Cyber Pentest Sr Analyst

Texas Capital; Richardson (TX); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Health insurance coverage

Wellness program

Fertility and family building aids

Life and disability insurance

Retirement savings with 401K match

Paid leave programs

Paid holidays

Paid time off (PTO)

Job summary

Texas Capital is seeking an Information Risk professional to join our Second Line of Defense. You will translate complex data into clear, actionable reports for senior management and committees, helping shape risk posture and strategy across the bank.

The role covers risk assessments, governance documentation, scenario analysis, key risk metrics, and collaboration with control offices to deliver timely risk reporting. A strong analytical mindset and communication skills are essential.

Qualifications

• Bachelor’s degree or equivalent in a related field with emphasis on risk, analytics or IT.
• Experience reading, interpreting and administrating regulatory and risk requirements; FRB/OCC/FDIC familiarity preferred.
• Ability to communicate results to both technical and business audiences.
• Analytical mindset with problem solving, initiative, and prioritization skills.
• Ability to translate data into actionable risk insights and reports.

Responsibilities

• Drive risk identification by analyzing data from management systems and security tools to uncover risk trends.
• Synthesize insights and generate reports for stakeholders and committees.
• Deliver actionable risk mitigation recommendations using data-driven analysis.
• Maintain governance documentation and reports for auditors and regulators.
• Collaborate with control offices to align risk reporting and timelines.
• Develop risk reports with findings, impacts, and mitigation strategies.
• Visualize data with charts and dashboards for diverse audiences.
• Lead governance documents: policies, standards, procedures and process maps.
• Take on additional duties and projects as assigned.

Skills

Cybersecurity Governance

Risk & Compliance

Security Risk Management

Assessment & Control Testing

Security Audit & Readiness

Threat Intelligence

Vendor / Third-Party Risk

Secure SDLC

Cloud Security

Regulatory (SOX, PCI DSS, NIST)

Education

Bachelor’s degree in Finance/Accounting/Business/Analytics/CS

Tools

MS Office

Visio

PowerPoint

Excel

PowerShell

Python

Job description

Texas Capital is built to help businesses and their leaders. Our depth of knowledge and expertise allows us to bring the best of the big firms at a scale that works for our clients, with highly experienced bankers who truly invest in people’s success — today and tomorrow.

While we are rooted in core financial products, we are differentiated by our approach. Our bankers are seasoned financial experts who possess deep experience across a multitude of industries. Equally important, they bring commitment — investing the time and resources to understand our clients’ immediate needs, identify market opportunities and meet long-term objectives. At Texas Capital, we do more than build business success. We build long‑lasting relationships.

Texas Capital provides a variety of benefits to colleagues, including health insurance coverage, wellness program, fertility and family building aids, life and disability insurance, retirement savings plans with a generous 401K match, paid leave programs, paid holidays, and paid time off (PTO).

Texas Capital is headquartered in Dallas with offices in Austin, Fort Worth, Houston, Richardson, Plano, San Antonio, Chicago, Los Angeles and New York. For more information about joining our team, please visit us at www.texascapital.com.

Brief Overview of Position

The Information Risk function serves as the Bank’s Second Line of Defense (2LOD), independently assessing and monitoring information risks across the organization. This role supports the Information Risk Team by translating complex data into clear, actionable reports that inform senior management and decision‑making committees on the Bank’s risk posture and strategy. Responsibilities include conducting, reviewing, and validating risk assessments; analyzing the potential impact of identified risks; recommending mitigation strategies; and developing governance documentation. The position also prepares detailed reports for senior, executive, and board‑level committees while contributing to broader risk activities such as business impact assessments, key risk metrics, scenario analysis, material risk identification, and issue management.

Core Competencies

• Cybersecurity Governance, Risk & Compliance (GRC) | Vulnerability Management | Incident Response Management | IT GRC Controls
• Assessment & Control Testing | Security Audit & Audit Readiness | Threat Hunting & Threat Intelligence | Third-Party / Vendor
• Risk Management | Secure SDLC & Security Documentation | Cloud Security & AWS Risk Monitoring | SOX, SOC, ISO, NIST, NIST RMF, CRI, BASIL
• COBIT & PCI DSS Alignment | Penetration Testing & Security Assessment | Executive Reporting & Risk Metrics

Responsibilities

• Drive risk identification by proactively analyzing data from enterprise and technical management systems, security scanning tools, and identity management solutions to uncover and track risk trends.
• Synthesize and communicate insights by aggregating complex data and generating detailed reports that inform key stakeholders and decision‑making committees.
• Deliver actionable recommendations for risk mitigation strategies, leveraging data‑driven analysis to influence business outcomes.
• Ensure accuracy and completeness of all risk management documentation and reports submitted to internal and external auditors and regulators, upholding the highest standards of integrity.
• Collaborate strategically with business control offices and risk reporting functions to align and deliver timely information risk management reporting.
• Interpret findings and generate solutions by providing detailed reports with actionable recommendations to strengthen security posture.
• Champion policy development by leading the creation and enhancement of security policies and procedures based on test results, driving continuous improvement of security frameworks.
• Develop and present risk reports that clearly highlight key findings, potential impacts, and mitigation strategies to support informed decision‑making.
• Visualize complex data using charts, graphs, and dashboards to effectively communicate risk levels and trends to diverse audiences.
• Lead governance documentation efforts by writing and maintaining governance documents, including policies, programs, standards, procedures, and process maps, ensuring alignment with organizational strategy and regulatory requirements.
• Take ownership of additional duties or projects as assigned, demonstrating flexibility and commitment to organizational goals.

Qualifications

• Bachelor’s degree (preferred in Finance, Accounting, Business, or Analytics, Computer Science); or equivalent combination of education, training, experience
• Risk Compliance and/or Audit experience, with experience reading, interpreting, tracking, and administrating regulatory and general risk requirements Experience with regulators (FRB, OCC, FDIC), preferred but not required
• Ability to communicate results to both technical and business audiences.
• Strong analytical and problem‑solving mindset, focused on results with critical thinking, research and problem‑solving, and decision‑making skills.
• Ability to implement and communicate actionable insights to streamline processes/transactions.
• Highly self‑motivated with a strong sense of initiative.
• Ability to manage competing priorities on concurrent large, complex projects, initiatives, and deliverables.
• Strong verbal, written, and interpersonal communication skills.
• Strong technical proficiency in the use of MS Office, including Visio, PowerPoint, Excel and PowerShell, and Pythons scripting experience using these tools to build system designs and provide updates during weekly, monthly and quarterly reporting periods.

The duties listed above are the essential functions, or fundamental duties within the job classification. The essential functions of individual positions within the classification may differ. Texas Capital Bank may assign reasonably related additional duties to individual employees consistent with standard departmental policy.Texas Capital is an Equal Opportunity Employer.