Senior Enterprise Risk & Controls Analyst

Flagstar Bank; New York (NY); On-site; USD 80,000 - 129,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

Paid leave

Job summary

Flagstar Bank is seeking an Enterprise Risk Analyst Sr. to oversee IT and information security risk assessments. The role involves identifying gaps, testing controls, and reporting risk to senior leadership.

You will lead enterprise-wide risk assessments, develop mitigation strategies, and communicate findings to executives, while guiding junior staff and applying professional judgement to complex issues.

Qualifications

• High School or equivalent required.
• 4+ years in technology audit or information security.
• Certifications: Security+, CISA, CRISC or CISSP.
• Experience with NIST 800-53 and risk governance.

Responsibilities

• Govern and assess technology and security programs per NIST 800-53/37 and related frameworks.
• Design, validate, track, and report risk mitigation strategies.
• Communicate results to executive leadership.
• Perform enterprise-wide risk assessments, identify gaps, and determine residual risk.
• Create formal risk assessment reports for leadership.
• Help stakeholders in understanding risk and control requirements across the enterprise.
• Mentor junior team members on complex technical concepts.
• Apply independent judgement and discretion in decision making.
• Analyze and resolve problems.

Skills

Risk assessment

Stakeholder communication

Governance

Security controls

Education

High School Diploma or GED

Security+

CISA

CRISC

CISSP

Job description

Flagstar Bank is seeking an Enterprise Risk Analyst Sr. to oversee IT and information security risk assessments. The role involves identifying gaps, testing controls, and reporting risk to senior leadership.

You will lead enterprise-wide risk assessments, develop mitigation strategies, and communicate findings to executives, while guiding junior staff and applying professional judgement to complex issues.