IT Risk & Software Asset Lead - 1LoD (SAM & Compliance)

Natixis Corporate & Investment Banking; New York (NY); On-site; USD 150,000 - 190,000; Full time

Job summary

Natixis Corporate & Investment Banking seeks an Information Technology Risk 1LoD Analyst to safeguard Natixis CIB Americas IT and ensure regulatory compliance across the organization.

You will interface with LoD1.1 and LoD2 groups, lead IT risk assessments, manage SAM program governance, and oversee ITAM controls and vendor risk. The role emphasizes runbook development, reporting to senior management, and continuous improvement in IT risk practices.

Qualifications

• Bachelor’s degree in Information Technology, Information Systems, Computer Science, Risk Management or a related field.
• Minimum of five years of relevant professional experience in IT risk management, IT controls, software asset management, IT asset management or a related area.
• Strong understanding of IT risk frameworks, control processes and software licensing practices.

Responsibilities

• Lead and participate in IT risk assessments and vulnerability audits.
• Oversee IT risk controls for software assets and third-party vendors.
• Coordinate with LoD1.1/LoD2 groups for risk taxonomy alignment.
• Develop and maintain IT risk management runbooks and procedures.
• Prepare risk and controls reports for senior management.
• Support MFA implementation and ITAM controls.

Skills

IT risk frameworks

Software licensing practices

Risk assessment

Audit coordination

Education

Bachelor’s degree in Information Technology / Information Systems / Computer Science

Tools

ITAM system

SAM program

Job description

Natixis Corporate & Investment Banking seeks an Information Technology Risk 1LoD Analyst to safeguard Natixis CIB Americas IT and ensure regulatory compliance across the organization.

You will interface with LoD1.1 and LoD2 groups, lead IT risk assessments, manage SAM program governance, and oversee ITAM controls and vendor risk. The role emphasizes runbook development, reporting to senior management, and continuous improvement in IT risk practices.