Senior Risk Analyst

City of New York•New York, NY

18h•$75,000 - $115,000•Onsite

About The Position

The NYC Financial Information Services Agency-Office of Payroll Administration (FISA-OPA) seeks a Senior Risk Analyst to identify and document the agency’s risk portfolio. The role translates technical risks into business-process impacts, tracks and updates the KPI dashboard, and may contribute to updates of the internal Risk Framework. The analyst works with business team leads and the Chief Information Security Officer (CISO) to understand how business and security risks affect workflow processes. The position also involves technical and policy-related work, including understanding business automation workflows and defining policies concerning risks associated with AI. The role reports directly to the Director of Risk Management. It is listed as 35 hours weekly on a day schedule, with a work location at 5 Manhattan West, New York, NY.

Requirements

A baccalaureate degree from an accredited college and four years of satisfactory full-time experience related to projects and policies required by the position; or equivalent education and/or experience.

Nice To Haves

Subject matter expertise in risk management frameworks and processes.
Strong experience documenting critical business functions and operational processes.
Ability to identify and categorize organizational risks from operational and compliance perspectives.
Ability to develop organizational risk management policies and procedures.
Ability to correlate information from disparate systems, business functions, and operational teams to evaluate and prioritize operational and business risks.
Strong experience with large-scale cloud transformation projects, advising on and documenting business impacts during migration from on-premises assets to cloud assets.
Strong understanding of AI strategies and the ability to communicate risks associated with AI capabilities, including agentic and LLM solutions in enterprise environments.
Strong experience in vendor risk management and product risk management.
Strong experience writing automation scripts, SQL queries, and/or building interactive dashboards.
Experience with legal contract reviews.
Technical background in Information Security, Cloud Services, Artificial Intelligence, Business Continuity, and Disaster Recovery.

Responsibilities

Partner with business stakeholders to identify, assess, aggregate, and document risks and controls, including risks associated with new or modified products, services, distribution channels, regulations, and third-party operations.
Present findings to leadership at various levels regarding system risk, policy enforcement, and AI strategies the agency may undertake.
Contribute to implementing risk policies, practices, and solutions to support holistic risk understanding and management in line with industry best practices.
Enhance strategies, tools, and methodologies for measuring, monitoring, and reporting data risks.
Support the formulation of stress test plans for a line of business or the enterprise, evaluate results, and frame contingency plans with business stakeholders.
Translate technical risks into business-process impacts and track and update the KPI dashboard.
Work with business team leads and the CISO to assess how business and security risks affect agency workflow processes.
Understand business automation workflows and define policies related to AI risks.