IT Risk Analyst

The IT Risk Analyst supports the Risk Management division by identifying, assessing, and monitoring IT risks across the organization. This role is responsible for ensuring that IT risk management policies, procedures, and controls are effectively implemented and maintained, in line with internal standards and regulatory requirements.

Requirements

• Evaluate, test, and recommend IT risk management policies, procedures, and systems (hardware, firmware, software);
• Review and challenge IT architecture, designs, plans, controls, and standards to ensure alignment with risk management objectives;
• Identify IT risks and exposures, investigate causes of incidents, and propose procedures to prevent recurrence;
• Participate in the investigation of IT risk incidents, and recommend enhancements to improve risk posture;
• Develop and apply techniques for conducting IT risk assessments and compliance audits;
• Support the evaluation and testing of IT systems for potential risk impacts;
• Provide guidance and direction within IT and to business users regarding IT risk management and protection of information assets;
• Maintain up-to-date knowledge of relevant IT risk standards, frameworks, and regulatory requirements.

Benefits

• Professional certifications (e.g. CRISC, CISA, or equivalent) are a plus.