IT Risk Analyst

About the role

The IT Risk Analyst will lead the implementation and monitoring of the bank's IT risk management framework. You will work closely with IT and business stakeholders to align risk appetite, assess threats, and ensure controls are effective across the technology environment.

Key responsibilities

• Implement and maintain the IT risk management process, including risk appetite definition and integration with business goals.
• Develop and operate the IT control monitoring system, track control inventory, and manage remediation plans.
• Execute IT risk assessments, compare risks against bank‑defined criteria, and evaluate past risk handling.
• Produce risk reports for management, business units, and individual audiences.
• Deliver risk awareness training and education to IT staff.
• Identify gaps in processes, recommend improvements, and support migration initiatives.
• Maintain risk metrics, report risk posture to IT leadership, and prepare for internal and external audits.
• Track and follow up on remediation actions from self‑assessments and audit findings.
• Develop and coordinate risk mitigation and response plans, collaborating with audit teams and owners.
• Integrate risk management practices into the software development life cycle.

Required profile

• Experience implementing IT risk management processes.
• Ability to define and quantify risk appetite in line with bank policies.
• Proven track record of conducting IT risk assessments and reporting results.
• Experience delivering risk awareness training to technical teams.

Required skills