Cyber Risk Mgmt Sr Analyst

Texas Capital; Richardson (TX); On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

Health insurance

Wellness program

401K match

Paid leave

PTO

Job summary

Texas Capital seeks an Information Risk professional to provide independent oversight of information security, technology and cyber risks across the enterprise. The role leads risk assessments, control reviews, and risk validation while translating data into executive dashboards for leadership and board committees.

You will collaborate with business units and technology teams to strengthen risk posture and regulatory compliance.

Qualifications

• Bachelor’s degree or equivalent in Finance, Accounting, Business, Analytics or Computer Science.
• Experience in risk governance, regulatory compliance, and risk assessment is preferred.
• Strong ability to translate risk data into board-ready reporting.

Responsibilities

• Provide independent oversight of information security, technology, and cyber risks across the enterprise.
• Lead risk assessments, control reviews, and risk validation activities.
• Analyze risk data, vulnerability management results, and security metrics to identify trends.
• Develop and maintain information risk governance frameworks, policies, standards and procedures.
• Produce executive dashboards and risk reports for senior leadership and board committees.
• Collaborate with business units, technology teams, and control functions to support risk management.

Skills

Cybersecurity Governance

Risk Management

Vulnerability Management

Incident Response

IT GRC Controls

Cloud Security

Third-Party Risk

Risk Metrics & Dashboards

Executive Reporting

Education

Bachelor’s degree or equivalent

Tools

AWS

Risk Analytics Tools

Job description

Texas Capital is built to help businesses and their leaders. Our depth of knowledge and expertise allows us to bring the best of the big firms at a scale that works for our clients, with highly experienced bankers who truly invest in people’s success — today and tomorrow.

While we are rooted in core financial products, we are differentiated by our approach. Our bankers are seasoned financial experts who possess deep experience across a multitude of industries. Equally important, they bring commitment — investing the time and resources to understand our clients’ immediate needs, identify market opportunities and meet long-term objectives. At Texas Capital, we do more than build business success. We build long-lasting relationships.

Texas Capital provides a variety of benefits to colleagues, including health insurance coverage, wellness program, fertility and family building aids, life and disability insurance, retirement savings plans with a generous 401K match, paid leave programs, paid holidays, and paid time off (PTO).

Texas Capital is headquartered in Dallas with offices in Austin, Fort Worth, Houston, Richardson, Plano, San Antonio, Chicago, Los Angeles and New York. For more information about joining our team, please visit us at www.texascapital.com.

The Information Risk function serves as the Bank’s Second Line of Defense (2LOD), independently assessing and monitoring information risks across the organization. This role supports the Information Risk Team by translating complex data into clear, actionable reports that inform senior management and decision‑making committees on the Bank’s risk posture and strategy. Responsibilities include conducting, creditable review & Challenge, and validating risk assessments; analyzing the potential impact of identified risks; recommending mitigation strategies; and developing governance documentation. The position also prepares detailed reports for senior, executive, and board-level committees while contributing to broader risk activities such as business impact assessments, key risk metrics, scenario analysis, material risk identification, and issue management.

Responsibilities

• Served as a key member of the Information Risk function, providing independent oversight and challenge of information security, technology, and cyber risks across the enterprise.
• Led risk assessments, control reviews, and risk validation activities to identify emerging threats, assess business impact, and recommend effective mitigation strategies.
• Analyzed enterprise risk data, specifically vulnerability management results, security assessments, and operational metrics to identify trends and strengthen the organization’s risk posture.
• Developed and maintained Information Risk governance frameworks, including policies, standards, procedures, risk methodologies, and supporting documentation.
• Produced executive-level reporting and dashboards for senior leadership, risk committees, and Board committees, translating complex technical risks into concise business‑focused insights.
• Partnered with business units, technology teams, and control functions to support risk management, regulatory compliance, and strategic initiatives.
• Oversaw key risk management activities including Risk and Control Self-Assessments (RCSAs), Key Risk Indicators (KRIs), scenario analysis, issue management, and material risk identification.
• Supported regulatory examinations and audits by ensuring risk documentation, evidence, and reporting met regulatory and governance expectations.
• Evaluated cybersecurity and technology risks related to cloud environments, third-Party / Vendor, software development, vulnerability management, and operational resilience.
• Developed actionable recommendations that improved risk governance, control effectiveness, and decision‑making across the organization.
• Created executive dashboards, risk heatmaps, and trend analyses to provide timely visibility into risk exposures and mitigation efforts.
• Collaborated with regulators, auditors, and stakeholders to ensure alignment with industry standards and regulatory requirements.

Core Competencies

Cybersecurity Governance, Risk & Compliance (GRC) | Vulnerability Management | Incident Response Management | IT GRC Controls

Assessment & Control Testing | Security Audit & Audit Readiness | Threat Hunting & Threat Intelligence | Third-Party / Vendor

Risk Management | Secure SDLC & Security Documentation | Cloud Security & AWS Risk Monitoring | SOX, SOC, ISO, NIST, NIST RMF, CRI, BASIL

COBIT & PCI DSS Alignment | Penetration

Key Skills and Knowledge in the following areas

• Vulnerability & Exception Management
• Information Risk Management (2LOD)
• Cybersecurity Governance, Risk & Compliance (GRC)
• Risk & Control Self-Assessments (RCSA)
• Key Risk Indicators (KRI)
• Regulatory Exam & Audit Management (OCC, FDIC, FRB)
• Information Security Risk Assessments
• Executive & Board Reporting
• Enterprise Risk Management
• Third-Party Risk Management
• Issue Management & Remediation Oversight
• Cloud Security & AWS Risk Governance
• Policy, Standards & Procedure Development
• NIST, NIST RMF, COBIT, PCI DSS, SOX, SOC, ISO 27001
• Data Analytics, Risk Metrics & Dashboard Development
• Business Impact Analysis & Scenario Analysis
• Testing & Security Assessment | Executive Reporting & Risk Metrics

Qualifications

• Bachelor’s degree (preferred in Finance, Accounting, Business, or Analytics, Computer Science); or equivalent combination of education, training, experience