Technical Risk Analyst

Key Responsibilities

• Support testing and assessment of IT security controls and risk management processes.
• Evaluate the effectiveness of IAM controls, including user provisioning, deprovisioning, access reviews, and privileged access management.
• Review control documentation and supporting evidence to identify potential gaps and risks.
• Assist in assessing the design and operating effectiveness of technology security controls.
• Document testing results, findings, and recommendations for stakeholders.
• Track remediation efforts and support follow-up validation activities.
• Partner with technology, cybersecurity, compliance, and risk teams to strengthen control effectiveness.
• Contribute to risk assessments, governance activities, and continuous improvement initiatives.

Required Qualifications

• 3-5+ years of experience in IT Risk, Technology Risk, Cybersecurity, IT Audit, Information Security, Compliance, IAM, or a related field.
• Understanding of IT security controls and risk management principles.
• Experience with Identity and Access Management (IAM) processes and controls.
• Strong analytical, organizational, and documentation skills.
• Experience reviewing documentation, evidence, and technical processes.
• Ability to communicate effectively with technical and non-technical stakeholders.

Preferred Qualifications

• Experience with IT controls testing, compliance assessments, or audit activities.
• Knowledge of frameworks such as NIST, COBIT, ISO 27001, SOX, or similar standards.
• Experience supporting highly regulated or security-focused environments.
• Security+, CISA, CRISC, CISSP, or related certifications.