Staff IT Analyst II - IT Governance, Risk, and Controls

Western Alliance Bancorporation; Phoenix (AZ); On-site; USD 95,000 - 130,000; Full time

Benefits offered by this job

Ownership stake

Medical insurance

Dental insurance

401k matching

Tuition assistance

Employee volunteer program

Wellness program

Paid time off

Job summary

Western Alliance Bancorporation is seeking a Staff IT Analyst II to support IT governance, risk, and controls across the organization. This role partners with 1LOD and 2LOD to manage risk programs, validates control activities, and maintains KRIs/KPIs to enable informed decision-making.

Strong analytical skills and collaboration with control owners are essential for effective risk oversight. The Senior Analyst will drive risk reporting, dashboards, and documentation, ensuring adherence to

Job description

Job Title:

Staff IT Analyst II - IT Governance, Risk, and Controls

Location:

Block 23

What you'll do:

The IT Staff Analyst II - IT Governance, Risk & Controls is a Senior Analyst and serves as a first line of defense (1LOD) risk professional responsible for supporting and executing risk programs and business unit risk activities in alignment with the Company's risk appetite and corporate strategy. This role acts as a key contributor and trusted partner to IT while engaging with second line of defense (2LOD) functions to support the management of IT risks and controls across applicable risk types. The Senior Analyst monitors the execution of policies, standards, procedures, regulatory expectations, and control framework requirements. This position is expected to provide analytical leadership, strengthen control inventory documentation and evidence practices, and support Risk and Control Self-Assessments. Additionally, the Staff IT Analyst II will identify, develop, monitor, and maintain KRIs, KPIs, and Operational Metrics for decision making and risk oversight.

• Partner with control owners, risk owners, first line stakeholders, second line stakeholders, and other partners to track risk and control priorities and updates through completion.
• Support the timely preparation, execution, update, and refresh of risk and control information by collecting, validating, and organizing data from various sources.
• Execute assigned risk program and business unit risk activities with a sense of urgency, ensuring deliverables are completed accurately, effectively, and within required timelines.
• Engage with business units to support the management of risks and controls across applicable risk types, including monitoring adherence to risk policies, procedures, standards, and program requirements.
• Facilitate meetings with IT and other stakeholders to confirm process understanding, review process maps, validate narratives, and document process-level risk and control information.
• Collaborate with 2LOD partners by coordinating updates, clarifying expectations, escalating concerns, and supporting the timely resolution of open items.
• Assess the control environment for assigned processes to determine whether controls effectively mitigate identified risks or whether gaps, weaknesses, or remediation needs should be documented and escalated.
• Prepare clear documentation of review results, observations, risk and control updates, process changes, stakeholder feedback, and recommended actions for management review.
• Identify and recommend process improvements that strengthen risk and control documentation, execution consistency, transparency, reporting quality, and alignment with risk program expectations.
• Identify, develop, and monitor Key Risk Indicators (KRIs) to measure risk exposure and control effectiveness; analyze threshold breaches, track and report metrics and trends, and partner with stakeholders to identify, implement, and monitor corrective and remediation activities through timely resolution.
• Prepare and maintain risk reporting and dashboards for senior leadership, committees, and governance forums, providing insightful analysis of risk metrics, issues, KRIs, control effectiveness, and emerging trends to support informed decision-making and effective risk oversight.

What you'll need:

• 5+ years of related experience in IT risk management, IT governance, internal controls, compliance, technology audit, or a similar field.
• Bachelor's degree in information technology, Information Systems, Cybersecurity, Business, Risk Management, Accounting, Finance, or a related field, or equivalent work experience.
• Intermediate experience with IT general controls, risk and control self-assessments, issue management, exception management, control testing, audit evidence practices, and remediation tracking.
• Working knowledge of common technology risk and control frameworks and guidance, such as COBIT, NIST, FFIEC, ISO 27001, CRI, or similar industry standards.
• Strong organizational and analytical skills with the ability to manage multiple priorities, drive deliverables, meet deadlines, and follow through on open items.
• Entry level to intermediate knowledge of general Financial Services or Banking is preferred.
• Entry level to intermediate knowledge of applicable regulatory and legal compliance obligations, rules and regulations, industry standards and practices.
• Intermediate to advanced in process and data analysis within a specific domain or functional area utilizing critical thinking skills.
• Intermediate to advanced working in Microsoft Office & relevant Diagramming Software (e.g. Lucid, Visio, etc.), as well as technical aptitude & experience within a specific domain.
• Intermediate speaking and writing communication skills.
• Occasional travel required.

Benefits you'll love:

We offer all the important things you'd want - like competitive salaries, an ownership stake in the company, medical and dental insurance, time off, a great 401k matching program, tuition assistance program, an employee volunteer program, and a wellness program. In addition, you'll have the opportunity to bolster your business knowledge, learning the ins and outs of how successful companies operate and manage their finances, giving you invaluable hands‑on experience to help grow your career!

About the company:

Western Alliance Bank, Member FDIC, is a wholly owned subsidiary of Western Alliance Bancorporation. Serving clients nationwide, Western Alliance Bank includes six legacy bank brands - Alliance Association Bank, Alliance Bank of Arizona, Bank of Nevada, Bridge Bank, First Independent Bank and Torrey Pines Bank - that remain part of the company's heritage, as well as AmeriHome Mortgage, a Western Alliance Bank Company.

Western Alliance Bancorporation is committed to equal employment and will consider all qualified applicants without regard to race, sex, color, religion, age, nation origin, marital status, disability, protected veteran status, sexual orientation, gender identity or genetic information. Western Alliance Bancorporation is committed to working with and providing reasonable accommodations for individuals with disabilities. If you are an individual with a disability and require a reasonable accommodation to complete any part of the application process and/or need an alternative method of applying, please email [e-mail] or call 602-386-2488. When contacting us, please provide your contact information and state the nature of your accessibility issue. We will only respond to inquiries concerning requests that involve a reasonable accommodation in the application process.

Western Alliance Bancorporation