Senior IT Risk Analyst

Senior IT Risk Analyst (First Line of Defense)

Rockland Trust is seeking a Senior IT Risk Analyst to advance the Bank’s First Line of Defense IT Risk Management Program. 

This is a hybrid role, 3 days Mon-Wed in the Plymouth office then remaining days working remotely. 

This senior professional contributes to the identification, assessment, and mitigation of technology risks, providing informed recommendations to IT and business stakeholders.

The role emphasizes accountability for high-quality risk assessments, strong judgment in interpreting results, and proactive contributions to process improvement and risk awareness across the organization.

 

This role serves as a resource and mentor to less-experienced colleagues, supporting development and consistent execution of sound risk management practices.

The Senior IT Risk Analyst works closely with stakeholders across IT and business areas to ensure risks are adequately identified and managed, controls are designed and operating effectively, and necessary remediation activities are completed in a timely manner.

 

Key Responsibilities

IT Risk Assessment & Control Evaluation


* Lead comprehensive IT risk assessments across applications, infrastructure, and IT processes, including inherent and residual risk evaluations.


* Evaluate the design and operating effectiveness of controls, ensuring assessments are evidence-based and aligned with internal methodologies and regulatory requirements.


* Conduct detailed walkthroughs and interviews with IT and business stakeholders to validate processes and risks, identify control gaps, and obtain and evaluate appropriate documentation and evidence.


* Analyze risk and control data to identify trends, recurring issues, or systemic weaknesses to translate findings into actionable insights.


* Maintain sufficient documentation of assessments performed, tests conducted, and issues noted in the Bank’s systems of record, ensuring clarity, completeness, and alignment with Bank and regulatory methodology and requirements.

Risk Communication & Issue Resolution


* Communicate findings, risk implications, control gaps, or other such issues to stakeholders in a professional, credible, and constructive manner.


* Support, advise, and challenge remediation plans to ensure proposed actions effectively mitigate identified risks.


* Coordinate responses to audit, regulatory, or other internal inquiries, ensuring timely and accurate resolution of outstanding issues.


* Track and monitor remediation efforts and key milestones to facilitate risk closure, proactively identifying potential bottlenecks or emerging risks.

Program Support & Mentorship


* Provide guidance and informal coaching to junior team members, reviewing work products to ensure adherence to risk assessment standards and quality expectations.


* Contribute to continuous improvement initiatives for IT risk assessment methodologies, reporting practices,...