Technical Risk Analyst

Stifel Financial Corp.; St. Louis (MO); On-site; USD 90,000 - 130,000; Full time

Job summary

Stifel is seeking a Technical Risk Management Analyst to identify, assess, and mitigate technology risks across the firm. You will analyze threats, develop controls, and ensure compliance with GLBA, NIST, CIS, and other standards while partnering with IT, Cybersecurity and business teams.

The role requires a strategic thinker with 3+ years in risk management or information security, a degree in a related field, and strong communication skills to present findings to senior leaders.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Security, Information Assurance, IT Audit, CS, or related field, or equivalent work experience.
• 3+ years of experience in risk management or information security.
• Preferred: CISSP, CISA, CISM.

Responsibilities

• Identify, assess, and mitigate risks across technology and processes.
• Conduct risk assessments to determine likelihood and impact of identified risks.
• Develop and implement risk mitigation strategies, including policies, procedures, and controls.
• Prepare and present risk assessment reports to senior management and track improvements.

Skills

Risk assessment

Information security

Analytical skills

Regulatory knowledge

Communication

Education

Bachelor’s degree in Cybersecurity or related

Tools

GRC tools

Windows 365

Job description

Why Stifel

Stifel strives for a culture that puts its clients and associates first: a culture where everyone belongs, everyone is welcome, and everyone contributes to the success of our clients, their careers, and the firm as a whole.

Let’s talk about how you can find your place here at Stifel, where success meets success.

What You’ll Be Doing

A Technical Risk Management Analyst is responsible for identifying, assessing, and mitigating risks associated with technology and technical processes within an organization. This role typically involves analyzing potential risks, implementing strategies to minimize their impact, and ensuring compliance with relevant regulations and standards. The Technical Risk Management Analyst will safeguard the organization's technological assets and ensure that technology-related risks are effectively managed. The successful candidate thinks strategically, is intellectually curious, and is comfortable working in undefined problem spaces. The Technical Risk Management Analyst will be expected to refine the risk program further.

What We’re Looking For

• Identify and evaluate technical risks associated with information systems, processes, and technologies.
• Conduct risk assessments to determine the likelihood and potential impact of identified risks.
• Analyze risk data using qualitative and quantitative methods.
• Develop and implement risk mitigation strategies, including policies, procedures, and controls to reduce risk exposure.
• Ensure compliance with relevant regulations, standards, and best practices related to information security and risk management (GLBA, NIST, CIS, etc.)
• Prepare and present risk assessment reports to senior management, highlighting key risks, trends, and recommendations for improvement.
• Work closely with IT, cybersecurity, and other departments to promote a risk‑aware culture and facilitate effective risk management practices.
• Monitor and review risk management processes and systems to identify areas for improvement and ensure they remain effective in a changing technological landscape.
• Provide training and awareness programs for staff to ensure understanding of risk management practices and their roles in mitigating risks.

What You’ll Bring

• Strong understanding of information security principles, risk management frameworks, and relevant technologies (e.g., firewalls, intrusion detection systems, cloud security).
• Excellent analytical and problem‑solving skills with the ability to assess complex technical risks and develop effective solutions.
• Strong verbal and written communication skills, with the ability to convey complex information clearly to diverse audiences
• Familiarity with federal and state legal/regulatory requirements related to information security.
• Understand the basic tenets of security risk management (threat management, vulnerability management, and risk treatment).

Education & Experience

• Minimum Required: Bachelor’s degree in Cybersecurity, Information Security, Information Assurance, IT Audit, Computer Science, Management Information Systems, or related discipline, or equivalent work experience
• Minimum Required: 3+ years of experience in risk management, information security, IT Audit, or a related field.

Licenses & Credentials

• Preferred: Security or IT‑related professional certification (CISSP, CISA, CISM, etc.)

Systems & Technology

• Experience with Governance, Risk, and Compliance tools.
• Solid understanding of information security tools and best practices.
• Proficient with Windows 365.

About Stifel

Stifel is more than 130 years old and still thinking like a start‑up. We are a global wealth management and investment banking firm serious about innovation and fresh ideas. Built on a simple premise of safeguarding our clients’ money as if it were our own, coined by our namesake, Herman Stifel, our success is intimately tied to our commitment to helping families, companies, and municipalities find their own success. While our headquarters is in St. Louis, we have offices in New York, San Francisco, Baltimore, London, Frankfurt, Toronto, and more than 400 other locations. Stifel is home to approximately 9,000 individuals who are currently building their careers as financial advisors, research analysts, project managers, marketing specialists, developers, bankers, operations associates, among hundreds more. Let’s talk about how you can find your place here at Stifel, where success meets success.

At Stifel we offer an entrepreneurial environment, comprehensive benefits package to include health, dental and vision care, 401k, wellness initiatives, life insurance, and paid time off.

Stifel is an Equal Opportunity Employer.