Risk Information Technology and Data Analyst

Regions Bank•Atlanta, GA

2d•$79,643 - $105,020•Onsite

About The Position

At Regions, the Risk Information Technology and Data Analyst is a key member of the IT and Data Risk Management organization and performs general activities consistent with the second line of defense, including IT and Data risk identification, measurement, mitigation, monitoring, and reporting. This position supports the implementation of Regions’ Risk Management Framework aligned with regulatory expectations (FFIEC, NIST, GLBA) and internal policies. The analyst collaborates with Technology, Cyber Security, Data and Analytics, Compliance, Business Risk Teams, and Internal Audit to proactively manage IT and Data risks.

Requirements

Bachelor’s degree in related field
Three (3) years of relevant experience in IT risk, IT audit, technology, cybersecurity, or operational risk
Intermediate understanding of risk management, cybersecurity/technology, and compliance principles
Ability to adapt to quickly changing environments
Ability to build effective partnerships
Ability to research, analyze data, and derive facts
Ability to work in a team environment
Ability to work under pressure and meet deadlines
Proficiency with Microsoft Products (Excel, PowerPoint, Power BI, Teams, Visio, SharePoint) and ability to learn additional systems as needed
Strong critical thinking and problem-solving skills
Strong verbal, written communication, and organizational skills
Strong work ethic and self-motivation

Nice To Haves

Experience in a financial institution or public accounting
Certifications obtained or in progress (e.g., Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified in Risk and Information Systems Control (CRISC), Certified Public Accountant (CPA))
Experience with GRC tools (e.g., Archer, ServiceNow)
Strong understanding of key banking regulations and industry standards (e.g., FFIEC, GLBA, NIST).
Strong analytical and communication skills with the ability to translate technical risks for business audiences.

Responsibilities

Assists in conducting IT and Data Risk Targeted Risk Assessments, Continuous Monitoring, and Testing as identified across all aspects of Information Technology and Data, including application development, cyber security, enterprise architecture, business continuity and disaster recovery, data governance, data quality, and change management, etc
Contributes to core risk assessments, including the enterprise risk assessment, payment network attestations, and the cyber security risk assessment which evaluates the company’s compliance with key regulatory requirements
Evaluates the design and effectiveness of technology and data controls aligned to regulatory and industry requirements
Creates and revises IT and Data Risk Management methodology, including procedures
Monitors trends and regulatory changes in IT and Data and advises leadership on technology and data initiatives that support these trends
Reviews IT and Data policies and standards to ensure they are in alignment with regulations and industry best practices
Monitors, tracks, validates, and reports mitigation and resolution of IT and Data risk issues
Produces reporting to effectively communicate key risks, findings, and recommendations for improvement and participates in discussions of results with key stakeholders
Supports annual planning, including staffing assessments and identifying training opportunities
Participates in audit and regulatory examinations, including providing risk insights, collecting evidence, and preparing verbal and written materials.
Collaborates with key stakeholders within strategic business groups and technology to provide credible challenge of Technology and Data’s execution of the risk management framework