As a Senior Business Risk and Control Analyst, you will partner with leaders across Legal, Risk, Cybersecurity, and Technology to assess emerging regulatory requirements, influence enterprise-wide technology standards, and drive meaningful governance improvements.
In this role, you'll lead regulatory impact assessments, identify opportunities to strengthen technology controls and standards, facilitate cross-functional collaboration, and help translate complex regulatory requirements into practical business solutions. You'll also leverage automation and AI-driven capabilities to modernize governance processes, improve efficiency, and advance the Organizations technology governance framework.
Key Responsibilities and Duties
Monitor, analyze, and assess emerging technology regulations, guidance, and industry requirements to identify impacts to technology governance, controls, and operations.
Partner with Legal, Compliance, Risk, and business stakeholders to determine regulatory applicability and validate interpretations.
Conduct regulatory impact assessments, standard mapping, and gap analyses to evaluate alignment with technology policies, standards and controls.
Facilitate stakeholder review sessions to validate regulatory change impacts, evaluate remediation strategies, gain consensus on implementation requirements, and track remediation efforts, as needed.
Monitor and track remediation activities resulting from regulatory changes, escalating risks, issues, or implementation challenges, as appropriate.
Document regulatory analyses, findings, action plans, and supporting evidence within established governance processes and systems.
Translate regulatory requirements into clear, measurable, and outcome-based IT Standards.
Educational Requirements
- University (Degree) Preferred
Work Experience
- 3+ Years Required; 5+ Years Preferred
Physical Requirements
- Physical Requirements: Sedentary Work
Career Level
7IC
Required Skills:
- Experience in technology risk, regulatory change management, cybersecurity governance, IT audit, IT controls, or policy management.
Preferred Qualifications:
- Experience with managing, implementing or interpreting technology policies, standards, procedures, control frameworks, or regulatory requirements.
- Experience interpreting and translating regulatory requirements into practical governance or control requirements.
- Bachelor’s degree in information technology, Cybersecurity, Risk Management, Business, or related field.
- Experience supporting regulatory or compliance work efforts.
- Experience with control mapping activities.
- Knowledge of FFIEC, NYDFS, GLBA, NIST, ISO 27001, AI governance, cybersecurity regulations, or related technology regulatory frameworks.
- Strong analytical, communication, facilitation and problem-solving skills
- Experience leveraging AI tools for governance, compliance, documentation, or regulatory analysis.
- Professional certifications such as CISA, CRISC, CISSP, CGRC, CIPP, or equivalent.
Related Skills
Business Acumen, Business Process Improvement, Business Process Understanding, Communication, Compliance, Continuous Improvement Mindset, Detail-Oriented, General Risk Management, Influence, Relationship Management, Risk Mitigation, Risk Monitoring
Anticipated Posting End Date:
2026-10-30
Base Pay Range: $73,600/yr - $100,000/yr
Actual base salary may vary based upon, but not limited to, relevant experience, time in role, base salary of internal peers, prior performance, business sector, and geographic location. In addition to base salary, the competitive compensation package may include, depending on the role, participation in an incentive program linked to performance (for example, annual discretionary incentive programs, non-annual sales incentive plans, or other non-annual incentive plans).
_____________________________________________________________________________________________________
