Verified Job
IT / Software / Data Analyst
Data, AI and Emerging Technology Risk Principal Analyst
IT / Software / Data Analyst
#54259
Remote / WFH
Citizens Financial Group
Job Description
Team-Specific Requirements
Preferred Domain-Specific Technical Skills
Familiarity with cloud platforms such as AWS, Azure, or GCP
Experience with analytics platforms, storage solutions, data protection methodologies, data platforms, ETL, data transmission, data loss prevention, endpoint security practices, and cyber recovery practices, e.g. Tableau, Webfocus, APIs and Microservices based development, Talend, Informatica, Kafka, Spark, Autosys, Airflow, Java, Hadoop, Redshift, Starburst, Databricks, Tessell, MongoAtlas, Snowflake, OCI, AWS RDS, etc.)
Proficiency with data governance, security and other telemetry tools such as Collibra, Grafana, Datadog, Qualys, Wiz, CyberArk, or Splunk
Experience with continuous integration, continuous delivery, agile and devsecops pipelines, including data engineering sub-pipelines and related tools (e.g. Nexus, Jenkins, Harness, Fortify, EKS, Openshift, etc.)
Knowledge of AI/ML platform tools such as Bedrock, Sagemaker, H2O.ai, MLflow, etc.
Preferred Team-Specific Tools & Platforms
ServiceNow, Jira, Confluence, or other ITSM/collaboration platforms
GRC Archer, WDesk, or other risk and compliance platforms
Experience & Skills
Required:
7–10 years of progressive experience in IT risk management, information security, or internal audit, with demonstrated leadership in complex risk environments.
Deep expertise in control frameworks including CRI Profile, NIST 800-53, NIST CSF, COBIT, and/or ITIL, and the ability to apply them strategically.
Proven ability to lead risk assessments, control testing programs, and regulatory response activities independently.
Advanced proficiency with GRC platforms (e.g., Archer), security monitoring tools (e.g., Splunk, Qualys, Wiz), and data analysis tools (e.g., Tableau, Grafana, Excel).
Strong executive communication skills; ability to present risk findings persuasively to senior leaders and non-technical audiences.
Track record of influencing risk practices and driving meaningful improvements in control environments.
Ability to operate independently and manage complex, multi-stakeholder workstreams.
Preferred:
Experience in a regulated financial institution with familiarity with OCC, Federal Reserve, or FDIC supervisory expectations.
Background in cloud infrastructure risk, cyber resilience, or enterprise architecture risk.
Experience designing or significantly improving risk management programs or frameworks.
Education
Bachelor's degree in Information Technology, Cybersecurity, Business, or a related field required; Master's degree strongly preferred.
One or more of the following certifications are preferred:
CISA (Certified Information Systems Auditor)
CRISC (Certified in Risk and Information Systems Control)
CISM (Certified Information Security Manager)
CISSP (Certified Information Systems Security Professional)
PMI-RMP (Risk Management Professional)
AWS Solutions Architect or Microsoft Azure Administrator
Hours & Work Schedule
Hours per Week: Monday-Friday
Work Schedule: 40
Hybrid: 4 days per week onsite, 1 day remote
Some job boards have started using jobseeker-reported data to estimate salary ranges for roles. If you apply and qualify for this role, a recruiter will discuss accurate pay guidance.
Preferred Domain-Specific Technical Skills
Familiarity with cloud platforms such as AWS, Azure, or GCP
Experience with analytics platforms, storage solutions, data protection methodologies, data platforms, ETL, data transmission, data loss prevention, endpoint security practices, and cyber recovery practices, e.g. Tableau, Webfocus, APIs and Microservices based development, Talend, Informatica, Kafka, Spark, Autosys, Airflow, Java, Hadoop, Redshift, Starburst, Databricks, Tessell, MongoAtlas, Snowflake, OCI, AWS RDS, etc.)
Proficiency with data governance, security and other telemetry tools such as Collibra, Grafana, Datadog, Qualys, Wiz, CyberArk, or Splunk
Experience with continuous integration, continuous delivery, agile and devsecops pipelines, including data engineering sub-pipelines and related tools (e.g. Nexus, Jenkins, Harness, Fortify, EKS, Openshift, etc.)
Knowledge of AI/ML platform tools such as Bedrock, Sagemaker, H2O.ai, MLflow, etc.
Preferred Team-Specific Tools & Platforms
ServiceNow, Jira, Confluence, or other ITSM/collaboration platforms
GRC Archer, WDesk, or other risk and compliance platforms
Experience & Skills
Required:
7–10 years of progressive experience in IT risk management, information security, or internal audit, with demonstrated leadership in complex risk environments.
Deep expertise in control frameworks including CRI Profile, NIST 800-53, NIST CSF, COBIT, and/or ITIL, and the ability to apply them strategically.
Proven ability to lead risk assessments, control testing programs, and regulatory response activities independently.
Advanced proficiency with GRC platforms (e.g., Archer), security monitoring tools (e.g., Splunk, Qualys, Wiz), and data analysis tools (e.g., Tableau, Grafana, Excel).
Strong executive communication skills; ability to present risk findings persuasively to senior leaders and non-technical audiences.
Track record of influencing risk practices and driving meaningful improvements in control environments.
Ability to operate independently and manage complex, multi-stakeholder workstreams.
Preferred:
Experience in a regulated financial institution with familiarity with OCC, Federal Reserve, or FDIC supervisory expectations.
Background in cloud infrastructure risk, cyber resilience, or enterprise architecture risk.
Experience designing or significantly improving risk management programs or frameworks.
Education
Bachelor's degree in Information Technology, Cybersecurity, Business, or a related field required; Master's degree strongly preferred.
One or more of the following certifications are preferred:
CISA (Certified Information Systems Auditor)
CRISC (Certified in Risk and Information Systems Control)
CISM (Certified Information Security Manager)
CISSP (Certified Information Systems Security Professional)
PMI-RMP (Risk Management Professional)
AWS Solutions Architect or Microsoft Azure Administrator
Hours & Work Schedule
Hours per Week: Monday-Friday
Work Schedule: 40
Hybrid: 4 days per week onsite, 1 day remote
Some job boards have started using jobseeker-reported data to estimate salary ranges for roles. If you apply and qualify for this role, a recruiter will discuss accurate pay guidance.
