IT Risk Analyst

BO/IT Risk Analyst

Rockland Trust is a full-service commercial bank and financial services company committed to helping our neighbors reach their financial goals. Founded in 1907 and headquartered in Massachusetts, we proudly serve individuals, families, and businesses throughout New England with a strong emphasis on personal relationships, local decision-making, and community impact.

With a broad range of banking, wealth management, and investment solutions, Rockland Trust combines the resources of a growing financial institution with the personalized service of a community bank. Our long-standing philosophy—Where Each Relationship Matters®—guides how we work with our customers, colleagues, and communities every day.

At Rockland Trust, our employees are at the heart of our success. We foster a collaborative, inclusive, and values-driven culture that encourages professional growth, innovation, and work-life balance. We are deeply committed to community involvement, financial education, and creating a workplace where individuals can build meaningful, long-term careers.

We are currently seeking a BO/IT Risk Analyst to enhance our growing IT Risk Management team. As a member of the team, this position will provide practical and technical IT risk assessment expertise.

The IT Risk Analyst's primary responsibility will be to conduct various risk assessments, including control design assessments, and control operating effectiveness testing for core IT processes, and devices, among other things. The details of assessment and testing performed will be recorded in the Bank's systems of record, and results will be communicated to the appropriate stakeholders. The IT Risk Analyst will play a significant role in engaging various IT owners and contacts across business areas while assessing risk.

This role will require close collaboration with application and infrastructure teams to define and assess risks, document and evaluate control design, and test control operating effectiveness. Further, the IT Risk Analyst will participate in the design and evaluation of proposed remediation plans for noted issues to support compliance with prescribed requirements.

The IT Risk Analyst will be encouraged to identify opportunities to automate the risk assessment process across the Bank and implement other compliance automation tools. The IT Risk Analyst may work on other regulatory and process risk assessment programs as well. Assessment duties assigned to this role require continuous development of knowledge regarding specific requirements, risks, and controls across a range of technologies, applications, processes, and infrastructure.

Responsibilities:

• Assist with the development and enhancement of Bank-wide technology risk assessment programs, by way of understanding regulations, rules, and requirements to which the Bank is subject, assessing risk against those standards, assessing control design against specified risks, and executing control operating effectiveness testing to determine overall control effectiveness as it relates to specific risks
• Conduct application and device risk assessments to gather risk specific information about technology applications and across various infrastructure components (network, storage, voice, etc.) to allow for risk assessment, design assessment, and control operating effectiveness testing
• Conduct initial interviews/walkthroughs with key stakeholders to establish understanding of controls that exist within the application or process to ensure that relevant controls are accurately documented and inventoried
• Frequent close collaboration with a wide range of stakeholders, both IT and non-IT, to perform the IT Risk Analyst's duties, including walkthroughs, evidence gathering, and testing
• Partner with key stakeholders to identify and assess proposed plans to remediate identified issues and/or deficiencies and provide relevant input
• Participate in communications between IT/IS and the levying entity to serve as point of contact for issues handling (as agreed upon)
• In conjunction with the rest of the team, inform key stakeholders of assessment results based on the procedures performed, and the…