Senior Risk Analyst

City of New York • New York City, NY

5d • Onsite

About The Position

The NYC Financial Information Services Agency-Office of Payroll Administration (FISA-OPA) seeks to hire a Senior Risk Analyst. The Senior Risk Analyst will report directly to the Director of Risk Management. This individual will be responsible for identifying and documenting the risk portfolio of FISA-OPA. This includes translating technical risks to business processes, tracking and updating the KPI dashboard and when applicable, contributing to the updates of the internal Risk Framework. The individual will work closely with the various business team leads and the Chief Information Security Officer (CISO) to understand how business and security risks impact underlying workflow processes within the agency. This individual will also be responsible for working on various technical and policy related functions such as understanding business automation workflows and defining policies around the risks with Al.

Requirements

• A master's degree in computer science from an accredited college or university and three (3) years of progressively more responsible, full-time, satisfactory experience in Information Technology (IT) including applications development, systems development, data communications and networking, database administration, data processing, or user services. At least eighteen (18) months of this experience must have been in an administrative, managerial or executive capacity in the areas of applications development, systems development, data communications and networking, database administration, data processing or in the supervision of staff performing these duties; or
• A baccalaureate degree from an accredited college or university and four (4) years of progressively more responsible, full-time, satisfactory experience as described in "1" above; or
• A four-year high school diploma or its educational equivalent, and six (6) years of progressively more responsible, full-time, satisfactory experience as described in "1" above; or
• A satisfactory combination of education and experience equivalent to "1", "2" or "3" above. However, all candidates must have at least a four-year high school diploma or its educational equivalent and must possess at least three (3) years of experience as described in "1" above, including the eighteen (18) months of administrative, managerial, executive or supervisory experience as described in "1" above. In the absence of a baccalaureate degree, undergraduate credits may be substituted for a maximum of two (2) years of the required experience in IT on the basis of 30 semester credits for six (6) months of the required experience. Graduate credits in computer science may be substituted for a maximum of one (1) year of the required experience in IT on the basis of 30 graduate semester credits in computer science for one (1) year of the required IT experience. However, undergraduate and/or graduate credits may not be substituted for the eighteen (18) months of experience in an administrative, managerial, executive, or supervisory capacity as described in "1" above.
• Must currently be permanent in the civil service title of Computer Systems Manager (or comparable title).

Nice To Haves

• Subject Matter Expert (SME) in Risk Management Frameworks and Processes.
• Strong experience documenting critical business functions and operational processes.
• Ability to identify and categorize risks across the organization from an operational and compliance standpoint.
• Ability to develop risk management policies and procedures for the organization.
• Ability to correlate information from disparate systems, business functions and operational teams to evaluate and prioritize operational and business risk based on priority.
• Strong experience working on large scale cloud transformation projects, advising and documenting business impacts as part of the migratory path of on-premises to cloud assets.
• Strong understanding of Al related strategies and the ability to communicate the risks when engaging with Al capabilities including agentic and LLM solutions in enterprise environments.
• Strong experience performing vendor risk management and product risk management.
• Strong experience writing automation scripts, SQL queries, and or building interactive dashboards.
• Experience with legal contract reviews.
• Technical background in Information Security, Cloud Services, Artificial Intelligence, Business Continuity and Disaster Recovery.

Responsibilities

• Partner with key stakeholders in the business to identify, assess, aggregate and document risks and controls, including risks associated with new or modified products, services, distribution channels, regulations and third-party operations.
• Present findings to various levels of leadership concerning the status of system risk, policy enforcement, and Al strategies that the agency may undertake.
• Contribute to the implementation of new risk policies, practices, and solutions to ensure holistic understanding and management of risks according to industry’s best practice.
• Enhance strategies, tools, and methodologies to measure, monitor, and report data risks.
• Support the formulation of stress test plans for a line of business or the enterprise including the evaluation of results and framing of contingency plans in partnership with key business stakeholders.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior