IT & Data Risk Analyst — Strategy, Compliance & Insight

Regions Bank; Charlotte (NC); On-site; USD 99,000 - 133,000; Full time

Benefits offered by this job

Paid Vacation

401K Plan

Medical Benefits

Disability Benefits

Parental Leave

Job summary

Regions is seeking a Risk Information Technology and Data Analyst to join the IT and Data Risk Management group. The role supports the Risk Management Framework aligned with FFIEC, NIST, GLBA and internal policies, collaborating with Technology, Cyber Security, Data Analytics, Compliance, and Internal Audit.

The position involves leading targeted risk assessments, continuous monitoring, and reporting of IT and data risks, with opportunities for collaboration with stakeholders across the business

Qualifications

• Bachelor’s degree required.
• Five years of IT risk, IT audit, technology, cybersecurity, or operational risk experience.
• Strong understanding of risk management, cybersecurity/technology, and compliance principles.

Responsibilities

• Lead IT and Data Risk assessments, continuous monitoring, and testing across IT and data domains.
• Perform enterprise risk assessments and cyber security risk assessments to evaluate regulatory compliance.
• Conduct gap assessments to evaluate design and effectiveness of technology and data controls.
• Review and validate risk analysis work by junior team members.
• Develop and revise IT and Data Risk Management methodologies and procedures.
• Monitor regulatory changes and advise on risk-based technology initiatives.

Skills

IT risk

IT audit

Cybersecurity

Compliance

Risk management

Education

Bachelor's degree in related field

Tools

Archer

ServiceNow

Job description

Regions is seeking a Risk Information Technology and Data Analyst to join the IT and Data Risk Management group. The role supports the Risk Management Framework aligned with FFIEC, NIST, GLBA and internal policies, collaborating with Technology, Cyber Security, Data Analytics, Compliance, and Internal Audit.

The position involves leading targeted risk assessments, continuous monitoring, and reporting of IT and data risks, with opportunities for collaboration with stakeholders across the business