Senior IS Risk Analyst | Fort Worth, TX

IS Risk Analyst The Information Services (IS) Risk Analyst identifies, assesses, documents, and monitors information technology risks across the organization. This role supports the execution and ongoing maturity of the IT risk management and governance program by maintaining accurate risk documentation, evaluating the design and effectiveness of IT controls, and tracking remediation. It also supports compliance and audit activities by providing risk analysis, evidence validation, and risk‑related reporting. Responsibilities Identify, assess, and document IT risks using approved risk methodologies. Ensure accurate and up‑to‑date IT risk registers and related documentation. Evaluate the design and effectiveness of IT controls and identify gaps. Track risk remediation activities and validate supporting evidence. Partner with stakeholders to ensure clear risk ownership and accountability. Lead compliance initiatives and audit activities with timely documentation. Communicate IT risks and trends in business‑focused language. Drive alignment with applicable frameworks, policies, and standards. Contribute to continuous improvement of IT risk and GRC processes. Participate in security project planning and execute assigned tasks. Maintain the GRC system to ensure compliance and proper operation of GRC functions. Identify and drive process improvement by interfacing with internal business partners. Design and implement AI‑enabled automation solutions to support and enhance GRC and risk management processes. Education and Experience Requirements Bachelor's degree in computer science, cybersecurity, risk management, or related field or equivalent combination of education and experience. 7+ years of experience in IT or information security risk management, compliance, audit, or GRC with a strong understanding of risk management frameworks, security controls, and risk assessment methodologies. Desired Skills and Qualifications IT risk identification, analysis, and documentation. Control design and operating effectiveness evaluation. Experience with risk scoring methodologies (qualitative and/or quantitative). Technical writing and clear risk articulation. Strong analytical, organizational, and problem‑solving skills. Experience maintaining risk registers, POA&Ms, and remediation tracking. Time management and prioritization in a multi‑initiative environment. Familiarity with one or more of the following frameworks or standards: NIST SP 800‑171, NIST SP 800‑30, ISO/IEC 27001. Understanding of common IT controls domains. Experience using GRC platforms. Proficiency with Microsoft Office and collaboration tools. Experience designing and implementing AI‑enabled process automation solutions. Any cyber security certification (e.g., CISA, CRISC) preferred. Physical capability to set up computers and network equipment, including limited lifting up to 10 pounds. Benefits Medical, dental, vision coverage, 401(k)/Roth plan with matching, health savings accounts. Educational assistance (tuition reimbursement). Ongoing training and professional development programs. Community giving and philanthropic opportunities. Additional Information Relocation assistance is not offered; candidates must be local or willing to relocate at their own expense. The position requires handling ITAR‑subject equipment; candidates must be U.S. Persons (citizen, permanent resident, political asylee, or refugee). Visa sponsorship not available; only qualified candidates authorized to work in the United States will be considered. Equal Opportunity Employer We are an Equal Opportunity Employer, and we support protected veterans and individuals with disabilities through our affirmative action program. We are required to notify all applicants of their rights pursuant to federal employment laws. #J-18808-Ljbffr Phase2 Technology