Analyst, Business & Tech Risk Integration
Listed on 2026-10-17
-
IT/Tech
IT Business Analyst, Cybersecurity, Information Security & Data Protection, IT Consultant
At T-Mobile, we invest in YOU! Our Total Rewards Package ensures that employees get the same big love we give our customers. All team members receive a competitive base salary and compensation package - this is Total Rewards. Employees enjoy multiple wealth-building opportunities through our annual stock grant, employee stock purchase plan, 401(k), and access to free, year-round money coaches. That’s how we’re UNSTOPPABLE for our employees!
Job Overview
This position is hybrid, working three days per week in the office. The office location can be either Overland Park, KS or Frisco, TX.
The Analyst, Business & Tech Risk Integration will support the evolution of T-Mobile's control and compliance landscape by embedding risk management into business processes and technical workflows. This role will collaborate across Technology, Compliance, Audit, and Business Operations to conduct risk assessments, design controls, and drive automation that enhances audit readiness and modernizes compliance practices.
This position plays a hands-on role in bridging legacy processes with tech-enabled solutions, contributing directly to T-Mobile's enterprise-wide controls transformation. It is ideal for a curious problem-solver who thrives at the intersection of business and technology and is eager to expand expertise in emerging areas such as AI governance, automation, and digital resiliency.
Job Responsibilities- Risk Identification & Assessment:
Conduct proactive risk assessments across business and IT initiatives, including cloud migrations, system implementation, automation rollouts, process transformation, and AI use cases.
Design and evaluate end-to-end business systems architecture and processes to identify and manage SOX, operational, and other compliance domain risks.
Assess and analyze current processes, controls, and systems to identify optimization opportunities and manage the implementation of corrective actions for compliance deficiencies.
Support the development of risk scenarios and impact/likelihood models to assess level of risk and anticipate potential control failures. - Control Integration & Transformation
Assist in modernizing the control environment by helping transition from manual controls to automated and embedded processes.
Design and build technology and business controls to mitigate risks leveraging GRC systems and standards such as NIST, COBIT and accounting/audit/SOX standards:
IT General Controls, (e.g. access management, change management, and computer operations)
Data integrity over data transfers, transformation, migration and reports
Agile system development lifecycle controls (SDLC)
Collaborate with IT, Compliance, and Business partners to ensure controls are scalable, efficient, and aligned to enterprise risk appetite.
Support implementation of continuous monitoring techniques using GRC platforms or data-driven reporting. - Project & Change Risk Advisory
Manage the end-to-end risk program for IT projects to identify risk and control requirements, and operationalize these changes, including training for control owners
Assess the impact of business and IT changes on the control environment, recommending practical mitigation steps.
Track and manage risk issues through remediation cycles. - Collaboration & Enablement
Act as a liaison between Technology, Compliance, Audit, and Business stakeholders to ensure risks and responsibilities are clearly communicated.
Translate technical risk concepts into business-relevant language to support informed decision-making.
Contribute to cross-functional workshops on AI, automation, and emerging technology risk awareness. - Monitoring & Reporting
Develop and maintain reporting and dashboards on key risk indicators, control health, and mitigation progress across…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).