Professional - Risk Analysis I

JOB DESCRIPTION

This role will support initiatives that identify, manage, and ultimately reduce cyber risks to the bank. This role will act as a lead on key regulatory and risk management engagements within the bank s information security division. The role will act in the capacity of a strategic risk advisor to Cybersecurity Program leads on appropriate regulatory engagements and key leadership within ISD. A sound understanding of the NIST Cybersecurity framework, ISO 27001, MITRE ATT&CK, SOX, PCI, and other financial industry-specific standards is necessary for a candidate to be successful in this role.

Qualifications

• Bachelor's degree in computer science or a related discipline, or equivalent work experience required, advanced degree preferred
• Experience in GRC with information security or related technology experience required, experience in the securities or financial services industry is a plus.
• Strong experience with business intelligence data analysis and reporting platforms (SQL, DB2, Power BI, Business Objects, Qlik, Tableau, Excel/PowerPoint, etc.)
• Logical and physical database design skills
• Relentless in the pursuit of continuous cyber hygiene, control completeness, and effectiveness.
• Data lead individual who can collate automated and self-identified risk findings
• Strong analytical and troubleshooting skills
• Self-motivated individual and a team player
• Knowledge and conceptual understanding of a System Development Life Cycle (SDLC)
• Excellent analytical and troubleshooting skills
• Clear, concise, and effective written and verbal communication skills
• Exhibit good time management skills, independent thinking, and decision-making capabilities

Required Skills/Experience:

1. Analytical and troubleshooting skills

2. Relentless in the pursuit of continuous cyber hygiene, control completeness, and effectiveness

3. Strong Project Management / Issue Remediation work experience

Education Requirement:

• Bachelor's

Software Skills Required (if applicable):

• MS Office, ServiceNow

Preferred Skills/ Experience:

1. Strong analytical and troubleshooting skills

2. Sound understanding of NIST Cybersecurity framework, ISO 27001, MITRE ATT&CK, SOX, PCI, and other financial industry-specific standards

3. Working knowledge of Cybersecurity Frameworks (NIST CSF, CRI, ISO, etc.)

Intangible Skills Preferred:

• Self-motivated, analytical