IT Risk Analyst

Vertex Solutions Inc.; New York (NY); Hybrid; USD 80,000 - 100,000; Full time

Job summary

A global insurance firm in Midtown NYC is seeking a Mid-level IT Risk Analyst for a 6 month hybrid contract. The role involves extensive spreadsheet work, managing IT policies, and responding to audit queries. Candidates should have 3-5 years of relevant experience within large Management Consulting firms, particularly in developing IT standards and managing IT controls. Strong communication skills are essential to influence stakeholders and navigate complex audits. This position offers the potential for contract-to-hire consideration.

Qualifications

• 3-5 years of experience as an IT auditor or in IT risk management.
• Expertise with industry regulatory frameworks (NIST, ISO, SOX).
• Proven ability to influence and manage competing priorities.

Responsibilities

• Work under the guidance of IT leadership to maintain updated IT policies.
• Provide responses to questionnaires from regulators.
• Organize and track quarterly audits and action plans.

Skills

IT standards development

Managing IT controls

Stakeholder influence

Analytical skills

Communication skills

Governance methodologies

Continuous learning

Job description

Mid-level IT Risk Analyst sought for a 6 month contract to start, hybrid to MIDTOWN NYC 3 days a week at our global insurance client. Role involves a lot of spreadsheet work, answering audit questions, filing IT details with regulators etc. Meticulous documentation. Scope for contract to hire consideration in the future.

Not open to 3rd party vendor submissions

Must have:

3-5 years experience, medium grade, previous experience as an IT auditor with large Management Consulting firms preferred.

• Experience in developing IT standards, IT policies, and managing IT controls
• Expertise (certification a plus) with current industry and regulatory frameworks for cyber, AI and financial controls (such as NIST, ISO, SOX, emerging AI governance frameworks and other relevant standards).
• Proven ability to influence senior stakeholders and leadership, manage competing priorities, and guide enterprise-level decision making.
• Expert analytical and organizational skills with the ability to navigate ambiguous problems and drive strategic, enterprise-level insights and recommendations.
• Ability to design, refine, and lead complex governance methodologies, frameworks, and best practices adopted across multiple functions.
• Exceptional written and verbal communication skills, with the ability to influence senior leaders and translate complex risk, AI, and cyber concepts for diverse audiences.
• Demonstrated thought leadership, deep curiosity, and commitment to continuous learning in emerging risk, AI, and cyber domains.

Key Responsibilities

• Work under the guidance of Company’s IT leadership.
• Keep all IT policies and standards updated. Update Lloyds related questionnaires and audit queries from SCM partners.
• Stay current with key regulations in the UK, EU, and US. Provide responses to questionnaires from regulators.
• Interact with local office heads in Dubai, Germany, Canada to provide IT support in responding to regulators.
• Manage monthly review of 3rd party vendors for compliance with IT controls.
• Organize and track quarterly audits, and annual actions such as DR, BCP.
• Single point of contact for all security questionnaires.

Vertex Solutions Inc. is an Equal Opportunity Employer and does not discriminate on the basis of race, color, creed, national origin, ancestry, religion, age, citizenship, sex, marital or veteran status, disability or handicap, sexual orientation or any other basis prohibited by applicable law.