Technical Risk Analyst

Position Summary

We are seeking a Technical Risk Analyst to support IT security controls testing, risk assessments, and assurance activities across a complex technology environment. This role will focus on evaluating the effectiveness of Identity and Access Management (IAM) controls and other technology security controls while helping identify risks, document findings, and support remediation efforts.

The ideal candidate will have experience working with IT security controls, risk management practices, compliance frameworks, or audit activities and possess strong analytical and documentation skills.

• Support testing and assessment of IT security controls and risk management processes.
• Evaluate the effectiveness of IAM controls, including user provisioning, deprovisioning, access reviews, and privileged access management.
• Review control documentation and supporting evidence to identify potential gaps and risks.
• Assist in assessing the design and operating effectiveness of technology security controls.
• Document testing results, findings, and recommendations for stakeholders.
• Track remediation efforts and support follow-up validation activities.
• Partner with technology, cybersecurity, compliance, and risk teams to strengthen control effectiveness.
• Contribute to risk assessments, governance activities, and continuous improvement initiatives.

• 3-5+ years of experience in IT Risk, Technology Risk, Cybersecurity, IT Audit, Information Security, Compliance, IAM, or a related field.
• Understanding of IT security controls and risk management principles.
• Experience with Identity and Access Management (IAM) processes and controls.
• Strong analytical, organizational, and documentation skills.
• Experience reviewing documentation, evidence, and technical processes.
• Ability to communicate effectively with technical and non-technical stakeholders.

• Experience with IT controls testing, compliance assessments, or audit activities.
• Knowledge of frameworks such as NIST, COBIT, ISO 27001, SOX, or similar standards.
• Experience supporting highly regulated or security-focused environments.
• Security+, CISA, CRISC, CISSP, or related certifications are a plus.

• Detail-oriented professional with strong problem-solving skills.
• Ability to analyze information, identify risks, and document findings clearly.
• Interest in cybersecurity, risk management, governance, and controls.
• Collaborative team player who can work across multiple stakeholders and teams.