Senior IS Risk Analyst | Fort Worth, TX

TTI • Fort Worth, TX

21h • Onsite

About The Position

The Information Services (IS) Risk Analyst is responsible for identifying, assessing, documenting, and monitoring information technology risks across the organization. This role supports the execution and ongoing maturity of the IT risk management and governance program by maintaining accurate risk documentation, evaluating the design and effectiveness of IT controls, and tracking remediation. The role also supports compliance and audit activities by providing risk analysis, evidence validation, and risk-related reporting. The IS Risk Analyst will report directly to the Risk and Compliance Manager. Headquartered in Fort Worth, TX, TTI, Inc. is the world’s leading authorized distributor of passive, connector, electromechanical, and discrete components. Celebrating more than 50 years, this Berkshire Hathaway company is ever-growing and has over 100 locations in North America, Europe, and Asia! Join a winning team in a growing global organization!

Requirements

• Bachelor’s degree in computer science, Cybersecurity, Risk Management, or related degree or equivalent combination of education and experience.
• 7+ years of experience preferred in IT or information security risk management, compliance, audit, or GRC with a strong understanding of risk management frameworks, security controls, and risk assessment methodologies.
• IT risk identification, analysis, and documentation
• Control design and operating effectiveness evaluation
• Risk scoring methodologies (qualitative and/or quantitative)
• Technical writing and clear risk articulation
• Strong analytical, organizational, and problem solving skills
• Experience maintaining risk registers, POA&Ms, and remediation tracking
• Time management and prioritization in a multi-initiative environment.
• Familiarity with one or more of the following frameworks or standards: NIST SP 800-171, NIST SP 800-30, ISO/IEC 27001
• Understanding of common IT controls domains
• Experience using GRC platforms
• Proficiency with Microsoft Excel, Word, PowerPoint, and collaboration tools
• Experience designing and implementing AI-enabled process automation solutions
• Must be a U.S. Person as defined by ITAR (U.S. Citizen, U.S. Permanent Resident, Political Asylee, or Refugee).
• Authorized to work in the United States.

Nice To Haves

• Any Cyber Security certifications (e.g. CISA, CRISC), preferred

Responsibilities

• Identify, assess, and document IT risks using approved risk methodologies.
• Ensure accurate and up-to-date IT risk registers and related documentation.
• Evaluate and determine the design and effectiveness of IT controls and identify gaps.
• Track risk remediation activities and validate supporting evidence.
• Partner with stakeholders to ensure clear risk ownership and accountability.
• Lead compliance initiatives and audit activities with timely documentation.
• Communicate IT risks and trends in clear, business-focused language.
• Drive alignment with applicable frameworks, policies, and standards.
• Contribute to continuous improvement of IT risk and Governance, Risk and Compliance (GRC) processes.
• Participate in security project planning and execute assigned tasks.
• Maintain the GRC system to ensure compliance and proper operation of GRC functions.
• Identify and drive process improvement by interfacing with internal business partners and leveraging prior IT audit experience to add value.
• Experience designing and implementing AI-enabled automation solutions to support and enhance GRC and risk management processes.

Benefits

• Medical/ Dental/ Vision
• 401(k)/Roth plan with matching
• Healthcare Savings Accounts
• Educational Assistance (Tuition Reimbursement)
• Ongoing training throughout your employment with opportunities to participate in professional and personal development programs

What This Job Offers

• Job Type: Full-time
• Career Level: Senior