Risk Analyst

Risk Analyst

This position will support the Information Technology and Cyber Security organizations in matters related to audit, compliance, and the remediation of risk. The role requires working directly with technical risk, technology, and security teams to drive tasks to completion on agreed schedules. This position is responsible for driving the delivery of remediation initiatives and working with cross-functional teams to ensure successful resolution of risk issues.

Key Responsibilities

• Lead and manage risk remediation projects from initiation through completion.
• Collaborate with business units, IT, Risk, and Internal Audit teams to drive risk evaluation and remediation processes.
• Build partnerships with key technology partners and IT areas.
• Evaluate and understand findings to help ensure proper planning of priorities and resources.
• Analyze risk findings, prioritize remediation efforts, and track progress against established metrics.
• Facilitate communication across teams to meet project requirements and deliverables.
• Work with subject matter experts to create and maintain remediation strategies, tasks, and documentation.
• Ensure alignment of remediation activities with organizational policies and regulatory requirements.
• Identify process improvements to enhance risk management and remediation effectiveness.
• Support audits, assessments, and regulatory reviews by providing evidence of remediation activities.
• Maintain knowledge of relevant regulations, frameworks, and emerging risks.
• Prepare and deliver status reports and presentations to management.

Required Qualifications

Education: Bachelor's degree in Risk Management, Business Administration, Information Security, or a related field.

Experience: 3+ years in risk management, remediation, or related fields, preferably within a large organization or consulting environment.

Skills:

• Ability to analyze complex risk issues, synthesize data, and develop actionable remediation strategies.
• Proven track record of managing multiple projects and meeting deadlines.
• Verbal and written communication skills with the ability to present complex information to technical and non-technical audiences.
• Demonstrated ability to work effectively in cross-functional teams and build working relationships.
• Familiarity with risk assessment tools, GRC platforms, and IT security concepts.
• Understanding of key regulations and industry standards (e.g., SOX, GDPR, FFIEC, ISO 27001, NIST CSF, NIST RMF).

Preferred Qualifications

• Experience using Azure DevOps or similar agile toolsets.
• Experience with technical writing.
• Experience with risk remediation in financial services, healthcare, or highly regulated industries.
• Knowledge of control testing and associated tests.
• Knowledge in Information Technology, Cybersecurity, Infrastructure, Cloud, Architecture, and Application Delivery.
• Professional certifications in risk management or cybersecurity (e.g., CISSP, CISM, CISA, CySA+, Security+, CRISC).