Staff IT Analyst I - IT Governance, Risk and Controls.

Job Title: Staff IT Analyst I - IT Governance, Risk and Controls. Location: Block 23 What you'll do: The Staff IT Analyst - IT Governance, Risk & Controls serves as a first line of defense (1LOD) risk professional responsible for supporting the identification, assessment, monitoring, and reporting of technology risks and internal controls. This role helps protect the organization's digital assets by partnering with IT, business stakeholders, control owners, risk owners, and second line of defense (2LOD) partners to maintain effective risk and control practices. The Staff IT Analyst supports risk assessments, control inventory documentation, issue and remediation tracking, audit and regulatory readiness, and the execution of applicable IT risk policies, standards, and procedures. This position uses a data-driven approach to strengthen risk visibility, improve control documentation, and support Risk and Control Self-Assessments. - Partner with control owners, risk owners, IT stakeholders, business partners, and 2LOD teams to track risk and control priorities, updates, action items, and remediation activities through completion. - Support the preparation, execution, review, and refresh of risk and control information by collecting, validating, analyzing, and organizing data from multiple sources. - Execute assigned IT risk program activities and business unit risk deliverables accurately, effectively, and within required timelines. - Engage with business units and technology teams to support the management of risks and controls across applicable risk categories, including monitoring adherence to policies, procedures, standards, and program requirements. - Facilitate discussions with IT and business stakeholders to confirm process understanding, review process maps, validate narratives, and document process-level risks, controls, dependencies, and key handoffs. - Coordinate with 2LOD partners to clarify expectations, provide status updates, escalate concerns, and support the timely resolution of open items. - Document review results, observations, risk and control updates, process changes, stakeholder feedback, issue details, and recommended actions for management review. - Identify and recommend process improvements that strengthen control documentation, execution consistency, transparency, reporting quality, and alignment with IT risk program expectations. What you'll need: 3+ years of related experience in IT risk management, IT governance, internal controls, compliance, technology audit, information security, or a similar field. Bachelor's degree in information technology, Information Systems, Cybersecurity, Business, Risk Management, Accounting, Finance, or a related field; equivalent work experience may be considered. Working knowledge of common technology risk, control, and governance frameworks, such as COBIT, NIST, FFIEC, ISO 27001, CRI, ITIL, or similar industry standards. Experience with IT general controls, Risk and Control Self-Assessments, issue management, exception management, audit evidence practices, remediation tracking, and control testing or monitoring. Strong analytical skills with the ability to manage multiple priorities, drive deliverables, meet deadlines, and follow through on open items. Basic to intermediate knowledge of applicable regulatory obligations, legal requirements, industry standards, and common compliance practices. Entry level to intermediate knowledge of financial services, banking, or other regulated industries is preferred. Entry level experience in analysts of a specific IT domain (Data Analysts, Quality Assurance Analysts, Product Owners/Managers, Finance Analysts, or Business Systems Analysts). Intermediate speaking and writing communication skil