Senior Risk Analyst

The Senior Risk Analyst will work with the IT Risk function to provide senior judgment and advisory support on complex risk determinations, and will be responsible for monitoring patterns across risk assessments and contributing to the evolution of the integrated risk framework. The role will require a strong understanding of IT risk management, cybersecurity risk, and regulatory frameworks, as well as experience working with GRC platforms and AI/ML technologies.

Requirements

• 7–10 years of progressive experience in IT risk management, cybersecurity risk, IT audit, privacy compliance, or a closely related field
• Demonstrated track record of independent, senior-level risk judgment — including experience handling complex, ambiguous, or high-stakes risk determinations
• Deep knowledge of NIST Cyber Risk Management Framework, NIST 800-53 controls library, and at least one major privacy regulatory framework (GDPR, EU AI Act, GxP, CCPA)
• Experience working with GRC platforms at an advanced level (ServiceNow GRC or equivalent); ability to review, validate, and ensure quality of records produced by others
• Strong executive communication skills; experience preparing and presenting risk findings to senior leadership or audit/compliance audiences
• Experience with AI/ML, automation, or emerging technology risk programs — including digital transformation and data privacy risk governance