Staff IT Analyst II - IT Governance, Risk, and Controls

3 Locationslead

Other

0 views0 saves0 applied

Apply Now

Quick Summary

Key Responsibilities

The IT Staff Analyst II – IT Governance,

Technical Tools

Other

Staff IT Analyst II - IT Governance, Risk, and Controls

Block 23

Responsibilities

~3 min read

The IT Staff Analyst II – IT Governance, Risk & Controls is a Senior Analyst and serves as a first line of defense (1LOD) risk professional responsible for supporting and executing risk programs and business unit risk activities in alignment with the Company’s risk appetite and corporate strategy. This role acts as a key contributor and trusted partner to IT while engaging with second line of defense (2LOD) functions to support the management of IT risks and controls across applicable risk types. The Senior Analyst monitors the execution of policies, standards, procedures, regulatory expectations, and control framework requirements. This position is expected to provide analytical leadership, strengthen control inventory documentation and evidence practices, and support Risk and Control Self-Assessments. Additionally, the Staff IT Analyst II will identify, develop, monitor, and maintain KRIs, KPIs, and Operational Metrics for decision making and risk oversight.

→Partner with control owners, risk owners, first line stakeholders, second line stakeholders, and other partners to track risk and control priorities and updates through completion.
→Support the timely preparation, execution, update, and refresh of risk and control information by collecting, validating, and organizing data from various sources.
→Execute assigned risk program and business unit risk activities with a sense of urgency, ensuring deliverables are completed accurately, effectively, and within required timelines.
→Engage with business units to support the management of risks and controls across applicable risk types, including monitoring adherence to risk policies, procedures, standards, and program requirements.
→Facilitate meetings with IT and other stakeholders to confirm process understanding, review process maps, validate narratives, and document process-level risk and control information.
→Collaborate with 2LOD partners by coordinating updates, clarifying expectations, escalating concerns, and supporting the timely resolution of open items.
→Assess the control environment for assigned processes to determine whether controls effectively mitigate identified risks or whether gaps, weaknesses, or remediation needs should be documented and escalated.
→Prepare clear documentation of review results, observations, risk and control updates, process changes, stakeholder feedback, and recommended actions for management review.
→Identify and recommend process improvements that strengthen risk and control documentation, execution consistency, transparency, reporting quality, and alignment with risk program expectations.
→Identify, develop, and monitor Key Risk Indicators (KRIs) to measure risk exposure and control effectiveness; analyze threshold breaches, track and report metrics and trends, and partner with stakeholders to identify, implement, and monitor corrective and remediation activities through timely resolution.
→Prepare and maintain risk reporting and dashboards for senior leadership, committees, and governance forums, providing insightful analysis of risk metrics, issues, KRIs, control effectiveness, and emerging trends to support informed decision-making and effective risk oversight.

5+ years of related experience in IT risk management, IT governance, internal controls, compliance, technology audit, or a similar field.
Bachelor’s degree in information technology, Information Systems, Cybersecurity, Business, Risk Management, Accounting, Finance, or a related field, or equivalent work experience.
Intermediate experience with IT general controls, risk and control self-assessments, issue management, exception management, control testing, audit evidence practices, and remediation tracking.
Working knowledge of common technology risk and control frameworks and guidance, such as COBIT, NIST, FFIEC, ISO 27001, CRI, or similar industry standards.
Strong organizational and analytical skills with the ability to manage multiple priorities, drive deliverables, meet deadlines, and follow through on open items.
Entry level to intermediate knowledge of general Financial Services or Banking is preferred.
Entry level to intermediate knowledge of applicable regulatory and legal compliance obligations, rules and regulations, industry standards and practices.
Intermediate to advanced in process and data analysis within a specific domain or functional area utilizing critical thinking skills.
Intermediate to advanced working in Microsoft Office & relevant Diagramming Software (e.g. Lucid, Visio, etc.), as well as technical aptitude & experience within a specific domain.
Intermediate speaking and writing communication skills.
Occasional travel required.

What We Offer

~1 min read

Western Alliance Bank, Member FDIC, is a wholly owned subsidiary of Western Alliance Bancorporation. Serving clients nationwide, Western Alliance Bank includes six legacy bank brands — Alliance Association Bank, Alliance Bank of Arizona, Bank of Nevada, Bridge Bank, First Independent Bank and Torrey Pines Bank — that remain part of the company’s heritage, as well as AmeriHome Mortgage, a Western Alliance Bank Company.

Western Alliance Bancorporation is committed to equal employment and will consider all qualified applicants without regard to race, sex, color, religion, age, nation origin, marital status, disability, protected veteran status, sexual orientation, gender identity or genetic information. Western Alliance Bancorporation is committed to working with and providing reasonable accommodations for individuals with disabilities. If you are an individual with a disability and require a reasonable accommodation to complete any part of the application process and/or need an alternative method of applying, please email HR@westernalliancebank.com or call 602-386-2488. When contacting us, please provide your contact information and state the nature of your accessibility issue. We will only respond to inquiries concerning requests that involve a reasonable accommodation in the application process.