Job Location: New York, New York (Hybrid 3 days onsite)
Job Type: Contract
Experience level: 5-7 years
A global bank is seeking a Technology Risk Analyst who will be responsible for the development and implementation of an enterprise-wide technology and cyber risk management program within the second Line of Defense to ensure that risks are appropriately identified, assessed, monitored and managed.
Essential Duties and Responsibilities:
Asist the team to Implement/Operate the Technology, Cyber Risk Management Frameworks that provides oversight and independent challenge to the first line through an effective and objective assessment.
Assess the accuracy, completeness, and adequacy of risks and controls Analyze business processes and requirements to ensure compliance with security policies and procedures
Perform effective challenge of critical and high-risk technology processes, controls and compliance activities
Recommend enhancements to the business/technology processes and controls to improve effectiveness of technology & vendor risk management capabilities
Perform risk tracking, trending, analysis, and executive reporting
Analyze regulatory compliance activities across Technology and Cyber Coordinate the execution of compliance gap assessments
Track, monitor, report on action plans Support design, delivery, and monitoring of Technology Risk Management training and awareness program
Requirements: • Bachelor's degree in Information Technology, Information Security, Business Administration or Risk Management (or equivalent professional qualification), Master's Degree desirable • 5-7 years' experience specifically in Information Security and/or technology risk management • Prior experience in the Financial Services industry is required • Experience with GRC tools and other risk management information systems is preferred • Enhancing control processes • Experience with developing and implementing risk management programs • Experience interacting with regulators, preferably FRB and NY DFS • Demonstrated ability to work effectively in a team environment as well as independently • Demonstrated ability to drive projects
Strong analytical skills and advanced Microsoft Office (Word, Outlook, Excel, and PowerPoint) capabilities • Industry recognized certifications within the domains of information security and or privacy (e.g., CISSP, GIAC, CISM, CISA, CIPP, CTPRP, CCSP, etc.) considered a plus