Principal Risk Analyst (Technology Risk)

Overview

Responsible for identifying, assessing, and mitigating technology-related risks within the company. The ideal candidate will analyze systems and processes to ensure compliance with internal policies, industry regulations, and best practices in cybersecurity and data protection. Work independently to interpret and develop solutions to complex business challenges that have a significant impact on the function or branch. Specialized skill set in collaborating with various teams to implement risk management strategies and improve the overall security posture of the company. Recognized as an expert in own area within the company.

Responsibilities

• Plan the research for and development of specialized risk assessment scopes
• Conduct regular risk assessments and vulnerability analysis of IT systems, software applications and networks to address threats and weaknesses
• Identify potential business risks, operational, technology and regulatory process deficiencies and improvement opportunities
• Gather and synthesize data; present conclusions and offer risk mitigation, remediation and process improvement solutions to management
• Participate in the development of remediation plans, including documenting, managing, and reporting on risk response measures
• Work closely with IT, security, and compliance teams to communicate and mitigate risks, as well as to promote a culture of risk awareness across the organization - Considerable impact
• Prepare risk management reports and dashboards for senior management, highlighting risks, issues, and recommendations for improvement
• Assist with the development and enhancement of practices, procedures, and instructions
• Develop and maintain strong working relationships with team members, subject matter experts, and leaders; work with senior management on complex issues
• Lead moderate to large projects and initiatives
• Mentor lower level staff

• 7-10 years of experience in risk management
• Subject matter expert within business area/specialization with understanding of interrelationships of different disciplines
• Relevant certifications (e.g., CISSP, CISA, CRISC, or similar)
• Strong knowledge of cybersecurity principles, risk assessment methodologies, and IT governance frameworks
• Significant experience managing multi-faceted projects simultaneously that have cross-departmental impact
• Proven ability to plan, organize and effectively execute risk mitigation and process improvement initiatives
• Advanced organizational, planning and time management skills
• Advanced research and analytical skills
• Bachelor's Degree in Business Administration, Auditing, or related field or equivalent combination of training, education and experience

• Master's Degree in related field or equivalent combination of training, education and experience