Technology Risk Analyst

Overview

The Technology Risk Analyst helps Digital & IT operate as a well-governed, resilient, risk-aware, and effective business function, with a primary focus on strengthening organizational resilience and managing technology risk. The role works across Digital & IT and the business to strengthen organizational resilience, manage technology risk, improve governance, and help leaders understand technology dependencies and their role in reducing risk.

The primary focus is Business Continuity and Disaster Recovery, technology risk management, governance, and business education. The role also supports broader Office of the CIO priorities, including data governance, compliance, financial management, contracts, performance reporting, and continuous improvement.

The ideal candidate is highly organized, analytical, comfortable working across technical and business teams, and able to turn complex risks and requirements into practical actions and measurable improvements.

Essential Job Functions

Technology Risk & Organizational Resilience

• Own the development, maintenance, testing, and continuous improvement of technology Business Continuity and Disaster Recovery plans.
• Partner with business and technology leaders to identify critical processes, technology dependencies, recovery requirements, and operational risks.
• Coordinate Business Impact Analyses, tabletop exercises, disaster recovery testing, and follow-up remediation.
• Maintain the technology risk register and coordinate risk identification, assessment, remediation, acceptance, and reporting.
• Identify critical technology, vendor, and process dependencies that could impact business operations.
• Help business leaders understand technology risks, preparedness expectations, and actions they can take to improve organizational resilience.

Governance, Policy & Compliance

• Develop, coordinate, and maintain Digital & IT policies, standards, procedures, and governance processes, including stakeholder review, approval, communication, implementation, and periodic review.
• Lead or support initiatives related to data classification, retention, handling, privacy, and other information-governance requirements.
• Support technology-related regulatory, legal, contractual, customer, and geographic compliance requirements.
• Coordinate technology risk exceptions and ensure accepted risks are appropriately documented, approved, reviewed, and tracked.
• Support audits, assessments, customer requirements, cyber insurance requests, and related documentation.

Cybersecurity Risk & Awareness

• Partner closely with the Cybersecurity Manager to support cybersecurity risk management and alignment with applicable frameworks and requirements.
• Help translate cybersecurity risks into clear business impacts and practical actions.
• Support cybersecurity awareness, employee education, phishing programs, and other activities designed to reduce human-related risk.
• Assist with cybersecurity risk assessments, customer security requirements, and remediation tracking.

IT Business Management

• Support monthly Digital & IT financial management, including budget tracking, forecast updates, actual-versus-plan analysis, vendor spend, and identification of significant variances.
• Maintain visibility to key technology contracts, renewals, obligations, and upcoming decisions.
• Support annual planning, investment prioritization, and development of business cases for technology initiatives.
• Help identify opportunities to optimize technology spending, licensing, vendors, and services.

Performance, Governance & Operating Rhythm

• Develop and maintain Digital & IT KPIs, KRIs, scorecards, dashboards, and management reporting.
• Support recurring Digital & IT operating reviews, governance meetings, and leadership discussions.
• Track significant risks, issues, actions, and commitments through completion and provide analysis to help leadership identify trends and improvement opportunities.

Continuous Improvement & Office of the CIO

• Lead or coordinate cross-functional initiatives related to risk, governance, resilience, compliance, and operational improvement.
• Identify and apply opportunities to use AI, automation, and digital tools to…