Senior Analyst, Business & Tech Risk Integration

T-Mobile•Frisco, TX

5d•Hybrid

About The Position

The Senior Analyst, Business & Tech Risk Integration will play a key role in bridging business operations and technology transformation. This role will collaborate with Technology, Compliance, Audit, and Business Operations teams to embed risk management into workflows, modernize controls, and strengthen audit readiness. This role will conduct risk assessments, design effective controls, and support digital transformation programs, including automation and AI initiatives, while ensuring transitions are secure, efficient, and compliant. This position is ideal for a curious problem-solver who thrives at the intersection of business and technology and is eager to expand expertise in emerging areas such as AI governance, automation, and digital resiliency.

Requirements

Bachelor’s degree in IT Risk Management, Information Systems, Business or a related field plus 4 years of related work experience OR a combination of education and experience deemed equivalent (Required)
4-7 years - IT risk management, IT compliance, enterprise risk, audit, or similar roles
Working knowledge of risk and control frameworks (SOX, NIST, ISO 27001, COSO, COBIT). (Required)
Familiarity with automation, AI governance concepts, cloud-based risk considerations, and Agile scrum methodology. (Required)
Strong analytical, documentation, and problem-solving skills. (Required)
Effective communicator with the ability to partner across business and technical teams. (Required)
At least 18 years of age
Legally authorized to work in the United States

Nice To Haves

Certifications such as CPA, CIA, CISA, CRISC, CISM, CISSP or Agile/Six Sigma are a plus. (Preferred)

Responsibilities

Conduct proactive risk assessments across business and IT initiatives, including cloud migrations, system implementation, automation rollouts, process transformation, and AI use cases.
Design and evaluate end-to-end business systems architecture and processes to identify and manage SOX, operational, and other compliance domain risks.
Assess and analyze current processes, controls, and systems to identify optimization opportunities and manage the implementation of corrective actions for compliance deficiencies.
Support the development of risk scenarios and impact/likelihood models to assess level of risk and anticipate potential control failures.
Assist in modernizing the control environment by helping transition from manual controls to automated and embedded processes.
Design and build technology and business controls to mitigate risks leveraging GRC systems and standards such as SOX, NIST, COBIT and accounting/audit standards: IT General Controls, (e.g. access management, change management, and computer operations), Data integrity over data transfers, transformation, migration and reports, Agile system development lifecycle controls (SDLC).
Collaborate with IT, Compliance, and Business partners to ensure controls are scalable, efficient, and aligned to enterprise risk appetite.
Support implementation of continuous monitoring techniques using GRC platforms or data-driven reporting.
Manage the end-to-end risk program for IT projects to identify risk and control requirements, and operationalize these changes, including training for control owners.
Assess the impact of business and IT changes on the control environment, recommending practical mitigation steps.
Track and manage risk issues through remediation cycles.
Act as a liaison between Technology, Compliance, Audit, and Business stakeholders to ensure risks and responsibilities are clearly communicated.
Translate technical risk concepts into business-relevant language to support informed decision-making.
Contribute to cross-functional workshops on AI, automation, and emerging technology risk awareness.
Develop and maintain reporting and dashboards on key risk indicators, control health, and mitigation progress across domains.
Support audit readiness by ensuring documentation, evidence, and process narratives are complete and accessible.
Leverage data visualization tools to deliver clear and actionable insights to stakeholders.