Principal IT Risk Analyst- Infrastructure - Johnston, RI, United States
1 day ago
Job description
DescriptionPrincipal IT Risk Analyst (Infrastructure)
The Principal IT Risk Analyst (Infrastructure) is responsible for providing oversight and governance of technology risks to ensure the organization operates in a safe and sound manner within regulatory expectations. This position is a backfill and will join a first-line risk team working directly with enterprise technology enablement teams (e.g., Cloud based Infrastructure, Storage, IT Operations) to proactively identify, assess, and mitigate risk aligned with the enterprise risk appetite framework and industry best practices.
Responsibilities
• Serve as a technical Subject Matter Expert on projects and working groups, identifying risks and controls inherent in cloud hosted infrastructure, storage, and IT Operations.
• Collaborate with technical teams to document process maps, procedures, control adequacy worksheets, control test steps, and job aids using Visio, Confluence, and other enterprise documentation tools.
• Respond to internal and external audits, regulatory exams, and other requests for information. Assist in evaluating findings and implementing corrective actions.
• Identify risk issues, document them in GRC Archer, manage action plans, and provide evidence for closure.
• Engage in Third Party Risk Management Program activities to manage technology risk for related service providers in assigned areas.
• Analyze and interpret risk and security data from tools such as GRC, Splunk, DataDog, ServiceNow, Nexus, and Qualys to identify trends and gaps.
• Partner with risk colleagues to complete RCSAs, ad-hoc risk assessments, procedure updates, and other risk management activities.
• Develop well-written, data-driven risk reports within deadlines.
• Act as a liaison with business stakeholders to identify, track, and manage technology risk exposure.
• Manage multiple time-sensitive workloads using Jira and other productivity tools.
• Stay current on changes to infrastructure processes, internal policies, and industry trends to assess potential risk impacts.
• Build strong relationships with business partners, Audit, Governance teams, and SMEs to support risk mitigation.
Experience and Skills
• Technical knowledge in Infrastructure, Storage, and Cloud Infrastructure.
• Familiarity with:
• Storage solutions and cyber recovery best practices
• Operating systems: RHEL, Windows, VMware ESX
• Security tools: Qualys, Wiz, Splunk, CyberArk
• Network and infrastructure security best practices
• Experience with tools like Excel, ServiceNow, DataDog, Tableau, or Grafana for data analysis and reporting.
• Understanding of control frameworks (NIST, CoBIT, ITIL) and risk self-assessment.
• Strong interpersonal, analytical, and writing skills.
• Ability to work in a fast-paced, ambiguous environment with multiple priorities.
Education
• Minimum 7–10 years in IT, risk management, or internal audit with increasing responsibility.
• Bachelor's degree (IT/Security/Business) required; Master's preferred.
Preferred Certifications
CISA, CISM, CISSP, CRISC, AWS Cloud Practitioner, Azure Fundamentals.
Work Schedule
- Hours per Week: 40
- Work Schedule: M–F
- Hybrid: 4 days per week onsite at a Citizens corporate office
#LI-Citizens1
Similar jobs
Principal IT Risk Analyst (Infrastructure) provides oversight and governance of technology risks to ensure the organization operates in a safe and sound manner within regulatory expectations. · Serve as a technical Subject Matter Expert on projects and working groups. · Collabora ...
1 month ago
The Principal IT Risk Analyst (Infrastructure) is responsible for providing oversight and governance of technology risks to ensure the organization operates in a safe and sound manner within regulatory expectations.This position is a backfill and will join a first-line risk team ...
1 month ago
The Principal IT Risk Analyst (Infrastructure) is responsible for providing oversight and governance of technology risks to ensure the organization operates in a safe and sound manner within regulatory expectations. · ResponsibilitiesServe as a technical Subject Matter Expert on ...
3 weeks ago
This role is responsible for coordinating and managing the day-to-day running of this Infrastructure area. · ...
1 week ago
The incumbent is responsible for coordinating and managing the day-to-day running of this Infrastructure area. · ...
1 week ago
Description · We are seeking a highly skilled and experienced Senior Cyber Defense Operations Tactical Support Specialist to join our Cyber Defense Operations team. This role plays a critical part in enhancing the capabilities of our Security Operations Center (SOC) through train ...
18 hours ago
An analyst position is available with experience working with Applicant Tracking systems like Oracle Cloud Recruiter and iCIMS. The role will work on the Talent Acquisition team and support the day-to-day use of the ATS platform. · ...
1 month ago
We are seeking a Senior Third Party Risk Analyst to support our program by working with assigned business units to ensure third-parties are managed in accordance with program design. · ...
1 month ago
+Job summary · The Principal IT Risk Analyst (Infrastructure) is responsible for providing oversight and governance of technology risks to ensure the organization operates in a safe and sound manner within regulatory expectations. · +ResponsibilitiesServe as a technical Subject M ...
1 month ago
We are one of the fastest growing IT Consulting company across the USA and We offer a wide gamut of consulting solutions customized to our 450+ clients ranging from Fortune 500/1000 to Start-ups across various verticals like Technology, Financial Services, Healthcare, Life Scienc ...
3 weeks ago
· We are seeking a highly skilled and experienced Senior Cyber Defense Operations Tactical Support Specialist to join our Cyber Defense Operations team. This role plays a critical part in enhancing the capabilities of our Security Operations Center (SOC) through training, mentor ...
15 hours ago
Our client, a leading data-driven organization, is seeking a Data Engineer to build and scale modern data platforms that power analytics, reporting, and advanced insights. · ...
1 month ago
Job Summary · Join our dynamic team as a Data Engineer III where you'll design and implement cutting-edge data pipelines integrate diverse data sources ensure the highest standards of data quality security compliance. · ...
1 month ago
· ...
1 month ago
We are looking for a data engineer III to design and implement cutting-edge data pipelines, integrate diverse data sources, and ensure the highest standards of data quality, security, and compliance. · ...
1 month ago
Are you passionate about building robust data ecosystems that power advanced analytics and business insights? Join our dynamic team as a Data Engineer III, where you'll design and implement cutting-edge data pipelines, integrate diverse data sources, and ensure the highest standa ...
3 weeks ago
We are seeking a Data Engineer III to join our dynamic team. As a Data Engineer III, you will design and implement cutting-edge data pipelines, integrate diverse data sources, and ensure the highest standards of data quality, security, and compliance. This is your opportunity to ...
2 weeks ago
We are looking for a Data Engineer III to join our dynamic team. As a Data Engineer III, you will design and implement cutting-edge data pipelines, integrate diverse data sources, and ensure the highest standards of data quality, security, and compliance. · ...
1 month ago
This is a senior third party risk analyst role that will support the program by working with assigned business units to ensure third-parties are managed in accordance with program design. · ...
1 month ago
We are looking for a Calypso Developer to join our team. The ideal candidate will have at least 7 years of experience supporting Adenza's Calypso platforms and infrastructure. · ...
3 weeks ago