Lead Risk Analyst

Global Payment Holding Company•Columbus, GA

7d•Hybrid

About The Position

The Lead Risk Analyst provides hands-on support for developing, implementing, and enforcing the IT Risk program, including risk analysis, risk intake management, risk and issue management, and risk assessments. The role performs technology risk management and assessment functions, develops processes for reporting and data analysis to minimize risk exposure, consults with managers and executives, and supports conformance with applicable laws and regulations and regular compliance training. The position mentors team members in IT risk management, leads complex risk assessment initiatives, and works across the company to identify technology risks, assess mitigation controls, and coordinate remediation plans. It helps shape the IT risk assessment roadmap, maintains a centralized risk management repository, and prepares IT risk reporting for business units, executives, and the Board. The role also monitors significant risks, improves risk procedures and methodologies, and adapts oversight practices to industry and regulatory changes. International travel may be required; additional working hours may be necessary.

Requirements

Bachelor’s degree in a related field from an accredited university, or relevant experience in lieu of a degree may be considered.
Typically at least 10 years of related professional experience, including at least 5–6 years of managerial experience.
Strong technical skill set.
Cybersecurity knowledge and experience.
Assertive work ethic and passion for the work and for leading and developing others.
Strong multitasking, analytical, networking, verbal and written communication, and presentation skills, including for executive management and audit engagements.
Hold one or more of the following certifications: PCI Professional (PCIP), Systems Security Certified Practitioner (SSCP), CISSP, AWS Cloud Practitioner, Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Auditor (CISA), Certified in the Governance of Enterprise IT (CGEIT), or GRC Professional (GRCP).

Nice To Haves

Master’s degree in a related field from an accredited university.
Prior Global Payments, payment industry, or technology industry experience.

Responsibilities

Mentor team members in their personal and professional development of IT risk management practices, especially IT risk assessments and risk/issue management.
Use technical skills or aptitude to identify and address issues across technology stacks, features, and components.
Participate in and consult on IT risk activities across the company.
Lead risk assessments, including examining IT applications, processes, and systems and assessing mitigation control effectiveness.
Participate in creating the IT risk assessment roadmap, identifying technology topics and company areas for quarterly reviews.
Identify gaps, emerging threats, potential financial exposure, and client impact, and collaborate with stakeholders on remediation action plans.
Lead and perform complex risk assessment initiatives, including Single Point of Failure assessments for mergers and acquisitions.
Administer the centralized risk management repository for compliance, conformance, quantified key risks, and mitigation measures within risk tolerance guidelines.
Develop and provide IT risk reporting for business units, executives, and the Board of Directors that meets regulatory requirements and supports risk-based decision-making.
Present reporting updates on IT risk priorities and procedures.
Monitor significant risks to ensure they are actively managed and reported.
Recommend and help implement improvements to IT risk procedures, practices, processes, and methodologies.
Anticipate how the organization must adapt to industry changes.
Adhere to operational risk policies and programs based on global regulatory guidelines, requirements, and technology industry best practices.
Assess, monitor, and verify implementation of IT risk management processes.
Perform other duties as assigned; travel and additional working hours may be required.