Technical Risk Analyst

Overview

The Technical Risk Analyst will serve as part of the 2nd Line of Defense, providing independent oversight, challenge, and assurance over the organization's technology resiliency, operational resilience, and risk management practices. This role will evaluate the adequacy of technology recovery capabilities, system dependencies, and cyber and technical risk controls, ensuring alignment with regulatory requirements, internal policies, and business resiliency objectives.

Responsibilities

• Provide independent review on IT disaster recovery (DR) plans, technology continuity strategies, and testing activities conducted by 1st Line teams
• Review and validate Business Impact Analyses (BIAs), dependency mapping, and recovery objectives (RTOs/RPOs) for accuracy, completeness, and alignment to business tolerances
• Evaluate the design and execution of DR and resiliency tests, ensuring scenarios are realistic, risk-based, and include critical dependencies and vendors
• Monitor and report on resiliency Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs)
• Conduct independent risk assessments on technology and operational resilience practices to identify emerging risks, gaps, or control weaknesses
• Translate insights from technology risk trends, vulnerabilities, and incidents into actionable guidance that will help strengthen resiliency practices, such as from software development through to recovery
• Participate in audits and compliance & regulatory assessments to ensure adherence to relevant regulations
• Ensure third-party/vendor resiliency risks & controls are identified, monitored, and escalated
• Support development of governance dashboards and reports for risk committees, senior management, and regulators
• Work with internal teams to promote risk & resiliency awareness and drive a culture of risk management across the organization

Qualifications

• Bachelor's degree in Information Technology, Risk Management, Business, or equivalent combination of training, education and experience
• 3-6 years of experience in Technology Risk, Operational Resilience, Business Continuity, or IT Audit/Assurance
• Strong understanding of IT infrastructure, applications, cloud computing, and cybersecurity concepts, with the ability to evaluate resilience from a risk/oversight perspective
• Knowledge of risk and resilience frameworks: ISO 22301, NIST SP 800-34, ISO 27001, COBIT, ITIL
• Familiarity with regulatory requirements for financial institutions (FFIEC, OCC, DORA, PRA, FCA, GDPR, HIPAA)
• Excellent analytical and critical thinking skills with the ability to identify gaps and propose remediation strategies
• Strong communication and report-writing skills; able to translate technical risk into business-relevant language for senior leadership
• Ability to balance collaboration with independent challenge across IT, cybersecurity, vendors, and business stakeholders

Desired Qualifications

• Master's degree in Risk, Technology, or related field
• Relevant certifications such as CBCP, MBCP, CCRP, CISSP, CISM, CRISC, CISA, or ITIL
• Experience with security and resilience tools (e.g., SIEM, vulnerability scanning, backup/recovery validation)
• Knowledge of cloud resilience and third-party risk management practices

About Us