As a Lead IT Regulatory Change Analyst, you will partner with leaders across Legal, Risk, Privacy, Cybersecurity, and Technology to lead the assessment of emerging regulatory requirements, shape enterprise technology policies and standards, and strengthen the organization's governance framework. You'll drive regulatory impact and gap assessments, ensure alignment between regulatory obligations, industry frameworks, and technology standards, and provide visibility into compliance readiness, risks, and remediation activities. In this role, you'll influence enterprise-wide governance decisions, foster cross-functional collaboration, and help ensure the organization remains resilient, compliant, and prepared for an evolving regulatory landscape.
Key Responsibilities and Duties
IT Regulatory Change Management :
- Oversee the end-to-end intake, applicability assessment, gap assessment, and response planning for technology-related regulatory changes.
- Lead cross-functional engagement with Legal, Privacy, Risk and Technology teams to evaluate regulatory requirements and determine organizational impacts.
- Ensure regulatory requirements are effectively evaluated and appropriately translated into IT Policies, Standards and/or and procedural requirements, as needed.
- Establish reporting and governance routines that provide visibility into regulatory obligations, risks, remediation activities, and compliance readiness.
IT Policy & Standards Governance :
- Direct the lifecycle management of IT Policies, Standards, and supporting governance artifacts.
- Drive ownership, accountability, and adoption of IT Standards across technology organizations.
- Lead efforts to strengthen IT Standards alignment with industry frameworks, regulatory requirements, and organizational risk expectations.
- Support governance forums and committees, including preparation of materials and decision-making recommendations.
Framework Alignment & Risk Management :
- Lead efforts to increase alignment between IT Standards, regulatory requirements, and the Secure Controls Framework.
- Identify governance gaps, emerging risks, and opportunities to strengthen technology control environments.
Educational Requirements
- University (Degree) Preferred
Work Experience
- 5 Years Required; 7 Years Preferred
Physical Requirements
- Physical Requirements: Sedentary Work
Career Level
8IC
Required Skills:
- 5+ years in technology risk, regulatory change management, cybersecurity governance, IT audit, IT controls, or policy management.
- Experience with managing, implementing or interpreting technology policies, standards, procedures, control frameworks, or regulatory requirements.
Preferred Skils:
- Bachelor's degree in Information Technology, Cybersecurity, Risk Management, Business, or related field.
- Experience interpreting and translating regulatory requirements into practical governance or control requirements
- Experience supporting regulatory or compliance work efforts.
- Experience with control mapping activities.
- Knowledge of FFIEC, NYDFS, GLBA, NIST, ISO 27001, AI governance, cybersecurity regulations, or related technology regulatory frameworks
- Strong analytical, communication, facilitation and problem-solving skills
- Experience leveraging AI tools for governance, compliance, documentation, or regulatory analysis.
- Professional certifications such as CISA, CRISC, CISSP, CGRC, CIPP, or equivalent.
Related Skills
Business Acumen, Business Process Improvement, Business Process Understanding, Communication, Compliance, Continuous Improvement Mindset, Detail-Oriented, General Risk Management, Influence, Relationship Management, Risk Mitigation, Risk Monitoring
Anticipated Posting End Date:
2026-10-31
Base Pay Range: $92,300/yr - $122,000/yr
Actual base salary may vary based upon, but not limited to, relevant experience, time in role, base salary of internal peers, prior performance, business sector, and geographic location. In addition to base salary, the competitive compensation package may include, depending on the role, participation in an incentive program linked to performance (for example, annual discretionary incentive programs, non-annual sales incentive plans, or other non-annual incentive plans).
_____________________________________________________________________________________________________
