Enterprise Risk Analyst Sr.

Flagstar Bank; New York (NY); On-site; USD 80,000 - 129,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

Paid leave

Job summary

Flagstar Bank is seeking an Enterprise Risk Analyst Sr. to oversee IT and information security risk assessments. The role involves identifying gaps, testing controls, and reporting risk to senior leadership.

You will lead enterprise-wide risk assessments, develop mitigation strategies, and communicate findings to executives, while guiding junior staff and applying professional judgement to complex issues.

Qualifications

• High School or equivalent required.
• 4+ years in technology audit or information security.
• Certifications: Security+, CISA, CRISC or CISSP.
• Experience with NIST 800-53 and risk governance.

Responsibilities

• Govern and assess technology and security programs per NIST 800-53/37 and related frameworks.
• Design, validate, track, and report risk mitigation strategies.
• Communicate results to executive leadership.
• Perform enterprise-wide risk assessments, identify gaps, and determine residual risk.
• Create formal risk assessment reports for leadership.
• Help stakeholders in understanding risk and control requirements across the enterprise.
• Mentor junior team members on complex technical concepts.
• Apply independent judgement and discretion in decision making.
• Analyze and resolve problems.

Skills

Risk assessment

Stakeholder communication

Governance

Security controls

Education

High School Diploma or GED

Security+

CISA

CRISC

CISSP

Job description

Position Title

Enterprise Risk Analyst Sr.

Location

New York, NY 10018

Job Summary

The Technology Risk Analyst Sr. is responsible for creating, maintaining, assessing and reporting on the status of the information technology and information security threats, risks, and controls. This position will be responsible for identifying and documenting potential gaps, testing and validating control adherence, and recommending and validating risk mitigation. In addition this position will perform enterprise wide cyber and technology risk assessments, create formal risk assessment reports, and communicate these to senior leadership.

Job Responsibilities

• Govern and risk assess technology and security programs: including policies, standards, controls, procedures, and testing requirements for technology and security organization in line with NIST 800-53 and NIST 800-37, Secure Controls Framework, and Industry Best Practices.
• Design, validate, track, and report risk mitigation strategies in line with the company risk appetite.
• Communicate results to stakeholders including executive leadership.
• Perform complex enterprise wide risk assessments including mapping out threats and controls, identifying gaps, determining inherent and residual risk ratings in adherence with the enterprise Risk Governance Framework.
• Create formal risk assessment reports and present to executive leadership.
• Assist stakeholders in the business lines and technology in understanding risk and control requirements to ensure that risk responsibilities are understood and followed throughout the enterprise.
• Assist more junior associates on the team with understanding complex technical concepts and best practices.
• Uses independent judgement and discretion to make decisions.
• Anlyzes and resolves problems.

Additional Accountabilities

Performs special projects, and additional duties and responsibilities as required. Consistently adheres to regulatory and compliance policies and standards linked to the job as listed and complete required compliance trainings. Accountable to maintain compliance with applicable federal, state and local laws and regulations.

Job Requirements

• Education level required: High School / High School Equivalency (GED, HiSET, TASC) / Foreign Equivalent
• Minimum experience required: 4+ Years in Technology Audit, Information Technology, or Information Security.
• Security +, CISA, CRISC, CISSP or equivalent.

Job Competencies

• Strong understanding of internal/external processes and deadlines.
• Expert in technology and security risk mitigation.
• Expert in Risk Assessment and Control development.
• Experience designing risk and control programs aligned to FFIEC, NIST 800-53, NIST 800-37 and financial services regulatory requirements.
• Knowledge of Technology organization business processes and systems.
• Experience creating and maintaining threat and risk registers, and explaining residual risk to non-technical audiences.
• Expert in creating and maintaining KPIs and KRIs.
• Prior experience implementing or overseeing cross functional, enterprise wide projects and technologies.
• Well-rounded understanding of technology, operations, and key business processes.
• Demonstrates a strong ability to build and maintain effective relationships with stakeholders by communicating clearly, engaging in proactive collaboration, and leveraging cross functional insights.
• Aligns relationship building efforts with enterprise goals to accelerate performance and drive strategic results.
• Builds trusted client relationships, whether internal or external, by identifying needs and delivering tailored solutions to enhance the overall client experience.
• Fosters or supports a positive work culture and productive work environment, displaying importance of effective relationships with customers and stakeholders.

Travel

Less than 10% of travel required.

Physical Demands (ADA)

No unusual physical exertion is involved.

Equal Opportunity Employer

Flagstar is an Equal Opportunity Employer. We are committed to providing clear and accurate compensation information in accordance with applicable laws. Actual starting base pay will be determined based on location, experience, and other non-discriminatory factors permitted by law. Total compensation may also include variable incentives, bonuses, commissions, or other awards as outlined in the offer of employment. Flagstar provides teammates access to a variety of benefits including medical, dental, vision, life, and disability insurance, as well as a comprehensive leave program.

Benefits

• medical, dental, vision, life, and disability insurance, as well as a comprehensive leave program.

Compensation & Pay Range

Pay Range $79,537.50 - $129,179.00

Equal Opportunity & Diversity Statement

Qualified applicants with arrest or conviction records will be considered for employment in accordance with the California Fair Chance Act, the Los Angeles County Fair Chance Ordinance, the City of Los Angeles Fair Chance Initiative for Hiring Ordinance, and the San Francisco Fair Chance Ordinance, as applicable.

Company Overview

Flagstar Bank, N.A. is based in Hicksville, NY, and at December 31, 2025, had $87.5 billion in assets, $60.7 billion in loans, $66 billion in deposits, and $8.1 billion in total stockholder equity. We are a leading regional bank with approximately 340 locations, and strong footholds in the greater New York/New Jersey metropolitan region and in the upper Midwest, along with a significant presence in fast-growing markets in Florida and the West Coast. We are driven by our commitment to partner with our clients to set and reach goals together, helping them to take charge and thrive. Our focus is on four core lines of business that include Personal, Private, Small Business and Corporate & Commercial Banking.

Recruitment Contact

If you need assistance completing your employment application or if you would like to request a reasonable accommodation, please contact our team at [e-mail].

Equal Opportunity Employer – Additional Information

Equal Opportunity Employer For more Information: EEOC_KnowYourRights Member FDIC/Equal Housing Lender