Technology Risk Analyst Associate-2

Position Title

Location

Job Summary

Job Responsibilities:

• →

  Assist in creating and maintaining governance documentation, including policies, standards, controls, procedures, and testing requirements for technology and security organization in line with NIST 800-53, Secure Controls Framework, and Industry Best Practices.

• →

  Work with technology team members and stakeholders to design, validate, track, and report risk mitigation.

• →

  Perform small to medium size risk assessments including mapping out threats and controls, identifying gaps, determining inherent and residual risk ratings in adherence with the enterprise Risk Governance Framework. Assist in creating a formal risk assessment report and present to stakeholders.

• →

  Assist stakeholders in the business lines and technology in understanding risk and control requirements to ensure that risk responsibilities are understood and followed throughout the enterprise.

• Performs special projects, and additional duties and responsibilities as required.

• Consistently adheres to regulatory and compliance policies and standards linked to the job as listed and complete required compliance training. Accountable to maintain compliance with applicable federal, state and local laws and regulations.

• Education level required: High School / High School Equivalency (GED, HiSET, TASC) / Foreign Equivalent.

• Minimum experience required: ​1+ Years​ in Technology Audit, Information Technology, or Information Security.

• Education level preferred: Undergraduate Degree (4 years or equivalent) Computer Science or Cyber Security preferred

• Security +, CISA, CRISC, CISSP or equivalent preferred

• Strong understanding of internal/external processes and deadlines

• Able to work independently to ensure stakeholders fulfill audit and/or risk commitments

• Knowledge of Technology organization business processes and systems

• Knowledge of banking business processes

• Knowledge of risk assessment and analysis techniques and industry risk models

• Strong knowledge of IT security disciplines such as authentication and authorization models, data protection methods, networking, firewall models, threat and vulnerability management processes

• Comfortable interfacing with other internal or external organizations regarding risk and compliance findings

• Prior experience working with cross functional, cross departmental projects and technologies

• Well-rounded understanding of technology, operations, and key business processes

• Demonstrates a strong ability to build and maintain effective relationships with stakeholders by communicating clearly, engaging in proactive collaboration, and leveraging cross functional insights. Aligns relationship building efforts with enterprise goals to accelerate performance and drive strategic results.

• Builds trusted client relationships, whether internal or external, by identifying needs and delivering tailored solutions to enhance the overall client experience.

• Fosters or supports a positive work culture and productive work environment, displaying importance of effective relationships with customers and stakeholders.

• Travel: Less than 10%

• Physical demands (ADA): ​No unusual physical exertion is involved.​

We are committed to providing clear and accurate compensation information in accordance with applicable laws. Actual starting base pay will be determined based on location, experience, and other non-discriminatory factors permitted by law. Total compensation may also include variable incentives, bonuses, commissions, or other awards as outlined in the offer of employment. Flagstar provides teammates access to a variety of benefits including medical, dental, vision, life, and disability insurance, as well as a comprehensive leave program. Please click the following link for detailed information: Benefits | Flagstar Bank

Pay Range