Jobs · Information Technology · Arizona

Staff IT Analyst II - IT Governance, Risk, and Controls

Western Alliance Bank · Phoenix, AZ · 1 mo ago
Information TechnologyFull-time
We need to output HTML fragment with sections: headings

for sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We must only include sections that have real specific content. The posting includes "What You'll Do" (responsibilities), "What You'll Need" (requirements/qualifications/skills), "Benefits You’ll Love" (benefits), "About The Company" (maybe about the role? Actually about the company). There's no explicit Pay or Schedule. So we should not create those sections. We need to use

for section headings. Use
  • for any list of duties/requirements/benefits lists. Use

    for prose. We must preserve all substantive info, not invent or summarize away detail. Remove boilerplate like EEO, legal, accommodation, copyright, etc. Also remove duplicated lines. We need to decide how to structure sections: maybe "About the role" (the description of role) could be from "What You'll Do". Could also have "Responsibilities". The instruction: use headings e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We can choose which to include based on content. We have responsibilities (What You'll Do). We have requirements/qualifications/skills (What You'll Need). We have benefits (Benefits You’ll Love). We have about the company (About The Company). Could map to "About the role" maybe not needed; we could use "About the role" for the description of role (the first paragraph). But we have a lot of responsibilities; maybe we can put that under "Responsibilities". The "What You'll Need" includes experience, education, knowledge, skills. Could split into Requirements, Qualifications, Skills. But we should prefer few substantive sections over many thin ones. So maybe combine into one section "Requirements" covering all. Or we could have "Qualifications" and "Skills". But we need to avoid thin sections. Given the instruction: "Prefer a few substantive sections over many thin ones." So we could have three sections: Responsibilities, Requirements, Benefits. And maybe About the Company as a separate section? Could be "About the Company". That's substantive. Thus sections: Responsibilities, Requirements, Benefits, About the Company. We need to use

    for each heading. Inside each, we need to format content: For Responsibilities, we have a long paragraph with many sentences. Could break into
    • for each duty? The instruction: Use
      • for any list of duties/requirements/benefits. The responsibilities are a list of duties; we could turn each sentence into a list item. That would be a list. Similarly for requirements: we could list each bullet. For benefits: list each benefit. We must preserve all substantive information; not invent or summarize away detail. So we need to capture each duty exactly as in text. However turning sentences into list items may be okay as it's still preserving content. We must not omit any duty. Let's extract responsibilities sentences from "What You'll Do". The paragraph after that heading is a long block. Let's parse: "The IT Staff Analyst II – IT Governance, Risk & Controls is a Senior Analyst and serves as a first line of defense (1LOD) risk professional responsible for supporting and executing risk programs and business unit risk activities in alignment with the Company’s risk appetite and corporate strategy. This role acts as a key contributor and trusted partner to IT while engaging with second line of defense (2LOD) functions to support the management of IT risks and controls across applicable risk types. The Senior Analyst monitors the execution of policies, standards, procedures, regulatory expectations, and control framework requirements. This position is expected to provide analytical leadership, strengthen control inventory documentation and evidence practices, and support Risk and Control Self-Assessments. Additionally, the Staff IT Analyst II will identify, develop, monitor, and maintain KRIs, KPIs, and Operational Metrics for decision making and risk oversight. Partner with control owners, risk owners, first line stakeholders, second line stakeholders, and other partners to track risk and control priorities and updates through completion.Support the timely preparation, execution, update, and refresh of risk and control information by collecting, validating, and organizing data from various sources.Execute assigned risk program and business unit risk activities with a sense of urgency, ensuring deliverables are completed accurately, effectively, and within required timelines.Engage with business units to support the management of risks and controls across applicable risk types, including monitoring adherence to risk policies, procedures, standards, and program requirements.Facilitate meetings with IT and other stakeholders to confirm process understanding, review process maps, validate narratives, and document process-level risk and control information.Collaborate with 2LOD partners by coordinating updates, clarifying expectations, escalating concerns, and supporting the timely resolution of open items.Assess the control environment for assigned processes to determine whether controls effectively mitigate identified risks or whether gaps, weaknesses, or remediation needs should be documented and escalated.Prepare clear documentation of review results, observations, risk and control updates, process changes, stakeholder feedback, and recommended actions for management review.Identify and recommend process improvements that strengthen risk and control documentation, execution consistency, transparency, reporting quality, and alignment with risk program expectations.Identify, develop, and monitor Key Risk Indicators (KRIs) to measure risk exposure and control effectiveness; analyze threshold breaches, track and report metrics and trends, and partner with stakeholders to identify, implement, and monitor corrective and remediation activities through timely resolution.Prepare and maintain risk reporting and dashboards for senior leadership, committees, and governance forums, providing insightful analysis of risk metrics, issues, KRIs, control effectiveness, and emerging trends to support informed decision-making and effective risk oversight." We need to keep all that. Could split into list items each sentence. However some sentences are long and contain multiple clauses; but okay. Now "What You'll Need": list: - 5+ years of related experience in IT risk management, IT governance, internal controls, compliance, technology audit, or a similar field. - Bachelor’s degree in information technology, Information Systems, Cybersecurity, Business, Risk Management, Accounting, Finance, or a related field, or equivalent work experience. - Intermediate experience with IT general controls, risk and control self-assessments, issue management, exception management, control testing, audit evidence practices, and remediation tracking. - Working knowledge of common technology risk and control frameworks and guidance, such as COBIT, NIST, FFIEC, ISO 27001, CRI, or similar industry standards. - Strong organizational and analytical skills with the ability to manage multiple priorities, drive deliverables, meet deadlines, and follow through on open items. - Entry level to intermediate knowledge of general Financial Services or Banking is preferred. - Entry level to intermediate knowledge of applicable regulatory and legal compliance obligations, rules and regulations, industry standards and practices. - Intermediate to advanced in process and data analysis within a specific domain or functional area utilizing critical thinking skills. - Intermediate to advanced working in Microsoft Office & relevant Diagramming Software (e.g. Lucid, Visio, etc.), as well as technical aptitude & experience within a specific domain. - Intermediate speaking and writing communication skills. - Occasional travel required. We need to preserve all. Benefits: "We offer all the important things you'd want — like competitive salaries, an ownership stake in the company, medical and dental insurance, time off, a great 401k matching program, tuition assistance program, an employee volunteer program, and a wellness program. In addition, you’ll have the opportunity to bolster your business knowledge, learning the ins and outs of how successful companies operate and manage their finances, giving you invaluable hands-on experience to help grow your career!" We can list each benefit as list items: competitive salaries, ownership stake, medical and dental insurance, time off, 401k matching program, tuition assistance program, employee volunteer program, wellness program, opportunity to bolster business knowledge (learn ins and outs...). Might keep as sentences. About The Company: "Western Alliance Bank, Member FDIC, is a wholly owned subsidiary of Western Alliance Bancorporation. Serving clients nationwide, Western Alliance Bank includes six legacy bank brands — Alliance Association Bank, Alliance Bank of Arizona, Bank of Nevada, Bridge Bank, First Independent Bank and Torrey Pines Bank — that remain part of the company’s heritage, as well as AmeriHome Mortgage, a Western Alliance Bank Company. Western Alliance Bancorporation is committed to equal employment and will consider all qualified applicants without regard to race, sex, color, religion, age, nation origin, marital status, disability, protected veteran status, sexual orientation, gender identity or genetic information. Western Alliance Bancorporation is committed to working with and providing reasonable accommodations for individuals with disabilities. If you are an individual with a disability and require a reasonable accommodation to complete any part of the application process and/or need an alternative method of applying, please email HR@westernalliancebank.com or call 602-386-2488. When contacting us, please provide your contact information and state the nature of your accessibility issue. We will only respond to inquiries concerning requests that involve a reasonable accommodation in the application process. © Western Alliance Bancorporation" We need to remove EEO/legal/accommodation boilerplate. The instruction: Remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. So we should strip the EEO statement and accommodation request etc. Also remove the copyright line. Keep the substantive description: Western Alliance Bank, Member FDIC, is a wholly owned subsidiary of Western Alliance Bancorporation. Serving clients nationwide, Western Alliance Bank includes six legacy bank brands — Alliance Association Bank, Alliance Bank of Arizona, Bank of Nevada, Bridge Bank, First Independent Bank and Torrey Pines Bank — that remain part of the company’s heritage, as well as AmeriHome Mortgage, a Western Alliance Bank Company. Thus we keep that. Now we need to output HTML fragment only, no /, no markdown fences. We'll produce:

        Responsibilities

        • ...
        • ...
        Similarly for Requirements, Benefits, About the Company (maybe as

        ). Make sure not to repeat job title heading. We must not include Pay or Schedule sections. Now let's craft list items precisely. Responsibilities list items: each sentence. Need to ensure we don't miss any. Let's split the responsibilities text into sentences. I'll copy and manually split. Original responsibilities paragraph: "The IT Staff Analyst II – IT Governance, Risk & Controls is a Senior Analyst and serves as a first line of defense (1LOD) risk professional responsible for supporting and executing risk programs and business unit risk activities in alignment with the Company’s risk appetite and corporate strategy. This role acts as a key contributor and trusted partner to IT while engaging with second line of defense (2LOD) functions to support the management of IT risks and controls across applicable risk types. The Senior Analyst monitors the execution of policies, standards, procedures, regulatory expectations, and control framework requirements. This position is expected to provide analytical leadership, strengthen control inventory documentation and evidence practices, and support Risk and Control Self-Assessments. Additionally, the Staff IT Analyst II will identify, develop, monitor, and maintain KRIs, KPIs, and Operational Metrics for decision making and risk oversight. Partner with control owners, risk owners, first line stakeholders, second line stakeholders, and other partners to track risk and control priorities and updates through completion.Support the timely preparation, execution, update, and refresh of risk and control information by collecting, validating, and organizing data from various sources.Execute assigned risk program and business unit risk activities with a sense of urgency, ensuring deliverables are completed accurately, effectively, and within required timelines.Engage with business units to support the management of risks and controls across applicable risk types, including monitoring adherence to risk policies, procedures, standards, and program requirements.Facilitate meetings with IT and other stakeholders to confirm process understanding, review process maps, validate narratives, and document process-level risk and control information.Collaborate with 2LOD

Similar jobs

Staff IT Analyst II

Western Alliance BankColumbus, OH· 1 wk ago
Information Technologyapply on westernalliancebank.wd5.myworkdayjobs.com