Technology Risk Management Analyst

Position Title

Technology Risk Management Analyst (

Location:

Hicksville, NY 11801)

As a key member of the second line of defense Technology, Cyber, Third Party Risk Management & Resilience Risk Management team, the Technology Risk Analyst will support the Technology Risk team to fulfill the Bank’s Second Line of Defense (“2

LoD”) mandate to identify, measure, monitor, and manage the Information Technology (“IT”) risk profile of the Bank, ensuring risk exposure remains within the Bank’s established risk appetite. The Technology Risk Analyst will also provide independent, effective, outcome‑based oversight and challenge for the risk domains within the First Line of Defense (“1

LoD”) IT Risk, IT Infrastructure and Architecture teams, Enterprise Technology Operations Services teams, IT business technology teams.

• Support the Bank’s Strategic IT Transformation initiatives through independent oversight, providing timely guidance related to proper risk response strategies to IT stakeholders.
• Assess risk trends and exposures against approved limits by leveraging analytical tools.
• Support the assessment and reporting of the IT risk profile based on quantitative and qualitative risk measures, including assessment of effectiveness of planned remediation/mitigation of excess risk exposure and compliance with regulatory requirements.
• Provide independent, proactive oversight and challenge of IT risk management at the Bank through execution of risk framework elements including RCSA, control assessment, issue management, incident reviews, targeted deep dives, and key risk indicators.
• Provide continuous feedback to the CTO, IT Risk, and other IT teams through effective review and challenge on risk identification, control mitigation, independent testing, root cause analysis, reporting and escalation.
• Perform special projects and additional duties as required.
• Consistently adhere to regulatory and compliance policies and standards linked to the job and complete required compliance training.
• Maintain compliance with applicable federal, state, and local laws and regulations.

• Education:
  
  Undergraduate Degree (4 years or equivalent) in Computer Science, Information Technology, Cybersecurity, or a related field.
• Experience:
  
  Minimum 4 years in an information technology, cybersecurity, risk, audit, and/or compliance role.
• Preferred: 2+ years of experience with AI Risk frameworks, oversight, or AI Assurance and Validation.
• Additional certifications or experience in information security, enterprise risk, or compliance preferred.
• At least 2 years in an IT and/or Cyber Risk function at a financial institution preferred.
• Working knowledge of Archer and/or similar GRC Risk Tool.
• Working knowledge of Microsoft Office tools, including Excel, Word, PowerPoint and Teams.

• Knowledge of IT and Cyber risk management concepts and applicable interagency regulatory guidance.
• Knowledge of AI Risk Frameworks.
• Knowledge of non‑financial risk frameworks.
• Strong analytical skills with the ability to interpret data, draw conclusions, and formulate recommendations.
• Strong verbal and written communication skills.
• Ability to provide outcome‑based risk oversight and challenge to first line risk management.
• Ability to utilize advanced Excel functionality, create engaging PowerPoint presentations, and work effectively in Word.
• Detail‑oriented with strong organizational skills, able to thrive in an agile environment with multiple competing priorities.
• Demonstrates a strong ability to build and maintain effective relationships with stakeholders by communicating clearly and collaborating proactively.
• Aligns relationship building with enterprise goals to accelerate performance and drive strategic results.
• Builds trusted client relationships and delivers tailored solutions to enhance the overall client experience.

No unusual physical exertion is involved.

Flagstar is an Equal Opportunity Employer.

$79,537.50 – $

• Medical, Dental, Vision, Life, and Disability insurance.
• Comprehensive leave program.