IT Risk Management Senior Analyst

City National Bank; Charlotte (NC); On-site; USD 92,000 - 157,000; Full time

Job summary

An established industry player is seeking an IT Risk Management Senior Analyst to enhance their cyber risk mitigation strategies. This pivotal role involves evaluating IT controls, providing insights to leadership, and ensuring compliance with regulatory standards. The ideal candidate will possess extensive experience in information security and risk management, along with strong analytical and communication skills. Join a forward-thinking organization that values integrity and excellence, and contribute to shaping a secure technological environment. This position offers a competitive salary and a comprehensive benefits package, making it an exciting opportunity for professionals looking to make a significant impact in the financial sector.

Benefits

Comprehensive healthcare coverage

401(k) company matching

Tuition Reimbursement

Valued Time Away benefits

Specialized health benefits

Career Mobility support

Colleague Resource Groups

Qualifications

• 12+ years in Information/Cyber Security with 6+ years in IT risk management.
• Strong knowledge of cyber security trends and financial regulations.

Responsibilities

• Perform reviews of IT controls and provide guidance to ensure compliance.
• Create and maintain documentation for risk analysis and assessments.

Skills

Information Security

Cyber Security Operations

Incident Response

Risk Management

Communication Skills

Interpersonal Skills

Education

Bachelor's Degree

Master's Degree

Tools

FAIR

NIST

FFIEC

Job description

IT RISK MANAGEMENT SENIOR ANALYST

WHAT IS THE OPPORTUNITY?

The IT Risk Senior Analyst is a subject-area specialist with specialized training, methods, and analytic techniques to create recommendations and directions for cyber risk mitigation in a complex technical environment. Focus areas of IT Control assessment by the ITRM Security Senior Analyst include fit for purpose review and challenges and process/risk/control (PRC) reviews to evaluate overall control program effectiveness in mitigating risk. The ITRM Senior Analyst's goal is to create actionable information for IT and business leadership and to provide objective assessment of cyber security risks for auditors, regulators, and external parties. This requires routinely performing review and challenge reviews against 1LOD testing practices specific to T&I controls, authoring detailed reports, and gathering metrics to ensure stakeholders receive accurate and complete information. The ITRM Senior Analyst keeps abreast of external cyber security trends, technologies, and cyber risk management approaches and often works with other teams on cyber risk-related initiatives to provide subject-matter recommendations and guidance to achieve a posture within the bank's overall risk appetite. This is an advanced senior professional with wide-ranging experience who uses professional concepts to resolve complex issues in creative and effective ways. Serves as an expert in own discipline or area of specialization and works on complex issues where analysis of situations or data requires an in-depth evaluation of variable factors.

WHAT WILL YOU DO?

• Perform fit for purpose review and challenges specific to IT (T&I) controls tested by 1LOD Testing team.
• Provide guidance to 1LOD colleagues to ensure testing practices meet internal standards.
• Support regulatory requirements and deliverables as needed.
• Define analysis objectives, collect data from internal and external sources, and evaluate/analyze data to provide objective information on cyber risks for IT and business management with both summary and detailed reporting.
• Assess risk within subject specialty area to evaluate the design and effectiveness of security controls.
• Partner with external partners, vendors, law enforcement, and intelligence community as applicable to fulfill reporting and information sharing requirements, and collecting information required for comprehensive risk analysis and assessment.
• Create new and maintain process and procedural documentation for various risk analysis and risk assessment activities; highlight industry-based methodologies, techniques or standards (FAIR, NIST, FFIEC, etc.) used as the basis for analysis efforts.
• Publish routine, accurate risk analysis and assessment reports as defined by organizational risk policies and procedures to applicable audiences for each subject area discipline.
• Participate in other projects and duties as needed or requested.

WHAT DO YOU NEED TO SUCCEED?

Required Qualifications*

• Bachelor's Degree or equivalent.
• Minimum of 12 years’ experience in Information/Cyber Security field.
• Minimum of 6 years' experience in cyber security operations, incident response, IT risk management or investigations.

Additional Qualifications

• Demonstrated experience analyzing IT control testing attributes and evidence to properly evaluate and conclude control effectiveness.
• Demonstrated knowledge of cyber security landscape -- threats, trends, technologies.
• Demonstrated knowledge of financial regulation and control frameworks applicable to cyber security or IT risk.
• Excellent communication and interpersonal skills, including a strong ability to create positive and professional business relationships with internal clients.
• Strong commitment to working as a team and providing excellent customer service.
• Exposure to banking or equivalent highly controlled technology environment is preferred.
• Masters' degree in business, computer science, or related field preferred.
• Security certifications (CISSP, GSEC, etc.) are highly desired.
• Demonstrated experience with industry or subject-specific analysis or assessment frameworks is highly desired (FAIR, NIST CSF, etc.).
• Experience in banking/financial industry is strongly preferred.
• Formalized training in cyber security analysis or assessment techniques.

WHAT'S IN IT FOR YOU?

Compensation

Starting base salary: $92,114 - $156,880 per year. Exact compensation may vary based on skills, experience, and location. This job is eligible for bonus and/or commissions.

Benefits and Perks

At City National, we strive to be the best at whatever we do, including the benefits and perks we offer our colleagues, including:

• Comprehensive healthcare coverage, including Medical, Dental, and Vision plans, available the first of the month following start date.
• Generous 401(k) company matching contribution.
• Career Development through Tuition Reimbursement and other internal upskilling and training resources.
• Valued Time Away benefits including vacation, sick, and volunteer time.
• Specialized health and family planning benefits including fertility benefits, and cancer, diabetes, and musculoskeletal support programs.
• Career Mobility support from a dedicated recruitment team.
• Colleague Resource Groups to support networking and community engagement.

Get a more detailed look at our Benefits and Perks.

ABOUT US

Since day one, we've always gone further than the competition to help our clients, colleagues, and communities flourish. City National Bank was founded in 1954 by entrepreneurs for entrepreneurs, and that legacy of integrity, community, and unparalleled client relationships continues today. City National is a subsidiary of Royal Bank of Canada, one of North America’s leading diversified financial services companies. To learn more about City National and our dynamic company culture, visit us at About Us.

INCLUSION AND EQUAL OPPORTUNITY EMPLOYMENT

City National Bank fosters an inclusive environment where all forms of diversity are valued and leveraged to make us a better company and employer. We are an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sexual orientation, gender identity, national origin, disability, veteran status, or other basis protected by law.

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

*Represents basic qualifications for the position. To be considered for this position, you must at least meet the required qualifications. careers.cnb.com accepts applications on an ongoing basis, until filled.