Technology Risk Analyst Associate - flagstar

Position Title

Location

Job Summary

Job Responsibilities:

JOB RESPONSIBILITIES

Assist in creating and maintaining governance documentation, including policies, standards, controls, procedures, and testing requirements for technology and security organization in line with NIST 800-53, Secure Controls Framework, and Industry Best Practices.

Work with technology team members and stakeholders to design, validate, track, and report risk mitigation.

Perform small to medium size risk assessments including mapping out threats and controls, identifying gaps, determining inherent and residual risk ratings in adherence with the enterprise Risk Governance Framework. Assist in creating a formal risk assessment report and present to stakeholders.

Assist stakeholders in the business lines and technology in understanding risk and control requirements to ensure that risk responsibilities are understood and followed throughout the enterprise.

ADDITIONAL ACCOUNTABILITIES

Performs special projects, and additional duties and responsibilities as required.

Consistently adheres to regulatory and compliance policies and standards linked to the job as listed and complete required compliance training. Accountable to maintain compliance with applicable federal, state and local laws and regulations.

JOB REQUIREMENTS

Required Qualifications:

Education level required: High School / High School Equivalency (GED, HiSET, TASC) / Foreign Equivalent.

Minimum experience required: ​1+ Years​ in Technology Audit, Information Technology, or Information Security.

Preferred Qualifications

Education level preferred: Undergraduate Degree (4 years or equivalent) Computer Science or Cyber Security preferred

Security +, CISA, CRISC, CISSP or equivalent preferred

Job Competencies:

Strong understanding of internal/external processes and deadlines

Able to work independently to ensure stakeholders fulfill audit and/or risk commitments

Knowledge of Technology organization business processes and systems

Knowledge of banking business processes

Knowledge of risk assessment and analysis techniques and industry risk models

Strong knowledge of IT security disciplines such as authentication and authorization models, data protection methods, networking, firewall models, threat and vulnerability management processes

Comfortable interfacing with other internal or external organizations regarding risk and compliance findings

Prior experience working with cross functional, cross departmental projects and technologies

Well-rounded understanding of technology, operations, and key business processes