General Description

The Senior Risk Analyst is responsible for executing and documenting design effectiveness (DE) and operating effectiveness (OE) testing of IT and Cybersecurity controls across applications, databases, infrastructure, and cloud services. The role safeguards the integrity, availability, and confidentiality of technology that supports financial reporting and critical operations, ensuring compliance with applicable banking regulations (e.g., SOX, NYDFS) and alignment to leading frameworks and standards (e.g., NIST, CRI, CCM, PCI DSS, FFIEC) as well as the institution’s internal policies and standards. The Sr. Risk Analyst partners with firstline technology owners, internal/external auditors, cyber risk teams, and business stakeholders to drive effective control execution, timely remediation o...