Senior Risk Analyst

City of New York•New York City, NY

2d•Onsite

About The Position

The NYC Financial Information Services Agency-Office of Payroll Administration (FISA-OPA) is seeking a Senior Risk Analyst to identify and document the agency’s risk portfolio. The role involves translating technical risks into business-process impacts, tracking and updating the KPI dashboard, and contributing to updates of the internal Risk Framework when applicable. The analyst works with business team leads and the Chief Information Security Officer (CISO) to understand how business and security risks affect agency workflows. The position also covers technical and policy-related work, including understanding business automation workflows and defining policies concerning AI-related risks. The Senior Risk Analyst reports directly to the Director of Risk Management. This position is listed under IT Security Specialist (95622) qualifications. Work location is 5 Manhattan West, New York, NY, and the schedule is 35 hours weekly, day shift.

Requirements

A baccalaureate degree from an accredited college and four years of satisfactory full-time experience related to the projects and policies required by the position, or equivalent education and/or experience.
Ability to identify and categorize organizational risks from operational and compliance perspectives.
Ability to develop organizational risk-management policies and procedures.
Ability to correlate information from disparate systems, business functions, and operational teams to evaluate and prioritize operational and business risks.

Nice To Haves

Subject matter expertise in risk-management frameworks and processes.
Strong experience documenting critical business functions and operational processes.
Strong experience on large-scale cloud transformation projects, advising on and documenting business impacts during migration from on-premises assets to cloud assets.
Strong understanding of AI-related strategies and ability to communicate risks involving AI capabilities, including agentic and LLM solutions in enterprise environments.
Strong experience performing vendor risk management and product risk management.
Strong experience writing automation scripts and SQL queries, and/or building interactive dashboards.
Experience with legal contract reviews.
Technical background in information security, cloud services, artificial intelligence, business continuity, and disaster recovery.

Responsibilities

Partner with business stakeholders to identify, assess, aggregate, and document risks and controls, including risks related to new or modified products, services, distribution channels, regulations, and third-party operations.
Present findings to leadership at various levels regarding system-risk status, policy enforcement, and potential agency AI strategies.
Contribute to implementing risk policies, practices, and solutions that support holistic risk understanding and management in line with industry best practices.
Enhance strategies, tools, and methodologies for measuring, monitoring, and reporting data risks.
Support the formulation of stress-test plans for a line of business or the enterprise, evaluate results, and frame contingency plans with business stakeholders.
Translate technical risks into business-process impacts and track and update the KPI dashboard.
Work with business team leads and the CISO to assess how business and security risks affect agency workflow processes.
Contribute to internal Risk Framework updates when applicable and work on technical and policy-related functions, including defining policies around AI risks.