Senior Risk Analyst, Infrastructure & Operations

Job Description

A Fortune 500 client is looking for a Senior Risk Analyst to identify, assess, monitor, and report technology and operational risks across enterprise Infrastructure & Operations. This role partners with technical teams and leadership to evaluate risk exposure, assess controls, drive remediation, and improve the resilience and reliability of critical technology services.

The ideal candidate has strong experience in technology/infrastructure risk management and understands enterprise infrastructure environments. Cybersecurity, Business Continuity, and IT Disaster Recovery knowledge is beneficial but is not the primary focus.

Key Responsibilities Perform technology risk assessments across infrastructure, operations, services, processes, and controls. Identify and document inherent and residual risks, control gaps, and emerging technology risks. Evaluate risks related to cloud/on-prem infrastructure, networks, compute, storage, databases, technology lifecycle, capacity, change management, vulnerabilities, privileged access, backup/recovery, and third-party dependencies. Assess control design and effectiveness and provide constructive challenge to risk owners and technical teams. Develop remediation plans, monitor milestones, validate closure evidence, and escalate overdue or significant risks. Establish and monitor Key Risk Indicators (KRIs), risk thresholds, dashboards, heat maps, trends, and remediation metrics. Translate complex technical findings into clear business-risk language for technology leadership. Use ServiceNow IRM/GRC to manage risk workflows and treatments. Leverage ServiceNow CMDB/CSDM data to understand infrastructure, application, service, ownership, and dependency relationships. Partner with Infrastructure & Operations, Cybersecurity, Audit, Architecture, IT Asset Management, Incident Management, Change Control, Business Continuity, and Disaster Recovery teams.

Skills and Requirements

5+ years of experience in technology risk, IT risk, Infrastructure & Operations, cybersecurity, IT audit, or a related discipline. Hands-on experience performing technology risk assessments and evaluating control effectiveness. Strong understanding of enterprise infrastructure and operational environments. Knowledge of inherent/residual risk, remediation, risk acceptance, governance, and KRIs. Experience managing and tracking risk remediation through closure. Strong analytical, documentation, communication, and stakeholder-management skills. Ability to translate complex technical issues into clear business risks. CRISC certification and ITIL v4 certification required. Experience with ServiceNow IRM/GRC, CMDB/CSDM, ITSM, or SecOps. Knowledge of infrastructure lifecycle, asset management, cybersecurity, Business Continuity, Disaster Recovery, RTO/RPO, and operational resilience. Familiarity with NIST, COBIT, ISO 27001, and ITIL frameworks. Experience working within a large, complex enterprise technology environment. Certifications such as CISA, CGEIT, CISM, CISSP, ServiceNow GRC, Azure, AWS, or Google Cloud are a plus.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [email protected].