Senior Business Analyst - Technology Risk Management

ISHMEE is seeking a Senior Business Analyst to support the Enterprise Protect Reporting Factory in delivering technology and cybersecurity risk metrics, dashboards, and analytics for executive leadership. The role translates stakeholder reporting requirements into actionable insights, validates data integrity, and improves enterprise risk reporting processes.

Responsibilities:

• Technology & Cyber Risk Reporting: Provide leadership, technical direction, and planning support for technology and cybersecurity risk reporting. Define, design, and enhance risk metrics, Key Risk Indicators (KRIs), dashboards, and executive reports
• Business Analysis & Stakeholder Management: Collaborate with executives, business leaders, SMEs, and data providers to gather requirements, translate them into functional specifications for Business Intelligence teams, and lead reporting enhancement workshops
• Data Analytics & Quality Assurance: Validate the accuracy, completeness, and integrity of reporting data and metrics. Maintain in-depth knowledge of data sources and apply Business Intelligence, SQL, and reporting expertise to deliver reliable, actionable insights
• Process Improvement & Change Management: Own and drive improvements to EPRF reporting processes, metrics, and capabilities. Support KRI design, change awareness activities, documentation, and adoption of enhanced reporting practices
• Executive Communication & Project Delivery: Prepare and deliver management presentations, communicate complex risk information clearly, and coordinate multiple reporting initiatives and deliverables across large, cross-functional teams with limited supervision

Requirements:

• Bachelor's degree and 10+ years of experience in Business Analysis, Technology Risk Management, Data Analytics, Metrics, or Financial Services, including 7+ years working with database technologies and technology/cybersecurity risk reporting in large organizations
• Working knowledge of one or more of the following domains: Vulnerability Management, Data Security, Application Security, Cloud Security, Identity and Access Management (IAM), Asset Currency (End-of-Life/End-of-Support), Cyber Threat Management, or Technology Controls and Security Risk Management
• Strong Business Intelligence, SQL, database, analytics, and reporting capabilities; proficiency with Microsoft Office and reporting tools; experience with data validation, KRI design, risk metrics, and executive dashboards
• Strong requirements gathering, analytical problem-solving, workshop facilitation, stakeholder engagement, written/verbal communication, and executive presentation skills
• Ability to independently prioritize and manage multiple initiatives, meet deadlines, and contribute to complex enterprise projects within large, high-transaction, cross-functional, and matrixed organizations
• Financial services or banking industry experience, particularly involving technology controls, cybersecurity risk management, and enterprise risk reporting