Senior Technology Risk & Security Analyst

flagstar; New York (NY); On-site; USD 80,000 - 129,000; Full time

Job summary

Flagstar is seeking an Enterprise Risk Analyst Sr. in New York, NY to identify, assess, and report on IT and information security threats, risks, and controls. The role requires documenting gaps, testing controls, and validating risk mitigation across the enterprise.

You will perform formal risk assessments, create reports, and communicate findings to senior leadership. Strong knowledge of NIST, FFIEC, and regulatory requirements is essential for success in this role.

Qualifications

• Education level required: High School / High School Equivalency (GED, HiSET, TASC) / Foreign Equivalent.
• Minimum 4+ years in Technology Audit, Information Technology, or Information Security.
• Security+, CISA, CRISC, CISSP or equivalent.

Responsibilities

• Govern and risk assess technology and security programs in line with NIST 800-53/800-37, SCF, and industry best practices.
• Design, validate, track, and report risk mitigation strategies for stakeholders including executives.
• Perform enterprise-wide risk assessments and create formal risk assessment reports for leadership.
• Assist business lines and technology teams in understanding risk and control requirements across the enterprise.
• Use independent judgement to make decisions and analyze problems.

Skills

Risk assessment

Regulatory compliance

Stakeholder communication

Enterprise risk governance

Threat & control mapping

Education

High School / GED or Foreign Equivalent

Tools

NIST 800-53

NIST 800-37

FFIEC

Secure Controls Framework

Job description

Flagstar is seeking an Enterprise Risk Analyst Sr. in New York, NY to identify, assess, and report on IT and information security threats, risks, and controls. The role requires documenting gaps, testing controls, and validating risk mitigation across the enterprise.

You will perform formal risk assessments, create reports, and communicate findings to senior leadership. Strong knowledge of NIST, FFIEC, and regulatory requirements is essential for success in this role.