Technology Risk Management Analyst

Flagstar Bank•Hicksville, OH

2d•Onsite

About The Position

As a key member of the second line of defense Technology, Cyber, Third Party Risk Management & Resilience Risk Management team, the Technology Risk Analyst will support the Technology Risk team to fulfill the Bank’s Second Line of Defense (“2LoD”) mandate to identify, measure, monitor, and manage the Information Technology (“IT”) risk profile of the Bank, ensuring risk exposure remains within the Bank’s established risk appetite. The Technology Risk Analyst will also be expected to demonstrate independent, effective, outcome-based oversight and challenge for the risk domains within the First Line of Defense (“1LoD”) IT Risk, IT Infrastructure and Architecture teams, Enterprise Technology Operations Services teams IT business technology teams.

Requirements

Undergraduate Degree (4 years or equivalent) Computer Science, Information Technology, Cybersecurity, or relevant field.
4+ Years in an information technology, cybersecurity, risk, audit, and/or compliance role.
Knowledge of IT and Cyber risk management concepts and applicable interagency regulatory guidance
Knowledge of AI Risk Frameworks
Knowledge of non-financial risk frameworks.
Strong analytical skills with the ability to interpret data, draw conclusions, and formulate recommendations.
Strong verbal and written communications skills
Ability to provide outcome-based risk oversight and challenge to first line risk management.
Ability to utilize advanced Excel functionality, create engaging and informative PowerPoint presentations, and work effectively in Word.
Detail oriented with strong organizational skills, able to thrive in an agile environment with multiple competing priorities at times.
Demonstrates a strong ability to build and maintain effective relationships with stakeholders by communicating clearly, engaging in proactive collaboration, and leveraging cross functional insights.
Aligns relationship building efforts with enterprise goals to accelerate performance and drive strategic results.
Builds trusted client relationships, whether internal or external, by identifying needs and delivering tailored solutions to enhance the overall client experience.

Nice To Haves

2+ years of AI Risk frameworks, oversight and/or AI Assurance and Validation.
Additional applicable information security, enterprise risk, and/or compliance certifications and/or experience.
At least 2+ years in an IT and/or Cyber Risk function at a financial institution preferred.
Working knowledge of Archer and/or similar GRC Risk Tool.
Working knowledge of Microsoft Office tools, including excel, word, PowerPoint and Teams.

Responsibilities

Support the Banks Strategic IT Transformation initiatives through independent oversight, providing timely guidance related to proper risk response strategies to IT stakeholders.
Assess risk trends and risk exposures against approved limits by leveraging analytical tools.
Support the assessment and reporting of the IT risk profile based on quantitative and qualitative risk measures and including assessment of effectiveness of planned remediation/mitigation of excess risk exposure and compliance with regulatory requirements.
Provide independent, proactive oversight and challenge of IT risk management at the Bank through execution of risk framework elements including RCSA, control assessment, issue management, incident reviews, targeted deep dives, key risk indicators.
Provide continuous feedback to the CTO, IT Risk, and other IT teams through effective review and challenge on risk identification, control mitigation, independent testing, root cause analysis, reporting and escalation.
Performs special projects, and additional duties and responsibilities as required.
Consistently adheres to regulatory and compliance policies and standards linked to the job as listed and complete required compliance training.
Accountable to maintain compliance with applicable federal, state, and local laws and regulations.