Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Technology Risk Analyst Lead role.
Rezi rewrites your resume against Flagstar Bank's job description. Free.
Tailor your resume to this Technology Risk Analyst Lead role.
Rezi rewrites your resume against Flagstar Bank's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Technology Risk Analyst Lead posting at Flagstar Bank — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Technology Risk Analyst Lead posting at Flagstar Bank — free, in seconds.
About the Role
The Technology Risk Analyst Lead is responsible for creating, maintaining, assessing, and reporting on information technology and information security threats, risks, and controls. This role identifies and documents potential gaps, tests control adherence, and recommends and validates risk mitigation strategies. The position also performs enterprise-wide cyber and technology risk assessments, generates formal reports, and communicates findings to senior leadership.
Responsibilities
- Govern and risk assess technology and security programs, including policies, standards, controls, procedures, and testing requirements, in line with NIST 800-53, NIST 800-37, Secure Controls Framework, and industry best practices.
- Design, validate, track, and report risk mitigation strategies aligned with the company's risk appetite, communicating results to stakeholders including executive leadership.
- Perform complex enterprise-wide risk assessments, including mapping threats and controls, identifying gaps, and determining inherent and residual risk ratings in adherence with the enterprise Risk Governance Framework.
- Create formal risk assessment reports and present them to executive leadership.
- Serve as a subject matter expert in the risk assessment framework.
- Assist business line and technology stakeholders in understanding risk and control requirements to ensure responsibilities are understood and followed across the enterprise.
- Assist junior associates with understanding complex technical concepts and best practices.
- Use independent judgment and discretion to make decisions.
- Analyze and resolve problems.
- Perform special projects and additional duties as required.
- Consistently adhere to regulatory and compliance policies and standards, and complete required compliance trainings.
- Maintain compliance with applicable federal, state, and local laws and regulations.
Requirements
- Undergraduate Degree (4 years or equivalent) in Computer Science or Cyber Security preferred.
- Minimum 6+ years in Technology Audit, Information Technology, or Information Security.
- 1+ years of leading, coaching, and mentoring other technology professionals.
- Security+, CISA, CRISC, CISSP, or equivalent certification is a plus.
- Strong understanding of internal/external processes and deadlines.
- Expertise in technology and security risk mitigation.
- Expertise in Risk Assessment and Control development.
- Experience designing risk and control programs aligned to FFIEC, NIST 800-53, NIST 800-37, and financial services regulatory requirements.
- Knowledge of Technology organization business processes and systems.
- Experience creating and maintaining threat and risk registers, and explaining residual risk to non-technical audiences.
- Expertise in creating and maintaining KPIs and KRIs.
- Prior experience implementing or overseeing cross-functional, enterprise-wide projects and technologies.
- Well-rounded understanding of technology, operations, and key business processes.
- Demonstrates a strong ability to build and maintain effective relationships with stakeholders by communicating clearly, engaging in proactive collaboration, and leveraging cross-functional insights.
- Aligns relationship-building efforts with enterprise goals to accelerate performance and drive strategic results.
- Builds trusted client relationships, whether internal or external, by identifying needs and delivering tailored solutions to enhance the overall client experience.
- Fosters or supports a positive work culture and productive work environment, displaying the importance of effective relationships with customers and stakeholders.
- No unusual physical exertion is involved.
Skills
- Technology Risk Analysis
- Information Security
- Risk Assessment
- Control Testing
- Risk Mitigation
- NIST 800-53
- NIST 800-37
- Secure Controls Framework
- FFIEC
- Cybersecurity
- Relationship Building
- Stakeholder Communication
- Threat and Risk Registers
- KPIs
- KRIs
Location
- Troy, MI
Work Type
- Onsite
- Full-time
Experience Level
- Lead
- 6+ Years
- 1+ Years Leadership
Education Level
- Undergraduate Degree
Salary/Compensations
- $90,597.00 - $150,440.00
Benefits
- Medical insurance
- Dental insurance
- Vision insurance
- Life insurance
- Disability insurance
- Comprehensive leave program
About the Company
- Flagstar is committed to providing clear and accurate compensation information in accordance with applicable laws.
- Total compensation may also include variable incentives, bonuses, commissions, or other awards as outlined in the offer of employment.
- Flagstar provides teammates access to a variety of benefits.
Equal Opportunity
- Flagstar is an Equal Opportunity Employer - Vets/Disabled