Technology & Cyber Risk Lead Analyst

• Manages internal projects on threat issues, measuring effectiveness of first line defenses.
• Establishes and oversees application of compliance, technology, and cyber policies, tools, and governance processes to provide credible challenge for minimizing losses.
• Independently assesses technology and cyber risks and drives actions to address root causes of operational risk losses, challenging historical and proposed practices.
• Leads independent assurance activities to assess areas of concern, including substantive and controls testing.
• Monitors, evaluates, and challenges Key Risks and Key Risk Indicators triggers/thresholds; leads discussions on breaches and actions.
• Identifies potential risks in program/project delivery on a technical and detailed level.
• Leads various second line of defense technology and cyber assessments including risk, control, maturity, etc.
• Assesses technology and cyber risks of new initiatives and programs being proposed for implementation.
• Challenges design, adequacy, and strength of control environment; recommends actions to align operational risk profile with risk appetite.
• Executes ad-hoc activities for TCCORO: researching presentation materials, coordinating audit/examination deliverables, maintaining data for executive reporting.

Key requirements:

• 10+ years in technology and cyber risk assessments, metrics, and controls in complex, diverse organizations.
• Advanced knowledge in control design and operating effectiveness evaluation, testing, and reporting.
• Proficiency in creating written executive materials and verbal presentation to Executive audiences.
• Communication and influencing skills, with ability to connect with individuals at all levels.
• Relationship management skills managing conflict and issue resolution with senior stakeholders.
• Expert in risk management frameworks (e.g., ISO27001, COBIT, TOGAF, CRI).
• Knowledge of products in coverage area (e.g., Markets, Banking), including technical understanding of current trends.
• Knowledge of technology and cyber risks and controls across domains: data protection, IAM, vulnerability management, network security, endpoint security, logging, incident management, and third-party management.

Nice to have:

• Experience reviewing technology architecture design and solutions.
• Knowledge of system, software, and security development lifecycle.
• Knowledge of InfoSec and Cyber security controls, technologies, operations.
• Knowledge of risks and controls for Payment, Trade, and Banking applications.