Information Risk Management Analyst

Texas Capital Bancshares, Inc.•Richardson, TX

37d

About The Position

The Information Risk function serves as the Bank's Second Line of Defense (2LOD), independently assessing and monitoring information risks across the organization. This role supports the Information Risk Team by translating complex data into clear, actionable reports that inform senior management and decision-making committees on the Bank's risk posture and strategy. Responsibilities include conducting, reviewing, and validating risk assessments; analyzing the potential impact of identified risks; recommending mitigation strategies; and developing governance documentation. The position also prepares detailed reports for senior, executive, and board-level committees while contributing to broader risk activities such as business impact assessments, key risk metrics, scenario analysis, material risk identification, and issue management.

Requirements

Bachelor's degree (preferred in Finance, Accounting, Business, or Analytics, Computer Science); or equivalent combination of education, training, experience
Minimum 5 years of experience, preferably directly in risk management related to Risk Control Self-Assessment (RCSA), Key Risk Indicator (KRI), internal/external losses, scenario analysis, organizational change management, and/or program strategic design and execution.
Risk Compliance and/or Audit experience, with experience reading, interpreting, tracking, and administrating regulatory and general risk requirements
Experience with regulators (FRB, OCC, FDIC) or law enforcement.
Strong documentation capabilities.
Advanced proficiency in MS Office applications (Excel, PowerPoint, Visio, Word), with demonstrated experience in leveraging these tools for data analysis and the preparation of reports for executive management, risk committees, and related forums.
Ability to communicate results to both technical and business audiences.
Strong analytical and problem-solving mindset, focused on results with critical thinking, research and problem-solving, and decision-making skills.
Ability to implement and communicate actionable insights to streamline processes/transactions.
Highly self-motivated with a strong sense of initiative.
Ability to manage competing priorities on concurrent large, complex projects, initiatives, and deliverables.
Strong verbal, written, and interpersonal communication skills.

Responsibilities

Drive risk identification by proactively analyzing data from enterprise and technical management systems, security scanning tools, and identity management solutions to uncover and track risk trends.
Synthesize and communicate insights by aggregating complex data and generating detailed reports that inform key stakeholders and decision-making committees.
Deliver actionable recommendations for risk mitigation strategies, leveraging data-driven analysis to influence business outcomes.
Ensure accuracy and completeness of all risk management documentation and reports submitted to internal and external auditors and regulators, upholding the highest standards of integrity.
Collaborate strategically with business control offices and risk reporting functions to align and deliver timely information risk management reporting.
Interpret findings and generate solutions by providing detailed reports with actionable recommendations to strengthen security posture.
Champion policy development by leading the creation and enhancement of security policies and procedures based on test results, driving continuous improvement of security frameworks.
Develop and present risk reports that clearly highlight key findings, potential impacts, and mitigation strategies to support informed decision-making.
Visualize complex data using charts, graphs, and dashboards to effectively communicate risk levels and trends to diverse audiences.
Lead documentation efforts by writing and maintaining technical and governance documents, including policies, programs, standards, procedures, and process maps, ensuring alignment with organizational strategy and regulatory requirements.
Take ownership of additional duties or projects as assigned, demonstrating flexibility and commitment to organizational goals.