[Remote] Senior Cyber Risk Analyst
Note: The job is a remote job and is open to candidates in USA. First Citizens Bank is looking for a Senior Cybersecurity Risk Analyst responsible for conducting comprehensive risk assessments for security exceptions. The role involves analyzing risk data points, assessing control effectiveness, and ensuring well-informed risk decisions are documented.
Responsibilities
• Risk Assessment of Security Exceptions: Conduct end-to-end risk assessments for exceptions to information security standards, including detailed analysis of key risk data points, threat scenarios, and compensating controls. Evaluate likelihood and impact factors using defined methodologies to determine inherent risk ratings. Document assessment results clearly and comprehensively, including rationale, evidence, and recommended risk treatments. Ensure consistency and repeatability in risk scoring across the security exceptions portfolio
• Control Effectiveness & Validation: Perform control effectiveness assessments on security controls leveraged within risk assessments. Review supporting documentation, evidence, and control designs to ensure applicability to standard exceptions
• Evidence Collection & Analytical Review: Gather and analyze technical and procedural evidence from system owners, SMEs, and business units. Review architecture diagrams, vulnerability reports, IAM configurations, network flows, and other technical artifacts to inform risk decisions. Maintain high-quality documentation that is audit-ready and aligned with regulatory expectations
• Stakeholder Engagement: Facilitate conversations with senior leaders, system owners, architects, SMEs, and risk teams to ensure clarity of risk posture and decision-making. Present complex cybersecurity concepts in a clear, concise manner appropriate for both technical and non-technical audiences. Provide subject matter expertise on security exceptions governance, risk methodology, and best practices
• Governance & Continuous Improvement: Contribute to the enhancement of risk assessment methodologies and operations. Support audit and regulatory inquiries by providing well-structured documentation and risk analysis rationale. Identify opportunities for process and control improvements across the cybersecurity risk and exceptions lifecycle
Skills
• 8+ years of experience in cybersecurity risk management, cybersecurity operations, governance, or related fields
• Strong understanding of cybersecurity domains including Threat and Vulnerability Management, Identity & Access Management, Network Security & Architecture, Endpoint Security, Data Protection, and Encryption
• Demonstrated experience performing complex risk assessments, control evaluations, and evidence-based risk analysis
• Ability to interpret security standards and applicable regulations and frameworks
• Proven ability to communicate and influence effectively at all organizational levels, including senior leadership
• Strong analytical, critical thinking, and problem-solving skills
• Exceptional written communication skills and attention to detail
• Bachelor's Degree and 4 years of experience in Risk management, or financial analysis, or statistical modeling OR High School Diploma or GED and 8 years of experience in Risk management, or financial analysis, or statistical modeling
• Professional certifications such as CISSP, CISM, CRISC, or equivalent
• Experience working with security exception processes, GRC tools, or enterprise risk frameworks
• Prior experience in financial services, heavily regulated industries, or environments with strong audit expectations
• Familiarity with CVSS scoring, threat modeling methodologies, and likelihood/impact modeling
Company Overview
• First Citizens Bank provides banking services, essential business and professional services, wealth management capabilities, and more. It was founded in 1898, and is headquartered in Raleigh, North Carolina, USA, with a workforce of 10001+ employees. Its website is http://www.firstcitizens.com.
Company H1B Sponsorship
• First Citizens Bank has a track record of offering H1B sponsorships, with 102 in 2025, 115 in 2024, 249 in 2023, 53 in 2022, 12 in 2021, 9 in 2020. Please note that this does not guarantee sponsorship for this specific role.
Apply tot his job
Apply To this Job