Risk Remediation Analyst

Risk Remediation Delivery Senior Analyst

Position Summary

The Risk Remediation Delivery Senior Analyst supports Information Technology and Cyber Security organizations in audit, compliance, and risk remediation initiatives. Reporting to the Risk Remediation Delivery Senior Manager, this role partners closely with Technical Risk, IT, Cyber Security, and Internal Audit teams to drive remediation activities to successful completion within established timelines.

The ideal candidate is highly organized, analytical, and proactive, with experience managing remediation efforts in fast-paced and highly regulated environments.

Key Responsibilities

• Lead and coordinate risk remediation initiatives from identification through closure
• Partner with IT, Cyber Security, Risk, Internal Audit, and business stakeholders to evaluate findings and execute remediation plans
• Track remediation progress, milestones, dependencies, and deliverables to ensure timely resolution of risks
• Analyze audit and risk findings to support prioritization, resource planning, and execution strategies
• Facilitate cross-functional meetings, status updates, and stakeholder communications
• Develop and maintain remediation documentation, action plans, and supporting evidence
• Ensure remediation activities align with regulatory requirements, organizational policies, and industry frameworks
• Support audits, assessments, and regulatory reviews by providing remediation status and evidence
• Identify opportunities to improve remediation processes and overall risk management effectiveness
• Prepare executive-level reporting, presentations, and project updates
• Support additional governance, risk, and compliance initiatives as needed
  
  
  

Required Qualifications

• Bachelor’s degree in Risk Management, Business Administration, Information Security, or related field
• 3 years of experience in risk management, remediation, audit, compliance, or related areas
• Experience working within Information Technology and/or Cyber Security environments
• Strong analytical and problem-solving skills with the ability to assess complex risk issues and develop actionable solutions
• Proven ability to manage multiple projects and deliver results in fast-paced environments
• Excellent written and verbal communication skills, including executive-level reporting
• Strong collaboration and stakeholder management skills across cross-functional teams
• Familiarity with risk assessment tools, GRC platforms, and IT security concepts
• Understanding of regulatory frameworks and standards such as SOX, GDPR, FFIEC, ISO 27001, NIST CSF, and NIST RMF
• Self-motivated, detail-oriented, and adaptable to changing priorities
  
  
  

Preferred Qualifications

• Professional certifications such as CISSP, CISM, CISA, CRISC, CySA , or Security
• Experience with GRC platforms and Azure DevOps or similar Agile toolsets
• Experience utilizing AI tools such as Microsoft Copilot
• Technical writing experience and strong documentation skills
• Experience working in financial services, healthcare, or other highly regulated industries
• Knowledge of IT infrastructure, cloud technologies, cybersecurity, architecture, and application delivery
• Familiarity with control testing methodologies and remediation validation processes
  
  
  

Key Attributes

• Positive, solutions-oriented mindset with a strong sense of ownership
• Ability to build strong partnerships across technology, risk, and compliance organizations
• Strong attention to detail with a focus on execution and continuous improvement
• Proven track record of delivering successful project outcomes on time and within scope