The Senior IT Risk Analyst leads IT risk management efforts, ensuring IT risks are identified, assessed, and mitigated in line with organizational objectives and the company’s risk appetite. This role develops and maintains IT risk management frameworks, collaborates with operational teams to manage risks, and provides actionable insights for mitigation. The analyst also prepares reports for senior management, supports business continuity planning, and fosters a culture of risk awareness throughout the organization.

Key Responsibilities

• Review, update, and maintain the risk management program, policies, and procedures
• Develop and enhance IT risk management frameworks, methodologies, tools, and procedures
• Conduct regular IT risk assessments in collaboration with operational departments
• Evaluate and monitor IT-related risks to ensure they are within the organization’s risk appetite
• Recommend and oversee the implementation of effective risk mitigation strategies
• Perform additional tasks as assigned by the supervisor.

Required Skills

• Knowledge of IT risk management frameworks (e.g., NIST, ISO 27001).
• Ability to lead risk management initiatives and mentor junior staff.
• Experience with risk management tools or specific IT security technologies.
• Ability to analyze risk data and provide actionable insights.
• Strong written and verbal communication skills for reporting and presentations