Technology Risk and Control Analyst

The Technology Risk and Control Analyst will support the Technology Risk, Governance, and Controls (TRGC) department in managing and enhancing the firm’s risk and control frameworks related to Technology, Information Security, and Cyber Security. This role involves maintaining and analyzing control data, supporting risk assessments, coordinating stakeholder communications, and contributing to the development of controls, including those related to Distributed Ledger Technologies (Crypto). The position provides an opportunity to work within a dynamic environment that underpins a global financial institution, with exposure to continuous improvement and strategic control initiatives.

Key Responsibilities:

• Support the DCO and broader team in developing or improving risk and control frameworks specific to Technology, Information Security, or Cyber Security.
• Maintain oversight of risks, controls, governance content, and associated documentation within assigned Technology domains.
• Assist in creating and updating risk and control change artifacts, ensuring accuracy and compliance.
• Identify and manage stakeholder communications to ensure timely and transparent updates to internal and external parties.
• Provide operational and program support to meet deadlines for risk and control deliverables.
• Support control testing and measurement activities within designated Technology domains.
• Contribute to the Risk and Control Self-Assessment (RCSA) process to assess impacts on Technology controls.
• Generate and deliver Technology risk and control reports on a monthly and quarterly basis.
• Analyze control indicators and elevate issues that require management attention.
• Collaborate with local stakeholders to gather and validate risk or control information.
• Support the development of controls related to Distributed Ledger Technologies (Crypto).

Required Skills:

• Proven experience writing Technology policies, standards, and procedures.
• Strong awareness of financial regulations impacting technology governance, information security, and cyber security.
• 7-15 years
• Understanding of risk and control management principles and industry frameworks (ITIL, COBIT, ISO 27001).
• Excellent analytical, documentation, and report writing skills.
• Strong organizational and multitasking abilities with a focus on meeting deadlines.

Preferred Skills:

• Experience with Distributed Ledger Technologies (Crypto) and awareness of related risks.
• Detail-oriented with strong time management, prioritization, and problem-solving skills.
• Ability to work both independently and collaboratively in a fast-paced environment.
• Proficiency in Microsoft Office tools (Word, Excel, PowerPoint, Outlook).
• Strong communication and interpersonal skills, with the ability to work effectively across organizational levels.
• Excellent command of written and spoken English.

Desired Skills:

Background in Technology Operations, Technology Oversight (2nd Line of Defense), or Audit within a financial institution.

Education:

Bachelor’s degree in information technology, Cybersecurity, Computer Science, or a related field preferred.