Senior Technology Risk Analyst — Drive Auditable Controls

Citizens Bank; Johnston (RI); Hybrid; USD 90,000 - 120,000; Full time

Job summary

A financial institution in Johnston, RI is seeking a Senior Analyst for the Enterprise Technology & Security Risk team. This role leads the identification and management of technology-related risks, ensuring robust risk management practices. Responsibilities include monitoring, testing controls, and overseeing documentation. Candidates should have 5-7 years of experience in IT risk management, along with strong analytical and communication skills. The position offers a hybrid work model with 4 days onsite and 1 day remote.

Qualifications

• 5–7 years of experience in IT risk management, information security, or internal audit.
• Knowledge of control frameworks such as CRI Profile, NIST 800-53, and NIST CSF.
• Experience conducting control testing and risk assessments in a regulated environment.

Responsibilities

• Lead control monitoring and testing across technology and cybersecurity processes.
• Perform and oversee control design and effectiveness testing.
• Ensure testing results are documented audit-ready.

Skills

IT risk management

Information security

Internal audit

Analytical skills

Communication skills

Proficiency with GRC platforms

Cloud platforms (AWS, Azure)

Reporting tools (Tableau, PowerBi)

Education

Bachelor's degree in Information Technology, Cybersecurity, Business, or a related field

Master's degree preferred

CISA, CRISC, CISM, AWS Cloud Practitioner, Microsoft Azure Fundamentals certifications

Tools

GRC platforms (e.g., Archer)

ITSM tools (e.g., ServiceNow, Jira)

Security tools (e.g., Splunk, Qualys, DataDog, Wiz, CyberArk)

Job description

A financial institution in Johnston, RI is seeking a Senior Analyst for the Enterprise Technology & Security Risk team. This role leads the identification and management of technology-related risks, ensuring robust risk management practices. Responsibilities include monitoring, testing controls, and overseeing documentation. Candidates should have 5-7 years of experience in IT risk management, along with strong analytical and communication skills. The position offers a hybrid work model with 4 days onsite and 1 day remote.