Cyber Pentest Sr Analyst

Texas Capital•Dallas, NC

About The Position

The Information Risk function serves as the Bank’s Second Line of Defense (2LOD), independently assessing and monitoring information risks across the organization. This role supports the Information Risk Team by translating complex data into clear, actionable reports that inform senior management and decision-making committees on the Bank’s risk posture and strategy. The position conducts, reviews, and validates risk assessments; analyzes the potential impact of identified risks; recommends mitigation strategies; and develops governance documentation. It also prepares detailed reports for senior, executive, and board-level committees and contributes to business impact assessments, key risk metrics, scenario analysis, material risk identification, and issue management. The role applies cybersecurity governance, risk, and compliance knowledge, including vulnerability management, incident response, control testing, security audits, threat intelligence, third-party risk, secure SDLC, cloud security, regulatory frameworks, and penetration testing. It works with business control offices and risk reporting functions to produce accurate, timely information risk reporting and governance materials.

Requirements

Bachelor’s degree or an equivalent combination of education, training, and experience.
Experience in risk compliance and/or audit, including reading, interpreting, tracking, and administering regulatory and general risk requirements.
Ability to communicate results to technical and business audiences.
Strong analytical and problem-solving skills, including critical thinking, research, and decision-making.
Ability to implement and communicate actionable insights to streamline processes and transactions.
High self-motivation and a strong sense of initiative.
Ability to manage competing priorities across concurrent large, complex projects, initiatives, and deliverables.
Strong verbal, written, and interpersonal communication skills.
Technical proficiency with MS Office, including Visio, PowerPoint, and Excel, and PowerShell.
Python scripting experience using these tools to build system designs and provide updates during weekly, monthly, and quarterly reporting periods.

Nice To Haves

Bachelor’s degree preferred in Finance, Accounting, Business, Analytics, or Computer Science.
Experience with regulators such as the FRB, OCC, or FDIC.

Responsibilities

Analyze data from enterprise and technical management systems, security scanning tools, and identity management solutions to identify and track risk trends.
Aggregate complex data and prepare detailed reports for stakeholders and decision-making committees.
Recommend data-driven risk mitigation strategies.
Ensure risk management documentation and reports submitted to internal and external auditors and regulators are accurate and complete.
Collaborate with business control offices and risk reporting functions to deliver timely information risk management reporting.
Interpret findings and provide reports with actionable recommendations to strengthen the security posture.
Lead the creation and enhancement of security policies and procedures based on test results.
Develop and present risk reports highlighting findings, potential impacts, and mitigation strategies.
Use charts, graphs, and dashboards to communicate risk levels and trends.
Write and maintain governance documents, including policies, programs, standards, procedures, and process maps, aligned with organizational strategy and regulatory requirements.
Perform additional duties or projects as assigned.