Senior IT & Cyber Risk Analyst (Hybrid)

Popular; San Juan (PR); Hybrid; USD 100,000 - 140,000; Full time

Job summary

Popular in Puerto Rico seeks a Senior Risk Analyst to advance the second-line IT and Cyber Risk Monitoring and Assurance program. You will provide independent oversight, partner with first line and control functions, and deliver actionable risk insights to senior management.

The role includes leading RCSAs, dashboards, risk scorecards, regulatory readiness, and training for stakeholders. Hybrid work and a focus on governance across IT and cybersecurity are key aspects.

Qualifications

• 5+ years of IT controls testing, IT risk, IT audit or cybersecurity experience.
• Experience applying IT and cybersecurity frameworks (NIST, COBIT, FFIEC, CCM, etc.).
• Experience with risk governance processes (RCSAs, issue management, risk acceptances, committee reporting).
• IT or cybersecurity certifications preferred (CISA, CISM, CISSP, CGEIT, CRISC).

Responsibilities

• Lead governance of the IT & Cyber Risk and Control Matrix to align with regulatory requirements and frameworks.
• Serve as a second-line advisor to IT and Cybersecurity leadership for consistent risk practices.
• Prepare risk scorecards, dashboards, and metrics for Risk Committees and executives.
• Monitor remediation commitments and challenge timeliness and residual risk.
• Review policies, standards, risk acceptances, and control implementations for alignment with matrix.
• Lead IT & Cyber Risk and Control Self-Assessments (RCSAs) including scoping and action plans.
• Translate control weaknesses into risk statements and recommend mitigations.
• Support regulatory exams and audits with evidence review and narrative consistency.
• Develop targeted training on RCSA processes, controls, and evidence expectations.
• Design and govern KRIs with data quality controls and thresholds.
• Perform trend analysis to identify issues and provide management with remediation recommendations.

Skills

IT risk governance

Regulatory compliance

Cybersecurity

Risk reporting

Education

Bachelor's degree in IT or related field

Tools

Excel

Dashboard tools

Job description

Popular in Puerto Rico seeks a Senior Risk Analyst to advance the second-line IT and Cyber Risk Monitoring and Assurance program. You will provide independent oversight, partner with first line and control functions, and deliver actionable risk insights to senior management.

The role includes leading RCSAs, dashboards, risk scorecards, regulatory readiness, and training for stakeholders. Hybrid work and a focus on governance across IT and cybersecurity are key aspects.