Cyber Risk Mgmt Sr Analyst

Texas Capital Bank; Richardson (TX); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health insurance

Wellness program

Fertility and family building aids

Retirement savings with 401K match

Job summary

Texas Capital Bank is seeking an experienced Information Risk professional to support the 2LOD function. You will analyze risk across information security, technology, and cyber domains, produce governance reports, and partner with business units to strengthen controls.

You will lead risk assessments, validate risk indicators, and prepare executive dashboards for senior management and board committees. This role requires deep regulatory awareness and strong communication skills.

Qualifications

• Experience delivering information risk & security programs in large enterprise environments.
• Ability to translate complex risk data into actionable reports for senior leadership.
• Strong collaboration with regulators, auditors, and cross-functional teams.

Responsibilities

• Provide independent oversight of information security, technology, and cyber risks across the enterprise.
• Lead risk assessments, control reviews, and risk validation activities.
• Analyze risk data and develop governance documentation and executive dashboards.

Skills

Cybersecurity GRC

Vulnerability Management

Incident Response

Threat Intelligence

Regulatory Compliance

Executive Reporting

Tools

AWS Cloud

Job description

Texas Capital is built to help businesses and their leaders. Our depth of knowledge and expertise allows us to bring the best of the big firms at a scale that works for our clients, with highly experienced bankers who truly invest in people's success - today and tomorrow.

While we are rooted in core financial products, we are differentiated by our approach. Our bankers are seasoned financial experts who possess deep experience across a multitude of industries. Equally important, they bring commitment - investing the time and resources to understand our clients' immediate needs, identify market opportunities and meet long-term objectives. At Texas Capital, we do more than build business success. We build long-lasting relationships.

Texas Capital provides a variety of benefits to colleagues, including health insurance coverage, wellness program, fertility and family building aids, life and disability insurance, retirement savings plans with a generous 401K match, paid leave programs, paid holidays, and paid time off (PTO).

Texas Capital is headquartered in Dallas with offices in Austin, Fort Worth, Houston, Richardson, Plano, San Antonio, Chicago, Los Angeles and New York. For more information about joining our team, please visit us at www.texascapital.com .

The Information Risk function serves as the Bank's Second Line of Defense (2LOD), independently assessing and monitoring information risks across the organization. This role supports the Information Risk Team by translating complex data into clear, actionable reports that inform senior management and decision-making committees on the Bank's risk posture and strategy. Responsibilities include conducting, creditable review & Challenge, and validating risk assessments; analyzing the potential impact of identified risks; recommending mitigation strategies; and developing governance documentation. The position also prepares detailed reports for senior, executive, and board-level committees while contributing to broader risk activities such as business impact assessments, key risk metrics, scenario analysis, material risk identification, and issue management.

Responsibilities

• Served as a key member of the Information Risk function, providing independent oversight and challenge of information security, technology, and cyber risks across the enterprise.
• Led risk assessments, control reviews, and risk validation activities to identify emerging threats, assess business impact, and recommend effective mitigation strategies.
• Analyzed enterprise risk data, specifically vulnerability management results, security assessments, and operational metrics to identify trends and strengthen the organization's risk posture.
• Developed and maintained Information Risk governance frameworks, including policies, standards, procedures, risk methodologies, and supporting documentation.
• Produced executive-level reporting and dashboards for senior leadership, risk committees, and Board committees, translating complex technical risks into concise business-focused insights.
• Partnered with business units, technology teams, and control functions to support risk management, regulatory compliance, and strategic initiatives.
• Oversaw key risk management activities including Risk and Control Self-Assessments (RCSAs), Key Risk Indicators (KRIs), scenario analysis, issue management, and material risk identification.
• Supported regulatory examinations and audits by ensuring risk documentation, evidence, and reporting met regulatory and governance expectations.
• Evaluated cybersecurity and technology risks related to cloud environments, third-party vendors, software development, vulnerability management, and operational resilience.
• Developed actionable recommendations that improved risk governance, control effectiveness, and decision-making across the organization.
• Created executive dashboards, risk heatmaps, and trend analyses to provide timely visibility into risk exposures and mitigation efforts.
• Collaborated with regulators, auditors, and stakeholders to ensure alignment with industry standards and regulatory requirements.

Core Competencies

• Cybersecurity Governance, Risk & Compliance (GRC)
• Vulnerability Management
• Incident Response Management
• IT GRC Controls Assessment & Control Testing
• Security Audit & Audit Readiness
• Threat Hunting & Threat Intelligence
• Third-Party / Vendor Risk Management
• Secure SDLC & Security Documentation
• Cloud Security & AWS Risk Monitoring
• SOX, SOC, ISO, NIST, NIST RMF, CRI, BASIL COBIT & PCI DSS Alignment
• Penetration

Key Skills and Knowledge in the following areas

• Vulnerability & Exception Management
• Information Risk Management (2LOD)
• Cybersecurity Governance, Risk & Compliance (GRC)
• Risk & Control Self-Assessments (RCSA)
• Key Risk Indicators (KRI)
• Regulatory Exam & Audit Management (OCC, FDIC, FRB)
• Information Security Risk Assessments
• Executive & Board Reporting
• Enterprise Risk Management
• Third-Party Risk Management
• Issue Management & Remediation O