Senior Risk Analyst
Core
Senior analytical authority for complex, high-tier IT risk cases including Cyber Risk, AI risk, and cross-jurisdictional privacy complexity, providing advisory support to IT leadership and business stakeholders.
Role type
Senior IC IT Risk Analyst (Cybersecurity & Privacy)
Builds
Integrated risk framework (Scope Screening → Regulatory Classification → Risk-Tiered Controls) and audit-ready documentation for high-profile programs.
Domain
Healthcare / IT Risk Management & Cybersecurity
Required skills
IT risk management, cybersecurity risk, IT audit, privacy compliance, NIST Cyber Risk Management Framework, NIST 800-53 controls, GRC platforms (ServiceNow), executive communication, AI/ML risk governance
Preferred skills
Risk judgment, advisory mindset, automation interpretation, strategic thinking, cross-functional influence
Technologies
ServiceNow GRC, NIST frameworks, GDPR, EU AI Act, GxP, CCPA, NIST
Responsibilities
Serve as senior analytical authority for complex risk cases; Provide risk advisory support to IT leadership and stakeholders; Own integrity of risk determination records for sensitive programs; Monitor patterns across risk assessments to identify framework gaps; Lead engagement with senior project sponsors and cross-functional teams; Ensure audit-ready documentation standards; Provide mentorship to junior analysts.
Seniority
Senior, hands-on IC