Senior IT Risk Security Analyst

To enhance IT risk management, the full-time Senior IT Risk Security Analyst will serve as a trusted advisor to IT and business teams, leading enterprise risk management activities, supporting third-party technology risk management, and managing IT audit and compliance programs. Key responsibilities Identify technology, security, and operational risks while recommending effective controls and ensuring proper risk assessment and documentation Lead annual risk assessments, facilitate risk committees, develop policies, and manage the risk register for continuous improvement of the risk management framework Evaluate third-party vendors and emerging technologies to identify security risks and implement monitoring controls, supporting disaster recovery and business continuity planning Required qualifications Bachelor's degree in information systems, Cybersecurity, Computer Science, Accounting, Business, or related field, or equivalent experience 5-8 years of experience in IT risk management, information security, IT audit, or related disciplines Professional certifications such as CISA, CISSP, CRISC, CISM, or ISO 27001 Lead Implementer/Auditor Experience with SOX ITGCs, ISO 27001, and vendor risk management Ability to influence stakeholders and communicate complex technical concepts to diverse audiences