Senior IS Risk Analyst | Fort Worth, TX

The Information Services (IS) Risk Analyst is responsible for identifying, assessing, documenting, and monitoring information technology risks across the organization. This role supports the execution and ongoing maturity of the IT risk management and governance program by maintaining accurate risk documentation, evaluating the design and effectiveness of IT controls, and tracking remediation. The role also supports compliance and audit activities by providing risk analysis, evidence validation, and risk-related reporting. The IS Risk Analyst will report directly to the Risk and Compliance Manager. Senior IS Risk Analyst Identify, assess, and document IT risks using approved risk methodologies. Ensure accurate and up-to-date IT risk registers and related documentation. Evaluate and determine the design and effectiveness of IT controls and identify gaps. Track risk remediation activities and validate supporting evidence. Partner with stakeholders to ensure clear risk ownership and accountability. Lead compliance initiatives and audit activities with timely documentation. Communicate IT risks and trends in clear, business-focused language. Drive alignment with applicable frameworks, policies, and standards. Contribute to continuous improvement of IT risk and Governance, Risk and Compliance (GRC) processes. Participate in security project planning and execute assigned tasks. Maintain the GRC system to ensure compliance and proper operation of GRC functions. Identify and drive process improvement by interfacing with internal business partners and leveraging prior IT audit experience to add value. Experience designing and implementing AI-enabled automation solutions to support and enhance GRC and risk management processes. Education and Experience Requirements Bachelor’s degree in computer science, Cybersecurity, Risk Management, or related degree or equivalent combination of education and experience. 7+ years of experience preferred in IT or information security risk management, compliance, audit, or GRC with a strong understanding of risk management frameworks, security controls, and risk assessment methodologies. What we look for IT risk identification, analysis, and documentation Control design and operating effectiveness evaluation Risk scoring methodologies (qualitative and/or quantitative) Technical writing and clear risk articulation Strong analytical, organizational, and problem solving skills Experience maintaining risk registers, POA&Ms, and remediation tracking Time management and prioritization in a multi-initiative environment. Familiarity with one or more of the following frameworks or standards:

NIST SP 800-171, NIST SP 800-30, ISO/IEC 27001

Understanding of common IT controls domains Experience using GRC platforms Proficiency with Microsoft Excel, Word, PowerPoint, and collaboration tools Experience designing and implementing AI-enabled process automation solutions Any Cyber Security certifications (e.g. CISA, CRISC), preferred Primarily sedentary role requiring prolonged periods of sitting at a desk and working on a computer Must have the ability to position self to maintain computers and various network equipment in the buildings, including under desks, in the server rooms, and anywhere cabling installation and maintenance would be required for troubleshooting and optimal organizational connectivity and usage Minimal lifting requirements (generally up to 10 pounds, such as a laptop or documents) What we offer our team members A great benefits package that includes (but is not limited to) Medical/ Dental/ Vision, 401(k)/Roth plan with matching, Healthcare Savings Accounts Educational Assistance (Tuition Reimbursement) Ongoing training throughout your employment with opportunities to participate in professional and personal development programs A strong focus on giving back to our communities through philanthropic opportunities We are an Equal Opportunity Employer, and we support protected veterans and individuals with disabilities through our affirmative action program. This position requires the use of information or access to hardware that is subject to the International Traffic in Arms Regulations (ITAR). To perform the position, you must be a U.S. Person as defined by ITAR. ITAR defines a U.S. Person as a U.S. Citizen, U.S. Permanent Resident ("Green Card Holder"), Political Asylee, or Refugee. Visa sponsorship is not available for this role. Only candidates authorized to work in the United States will be considered. Please note that we do not offer relocation assistance for this position. Candidates must be local or willing to relocate at their own expense. #J-18808-Ljbffr TTI, Inc.