IT Risk & Control Senior Analyst (Second Line of Defence)

Role: IT Risk & Control Senior Analyst (Second Line of Defence)

Location: Hybrid – 4 days onsite in NYC/Jersey City, NJ (Charlotte or Phoenix also acceptable)

Experience: 10–15 years preferred

Industry: Banking/Financial Services

Key Responsibilities

• Act as second line of defence for IT risk and cyber security controls.

• Perform heavy control testing (Test of Design, Test of Effectiveness).

• Conduct Process/Risk/Control (PRC) reviews to evaluate control program effectiveness.

• Provide guidance and challenge to 1LOD testing teams to ensure practices meet standards.

• Support regulatory deliverables and compliance requirements.

• Define analysis objectives, collect/evaluate data, and provide objective cyber risk reporting for IT/business leadership.

• Author detailed reports and gather metrics for auditors, regulators, and external parties.

• Stay current on cyber security threats, trends, and technologies.

• Collaborate with other teams on cyber risk initiatives and provide recommendations.

• Manage site-level governance: track actions, risks, issues, dependencies, decisions, and readiness items.