Analyst, Business & Tech Risk Integration

T-Mobile•Frisco, TX

16d•$68,800 - $124,100•Hybrid

About The Position

This position is hybrid, working three days per week in the office. The office location can be either Overland Park, KS or Frisco, TX. The Analyst, Business & Tech Risk Integration will support the evolution of T-Mobile's control and compliance landscape by embedding risk management into business processes and technical workflows. This role will collaborate across Technology, Compliance, Audit, and Business Operations to conduct risk assessments, design controls, and drive automation that enhances audit readiness and modernizes compliance practices. This position plays a hands-on role in bridging legacy processes with tech-enabled solutions, contributing directly to T-Mobile's enterprise-wide controls transformation. It is ideal for a curious problem-solver who thrives at the intersection of business and technology and is eager to expand expertise in emerging areas such as AI governance, automation, and digital resiliency.

Requirements

Bachelor’s degree in IT Risk Management, Information Systems, Business or a related field plus 1+ year of related work experience OR a combination of education and experience deemed equivalent (Required)
Working knowledge of risk and control frameworks (SOX, NIST, ISO 27001, COSO, COBIT). (Required)
Familiarity with automation, AI governance concepts, cloud-based risk considerations, and Agile scrum methodology. (Required)
Strong analytical, documentation, and problem-solving skills. (Required)
Effective communicator with the ability to partner across business and technical teams. (Required)
At least 18 years of age
Legally authorized to work in the United States

Nice To Haves

1-4 years IT risk management, IT compliance, enterprise risk, audit, or similar roles (Preferred)
Certifications such as CISA, CRISC, CISM, CISSP or Agile/Six Sigma are a plus. (Preferred)

Responsibilities

Conduct proactive risk assessments across business and IT initiatives, including cloud migrations, system implementation, automation rollouts, process transformation, and AI use cases.
Design and evaluate end-to-end business systems architecture and processes to identify and manage SOX, operational, and other compliance domain risks.
Assess and analyze current processes, controls, and systems to identify optimization opportunities and manage the implementation of corrective actions for compliance deficiencies.
Support the development of risk scenarios and impact/likelihood models to assess level of risk and anticipate potential control failures.
Assist in modernizing the control environment by helping transition from manual controls to automated and embedded processes.
Design and build technology and business controls to mitigate risks leveraging GRC systems and standards such as NIST, COBIT and accounting/audit/SOX standards: IT General Controls, (e.g. access management, change management, and computer operations), Data integrity over data transfers, transformation, migration and reports, Agile system development lifecycle controls (SDLC)
Collaborate with IT, Compliance, and Business partners to ensure controls are scalable, efficient, and aligned to enterprise risk appetite.
Support implementation of continuous monitoring techniques using GRC platforms or data-driven reporting.
Manage the end-to-end risk program for IT projects to identify risk and control requirements, and operationalize these changes, including training for control owners
Assess the impact of business and IT changes on the control environment, recommending practical mitigation steps.
Track and manage risk issues through remediation cycles.
Act as a liaison between Technology, Compliance, Audit, and Business stakeholders to ensure risks and responsibilities are clearly communicated.
Translate technical risk concepts into business-relevant language to support informed decision-making.
Contribute to cross-functional workshops on AI, automation, and emerging technology risk awareness.
Develop and maintain reporting and dashboards on key risk indicators, control health, and mitigation progress across domains.
Support audit readiness by ensuring documentation, evidence, and process narratives are complete and accessible.
Leverage data visualization tools to deliver clear and actionable insights to stakeholders.