Risk Analyst II
Core
Review, interpret, and act on risk signals from automated risk assessment infrastructure to determine Cyber Tier assignments, regulatory classifications, and control recommendations.
Role type
Senior IC IT Risk Analyst (Risk Operations)
Builds
Risk determinations and control attestations for IT projects across 9 risk domains
Domain
Healthcare IT, Cybersecurity, Data Privacy (GDPR, EU AI Act, GxP)
Required skills
IT risk management, cybersecurity risk, IT audit, privacy compliance, NIST Cyber Risk Management Framework, NIST 800-53, GRC platforms (ServiceNow), regulatory interpretation (GDPR, CCPA, EU AI Act, GxP), stakeholder engagement, audit documentation
Preferred skills
AI/ML risk assessment, automated workflow environments, CISA, CRISC, CISSP, CISM
Technologies
ServiceNow GRC, automated risk assessment infrastructure
Responsibilities
Review and validate system-generated risk outputs; apply independent judgment to accept, challenge, or override risk determinations; handle exceptions for edge cases and novel technologies; engage project teams to resolve gaps; maintain auditor-ready records; support internal and external audit activities; identify patterns in override rates to improve framework quality
Seniority
Mid-Senior, hands-on IC