IT Risk Analyst

About the job

The IT analyst supports the IT risk management practice, which ensures risk is proactively identified, decide, communicated and monitored. The primary responsibilities of the IT analyst are to analyze different business scenarios of clients, gather risk requirement and develop risk management products that suites customer needs, perform assessments of potential risk exposures and prepare actionable risk reporting. In this role, the analyst will be writing proposals, engaging in demos with customers and OEM to automate their risk management practices. It is critical to foster strong working relationships with leaders in other areas of the enterprise to perform evaluations of the enterprise risk posture and to offer independent advice regarding ways to reduce risk in line with established risk appetites.

Behaviors:

• Thinks critically and analytically, with the ability to express a point of view supported by data (for both technical and nontechnical audiences)
• Raises concerns early and facilitates constructive problem-solving at all levels of the enterprise; knows when to escalate
• Exhibits passion and expertise in technology and cybersecurity domains, with an ability to be confident, respectful and articulate when registering dissenting or unpopular opinions
• Collaborates effectively with colleagues, stakeholders and leaders across multiple organizations to get consensus, socialize strategy and achieve objectives
• Manages multiple parallel initiatives while maintaining superior results
• Is execution-oriented and self-motivated

Desired Accomplishments:

• Succinctly frame emerging threats and risk in alignment with the existing risk profile.
• Distill complex risk, process and control relationships into simple dashboards/reports.
• Demonstrate robust risk management oversight in supporting various internal audits and regulatory exams.
• Support the development of the IT risk management practice, framework and methodologies.

Basic Qualifications:

• Bachelor’s degree in computer science or related field
• At least three years of experience performing IT risk assessments

Preferred Qualifications:

• At least one professional risk or security management certification, such as Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP)
• Data science/analytics experience