Sr. Security Risk Analyst

Reporting to the Business Information Security Officer (BISO), the Senior Information Security Risk Analyst will lead specific information security risk management related activities that protect its clients while complying with applicable regulations and policies. The Senior Information Security Risk Analyst provides subject matter expertise and leadership to improve the organization’s security policies and security risk management processes by establishing a framework of controls so that the Bank can manage risk, meet regulatory compliance and maintain governance over all aspects of IT. The Senior Information Security Risk Analyst will have responsibilities to ensure that identifies risks and treats them in a timely manner while reporting the current level of exposure to known threats. The role includes implementation and maintenance of policies, as well as training and awareness plus vendor risk management responsibilities. This role will work closely with Enterprise Risk Management (ERM) leaders. The position requires experience of information security risk management in a regulated environment using industry standard risk and control frameworks. The responsibilities include Lead all audit prep and response across InfoSec and IT, perform security risk analysis, contribute to Information Security reports, lead efforts to track and remediate risk, track risks and issues and ensure their on-schedule remediation, establish and maintain processes for managing security-related audits, evaluate risk and controls by executing targeted testing of processes, develop and publish policy, standards and procedures for implementation, participate in the vendor risk assessment process and provide security risk assessment services and support cyber training and awareness program to ensure all findings are addressed timely. Also, lead the configuration, integration, and optimization of Governance, Risk, and Compliance (GRC) platforms.