Senior Business Analyst - Technology Risk Management

Industry: Financial Services / Banking

Department: Global Risk & Compliance – Office of the Chief Information Security Officer (OCISO)

Reports To: Risk Reporting Senior Manager

Location: Anywhere in the USA

Work Arrangement: Remote

Experience: 10+ years

The Senior Business Analyst will support the Enterprise Protect Reporting Factory (EPRF) in delivering accurate, high-quality technology and cybersecurity risk metrics, dashboards, and analytics for executive leadership.

The role combines Business Analysis, Technology Risk Management, Business Intelligence, Data Analytics, and Executive Reporting. The candidate will collaborate with business stakeholders, subject matter experts, and technical teams to translate reporting requirements into actionable insights, ensure data integrity, and continuously improve enterprise risk reporting.

• Technology & Cyber Risk Reporting: Provide leadership, technical direction, and planning support for technology and cybersecurity risk reporting. Define, design, and enhance risk metrics, Key Risk Indicators (KRIs), dashboards, and executive reports.
• Business Analysis & Stakeholder Management: Collaborate with executives, business leaders, SMEs, and data providers to gather requirements, translate them into functional specifications for Business Intelligence teams, and lead reporting enhancement workshops.
• Data Analytics & Quality Assurance: Validate the accuracy, completeness, and integrity of reporting data and metrics. Maintain in-depth knowledge of data sources and apply Business Intelligence, SQL, and reporting expertise to deliver reliable, actionable insights.
• Process Improvement & Change Management: Own and drive improvements to EPRF reporting processes, metrics, and capabilities. Support KRI design, change awareness activities, documentation, and adoption of enhanced reporting practices.
• Executive Communication & Project Delivery: Prepare and deliver management presentations, communicate complex risk information clearly, and coordinate multiple reporting initiatives and deliverables across large, cross-functional teams with limited supervision.

• Education & Experience: Bachelor's degree and 10+ years of experience in Business Analysis, Technology Risk Management, Data Analytics, Metrics, or Financial Services, including 7+ years working with database technologies and technology/cybersecurity risk reporting in large organizations.
• Technology & Cybersecurity Knowledge: Working knowledge of one or more of the following domains: Vulnerability Management, Data Security, Application Security, Cloud Security, Identity and Access Management (IAM), Asset Currency (End-of-Life/End-of-Support), Cyber Threat Management, or Technology Controls and Security Risk Management.
• Technical & Analytical Skills: Strong Business Intelligence, SQL, database, analytics, and reporting capabilities; proficiency with Microsoft Office and reporting tools; experience with data validation, KRI design, risk metrics, and executive dashboards.
• Business Analysis & Communication: Strong requirements gathering, analytical problem-solving, workshop facilitation, stakeholder engagement, written/verbal communication, and executive presentation skills.
• Project Management & Collaboration: Ability to independently prioritize and manage multiple initiatives, meet deadlines, and contribute to complex enterprise projects within large, high-transaction, cross-functional, and matrixed organizations.
• Preferred Experience: Financial services or banking industry experience, particularly involving technology controls, cybersecurity risk management, and enterprise risk reporting.

Technology Risk Management | Cybersecurity Controls | Business Analysis | KRIs & Risk Metrics | SQL & Business Intelligence | Data Quality | Executive Reporting | Process Improvement