Senior Operational Risk Analyst

Key responsibilities: Build and run GRC risk reporting, including risk intake, scoring, treatment tracking, and centralizing risk data into actionable dashboards Produce monthly risk reports for security leadership with executive-ready commentary focused on business impact Manage the third-party risk program, including vendor tiering, security assessments, and remediation tracking

Required qualifications: 5+ years of experience in operational risk, IT risk, or GRC within a regulated environment Proven experience in producing monthly risk reporting for risk committees and executives Experience in testing controls for effectiveness and conducting third-party risk assessments Familiarity with GRC tooling is preferred