Risk Information Technology and Data Analyst

Regions•Atlanta, GA

10d•$99,222 - $132,650•Onsite

About The Position

The Risk Information Technology and Data Analyst is a key member of Regions’ IT and Data Risk Management organization. The role performs second-line-of-defense activities, including IT and Data risk identification, measurement, mitigation, monitoring, and reporting. It supports implementation of Regions’ Risk Management Framework in alignment with regulatory expectations such as FFIEC, NIST, and GLBA, as well as internal policies. The analyst collaborates with Technology, Cyber Security, Data and Analytics, Compliance, Business Risk Teams, and Internal Audit to proactively manage IT and Data risks. The position also provides day-to-day guidance and mentoring to junior analysts and helps build risk awareness across technology, data, and business functions. It is exempt from timekeeping requirements under the Fair Labor Standards Act and is not eligible for overtime pay.

Requirements

Bachelor’s degree in a related field.
Five years of relevant experience in IT risk, IT audit, technology, cybersecurity, or operational risk.
Strong understanding of risk management, cybersecurity/technology, and compliance principles.
Ability to adapt to quickly changing environments and work under pressure to meet deadlines.
Ability to build effective partnerships and mentor and guide less experienced team members.
Ability to research, analyze data, and derive facts.
Proficiency with Microsoft products, including Excel, PowerPoint, Power BI, Teams, Visio, and SharePoint, and ability to learn additional systems as needed.
Strong critical thinking and problem-solving skills.
Strong verbal and written communication and organizational skills.
Strong work ethic and self-motivation.
Ability to balance business needs, technology considerations, and risk management principles.
Strong organizational, prioritization, and time-management skills, with ability to manage multiple responsibilities and drive work forward with minimal oversight in a fast-paced environment.
Ability to communicate effectively, influence outcomes, and support sound risk-based decision-making.

Nice To Haves

Certifications such as Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified in Risk and Information Systems Control (CRISC), or Certified Public Accountant (CPA).
Experience in a financial institution or public accounting.
Experience with GRC tools such as Archer or ServiceNow.
Strong understanding of banking regulations and industry standards such as FFIEC, GLBA, and NIST.
Experience in operational risk management, compliance, or related risk disciplines.
Exposure to IT systems, technology risk, or technology-driven business processes.
Experience with data privacy, information protection, HIPAA, or related regulatory requirements.
Aptitude and willingness to learn and apply the organization’s risk assessment methodologies and processes.

Responsibilities

Lead IT and Data Risk Targeted Risk Assessments, Continuous Monitoring, and Testing across areas including application development, cyber security, enterprise architecture, business continuity and disaster recovery, data governance, data quality, and change management.
Perform core risk assessments, including the enterprise risk assessment, payment network attestations, and the cyber security risk assessment evaluating compliance with key regulatory requirements.
Perform gap assessments to evaluate the design and effectiveness of technology and data controls against regulatory and industry requirements.
Review and validate risk analysis work completed by junior team members.
Create and revise IT and Data Risk Management methodology, including procedures.
Monitor trends and regulatory changes in IT and Data and advise leadership on technology and data initiatives that support these trends.
Review IT and Data policies and standards to ensure alignment with regulations and industry best practices.
Monitor, track, validate, and report mitigation and resolution of IT and Data risk issues.
Develop and produce reporting that communicates key risks, findings, and recommendations for improvement, and participate in discussions of results with key stakeholders.
Perform annual planning, including staffing assessments and identifying training opportunities.
Support regulatory and audit examination readiness by providing risk insights, collecting evidence, and preparing verbal and written materials.
Form and maintain effective partnerships with strategic business groups and technology stakeholders, providing credible challenge of Technology and Data’s execution of the risk management framework.
Provide day-to-day guidance and mentoring to junior analysts and help build risk awareness across technology, data, and business functions.
Serve as a trusted partner in identifying, assessing, and mitigating risk across business functions, applying an enterprise-wide risk management perspective.