Risk Information Technology and Data Analyst

Regions Bank•Charlotte, AL

4d•Onsite

About The Position

The Risk Information Technology and Data Analyst is a key member of Regions’ IT and Data Risk Management organization. The position performs second-line-of-defense activities, including IT and Data risk identification, measurement, mitigation, monitoring, and reporting. It supports implementation of Regions’ Risk Management Framework in alignment with regulatory expectations, including FFIEC, NIST, and GLBA, and internal policies. The analyst collaborates with Technology, Cyber Security, Data and Analytics, Compliance, Business Risk Teams, and Internal Audit to proactively manage IT and Data risks. The role leads targeted risk assessments, continuous monitoring, and testing across areas such as application development, cybersecurity, enterprise architecture, business continuity and disaster recovery, data governance, data quality, and change management. It conducts enterprise and cybersecurity risk assessments and payment network attestations; evaluates control design and effectiveness; reviews junior team members’ work; and develops risk methodologies, procedures, policies, and standards. The position also monitors regulatory developments and risk issues, communicates risks and recommendations, supports annual planning and regulatory or audit examinations, maintains stakeholder partnerships, and guides junior analysts.

Requirements

Bachelor’s degree in a related field.
Five years of relevant experience in IT risk, IT audit, technology, cybersecurity, or operational risk.
Strong understanding of risk management, cybersecurity/technology, and compliance principles.
Ability to adapt to quickly changing environments and build effective partnerships.
Ability to mentor and guide less experienced team members.
Ability to research and analyze data and derive facts.
Ability to work under pressure and meet deadlines.
Proficiency with Microsoft products, including Excel, PowerPoint, Power BI, Teams, Visio, and SharePoint, and ability to learn additional systems.
Strong critical-thinking, problem-solving, verbal and written communication, and organizational skills.
Strong work ethic and self-motivation.
Ability to balance business needs, technology considerations, and risk management principles.
Strong organizational, prioritization, and time-management skills, including ability to manage multiple responsibilities and drive work forward with minimal oversight.
Aptitude and willingness to learn and apply the organization’s risk assessment methodologies and processes.

Nice To Haves

Certifications such as CISA, CISSP, CRISC, or CPA.
Experience in a financial institution or public accounting.
Experience with GRC tools such as Archer or ServiceNow.
Strong understanding of banking regulations and industry standards such as FFIEC, GLBA, and NIST.
Experience in operational risk management, compliance, or related risk disciplines.
Exposure to IT systems, technology risk, or technology-driven business processes.
Experience with data privacy, information protection, HIPAA, or related regulatory requirements.

Responsibilities

Lead IT and Data Risk targeted assessments, continuous monitoring, and testing across technology and data areas.
Perform core risk assessments, including the enterprise risk assessment, payment network attestations, and cybersecurity risk assessment.
Conduct gap assessments to evaluate technology and data control design and effectiveness against regulatory and industry requirements.
Review and validate risk analysis work completed by junior team members.
Create and revise IT and Data Risk Management methodology and procedures.
Monitor trends and regulatory changes in IT and Data and advise leadership on related initiatives.
Review IT and Data policies and standards for alignment with regulations and industry best practices.
Monitor, track, validate, and report mitigation and resolution of IT and Data risk issues.
Develop reporting that communicates key risks, findings, and recommendations, and discuss results with stakeholders.
Perform annual planning, including staffing assessments and identifying training opportunities.
Support regulatory and audit examination readiness by providing risk insights, collecting evidence, and preparing verbal and written materials.
Build and maintain stakeholder partnerships and provide credible challenge of Technology and Data’s execution of the risk management framework.
Provide day-to-day guidance and mentoring to junior analysts and build risk awareness across technology, data, and business functions.