Lead Risk Analyst

Global Payments Inc.•Alpharetta, GA

8d•Hybrid

About The Position

The Lead Risk Analyst provides hands-on support for developing, implementing, and enforcing the IT Risk program, including risk analysis, intake and issue management, and risk assessments. The role performs technology risk management and assessment functions, develops processes for efficient reporting and data analysis to minimize risk exposure, consults with managers and executives, and helps ensure compliance with applicable laws and regulations, including regular compliance training. The position mentors team members in IT risk practices and leads company-wide risk activities. It assesses technology applications, processes, and systems; evaluates mitigation controls; contributes to a quarterly assessment roadmap; identifies gaps, emerging threats, financial exposure, and client impact; and collaborates on remediation plans. It also leads complex initiatives such as Single Point of Failure assessments for mergers and acquisitions, administers a centralized risk repository, prepares IT risk reporting for business units and executive and Board audiences, monitors significant risks, and recommends improvements to risk procedures and methodologies. The role supports compliance oversight aligned with global regulatory guidance and technology standards. Some international travel and additional working hours may be required.

Requirements

Bachelor's degree in a related field from an accredited university, or relevant experience in lieu of a degree may be considered.
Typically a minimum of 10 years of relevant experience.
A minimum of 5–6 years of experience in a managerial position.
Strong technical skill set.
Cybersecurity knowledge and experience.
Assertive work ethic and passion for the work and for leading and developing others.
Strong multitasking, analytical, networking, verbal and written communication, and presentation skills, including presentations for executive management and audit engagements.
At least one of the following certifications: PCI Professional (PCIP), Systems Security Certified Practitioner (SSCP), CISSP, AWS Cloud Practitioner, Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Auditor (CISA), Certified in the Governance of Enterprise IT (CGEIT), or GRC Professional (GRCP).

Nice To Haves

Master's degree in a related field from an accredited university.
Prior Global Payments, payment, or technology industry experience.

Responsibilities

Mentor team members in their personal and professional development of IT risk management practices, particularly risk assessments and risk/issue management.
Use technical skills or aptitude to identify and address issues across technology stacks, features, and components.
Participate in and consult on IT risk activities across the company.
Lead risk assessments of IT applications, processes, and systems, including evaluating mitigation control effectiveness.
Participate in developing the IT risk assessment roadmap, including quarterly reviews of relevant technology topics and company areas.
Identify gaps, emerging threats, potential financial exposure, and client impact, and collaborate with stakeholders on remediation action plans.
Lead and perform complex risk assessment initiatives, including Single Point of Failure assessments in the merger and acquisition process.
Administer a centralized risk management repository covering compliance, conformance, quantified key risks, risk tolerances, and mitigation measures.
Develop and provide IT risk reporting for business units, executives, and the Board of Directors to meet regulatory requirements and support risk-based decision-making.
Present updates on IT risk priorities and procedures, and monitor significant risks to ensure they are actively managed and reported.
Recommend and help implement improvements to IT risk procedures, practices, processes, and methodologies.
Anticipate organizational adaptations needed in response to industry changes.
Adhere to operational risk policies and programs based on global regulatory guidelines, requirements, best practices, and technology industry standards.
Assess, monitor, and verify implementation of IT risk management processes.
Perform other duties as assigned.