Cyber Risk Mgmt Sr Analyst

Texas Capital•Dallas, NC

About The Position

The Senior Analyst supports Texas Capital Bank’s Information Risk function, which serves as the Bank’s Second Line of Defense (2LOD) by independently assessing and monitoring information risks across the organization. The role turns complex data into clear, actionable reporting for senior management and decision-making committees, helping communicate the Bank’s risk posture and strategy. The position conducts independent review and challenge of risk assessments, validates controls and risk findings, analyzes potential business impacts, recommends mitigation strategies, and develops Information Risk governance documentation. It prepares detailed reports and dashboards for senior leadership, executive and Board-level committees, and contributes to business impact assessments, key risk metrics, scenario analysis, material risk identification, and issue management. The role also partners with business units, technology teams, control functions, regulators, and auditors on risk management, regulatory compliance, examinations, audits, and strategic initiatives. It evaluates cybersecurity and technology risks involving cloud environments, third-party vendors, software development, vulnerability management, and operational resilience.

Requirements

At least 5 years of experience, preferably directly in risk management related to RCSA, KRI, internal or external losses, scenario analysis, organizational change management, and/or program strategic design and execution.
Bachelor’s degree, preferably in Finance, Accounting, Business, Analytics, or Computer Science, or an equivalent combination of education, training, and experience.
Risk compliance and/or audit experience, including reading, interpreting, tracking, and administering regulatory and general risk requirements.
Experience with regulators such as the FRB, OCC, and FDIC.
Strong documentation capabilities.
Ability to communicate results to technical and business audiences.
Strong analytical and problem-solving abilities, including critical thinking, research, and decision-making.
Ability to implement and communicate actionable insights to streamline processes and transactions.
High self-motivation and a strong sense of initiative.
Ability to manage competing priorities across concurrent large, complex projects, initiatives, and deliverables.
Strong verbal, written, and interpersonal communication skills.

Nice To Haves

Experience with risk management involving RCSA, KRI, internal or external losses, scenario analysis, organizational change management, and/or program strategic design and execution is preferred.
Bachelor’s degree in Finance, Accounting, Business, Analytics, or Computer Science is preferred.

Responsibilities

Provide independent oversight and challenge of information security, technology, and cyber risks across the enterprise.
Lead risk assessments, control reviews, and risk validation activities to identify emerging threats, assess business impact, and recommend mitigation strategies.
Analyze enterprise risk data, including vulnerability management results, security assessments, and operational metrics, to identify trends and strengthen the organization’s risk posture.
Develop and maintain Information Risk governance frameworks, including policies, standards, procedures, risk methodologies, and supporting documentation.
Produce executive-level reports and dashboards for senior leadership, risk committees, and Board committees, translating technical risks into concise business-focused insights.
Partner with business units, technology teams, and control functions to support risk management, regulatory compliance, and strategic initiatives.
Support Risk and Control Self-Assessments (RCSAs), Key Risk Indicators (KRIs), scenario analysis, issue management, and material risk identification.
Support regulatory examinations and audits by ensuring risk documentation, evidence, and reporting meet regulatory and governance expectations.
Evaluate cybersecurity and technology risks related to cloud environments, third-party vendors, software development, vulnerability management, and operational resilience.
Develop recommendations to improve risk governance, control effectiveness, and decision-making.
Create executive dashboards, risk heatmaps, and trend analyses to provide timely visibility into risk exposures and mitigation efforts.
Collaborate with regulators, auditors, and stakeholders to align with industry standards and regulatory requirements.