting, communication to Risk Governance ForumsHelps drive culture of risk awarenessParticipates in the creation and delivery of OR business-tailored training.Supports the creation, management, and development of OR program strategy, policies and models within the Corporate Banking BusinessPrimary SkillsTechnology Change and Release ManagementIT Configuration ManagementNetwork Operations and Security ManagementSecurity Logging and MonitoringBasic Technology Risk Requirements:Review and analysis of security-related configuration and hardening standards for Windows, ESX, and RedHat servers, Windows laptops/desktops, SQL Server database and network technologies within the enterprise.Reviewing configuration and policies of Information Security Scanning Tools covering operating systems and databases.Review and challenge compliance metrics published by corporate-wide audience and prepare conclusions for review by IRM (Information Risk Management) and ORM (Operational Risk Management) and senior management.Review and verify compliance with Information Security related standards and process documentation (e.g. End User Computing and Macro Governance)Supporting internal and external audit exercises.Regulatory Knowledge: Gramm-Leach Bliley Act (GLBA), Sarbanes-Oxley (SOX), OCC Heightened Standards, FFIEC Guidelines, NYDFS, GDPRGeneral Skills & Abilities:Strong technology risk management principles, methodologies and tools, governance principles and activity preferably in a financial services technology environment including knowledge of workflow/processes and risks/controlsAbility to independently operate in a complex, matrixed environment; adept at delivering and maintaining productive working relationships across business, functions, geographies and lines of defenseAdvanced operational risk, process, and control validation and/or assessment skills.Ability to direct, train and guide peers, subordinates and management.Ability to handle conflict resolution with other groups to ensure appropriate accounting guidance is followed.Ability to adjust to new developments/changing circumstances.Ability to convey a sense of urgency and drive issues/projects to closure.Ability to effectively interact with the market, executive management and vendors.Ability to adapt and adjust to multiple demands and competing priorities.Excellent written and oral communication skills.Excellent analytical, organizational and project management skills.Strong project management skills.Experience and Preferred Certifications:6+ years Risk Management/Risk.6+ years Information Technology / Information Security3+ years Financial Services industryRequired Skills: Must be local to Boston, MA or Dallas, TX (Remote Start, Hybrid future) Top 3 requirements? 1. 1st & 2nd Line IT Audit Former Hands-On IT w/ expertise in: 2 or more of the following: Identity & Privileged Access Tech Disaster Recovery Planning Tech & Cyber Incident Mgmt.