Job Openings
Security and Risk Analyst
About the job Security and Risk Analyst
Responsibilities:
- Evaluate and manage security risks associated with large-scale IT systems, with a focus on core banking systems and technology migrations
- Develop and enforce security protocols and risk management policies in line with industry standards and regulatory mandates
- Ensure compliance with financial services regulations, conducting risk assessments to proactively identify vulnerabilities
- Work alongside various departments to guide risk mitigation efforts and support secure project implementations
- Provide expert insight into regulatory frameworks and cybersecurity standards to maintain organizational compliance
- Analyze security issues, offering strategic recommendations to resolve potential vulnerabilities
- Stay updated on emerging cybersecurity threats and risk management practices to maintain a robust security posture
Requirements:
- A Bachelors degree in a relevant field such as Information Security, Risk Management, or Computer Science. Professional certifications (e.g., CISSP, CISM, CRISC) are strongly preferred
- At least 5 to 7 years of experience in security and risk management, ideally within large-scale IT projects or system migrations
- Thorough understanding of security frameworks, risk management strategies, and regulatory compliance, especially within the financial services sector
- Demonstrated experience handling the security components of core banking systems or other large-scale technology implementations
- Strong analytical skills with a track record of identifying and resolving complex security issues
- Exceptional communication and interpersonal skills, enabling effective collaboration with technical teams and non-technical stakeholders alike
- Proven experience supporting large-scale IT projects, particularly in the financial sector
- Familiarity with global data protection laws and cybersecurity practices, such as GDPR and CCPA
- Knowledge of industry-specific risk management standards and security frameworks