Senior Risk Analyst, Infrastructure & Operations

Required Skills & Experience

5+ years of experience in technology risk, IT risk, Infrastructure & Operations, cybersecurity, IT audit, or a related discipline. Hands-on experience performing technology risk assessments and evaluating control effectiveness. Strong understanding of enterprise infrastructure and operational environments. Knowledge of inherent/residual risk, remediation, risk acceptance, governance, and KRIs. Experience managing and tracking risk remediation through closure. Strong analytical, documentation, communication, and stakeholder-management skills. Ability to translate complex technical issues into clear business risks. CRISC certification and ITIL v4 certification required.

Nice to Have Skills & Experience

Experience with ServiceNow IRM/GRC, CMDB/CSDM, ITSM, or SecOps. Knowledge of infrastructure lifecycle, asset management, cybersecurity, Business Continuity, Disaster Recovery, RTO/RPO, and operational resilience. Familiarity with NIST, COBIT, ISO 27001, and ITIL frameworks. Experience working within a large, complex enterprise technology environment. Certifications such as CISA, CGEIT, CISM, CISSP, ServiceNow GRC, Azure, AWS, or Google Cloud are a plus.

Job Description

A Fortune 500 client is looking for a Senior Risk Analyst to identify, assess, monitor, and report technology and operational risks across enterprise Infrastructure & Operations. This role partners with technical teams and leadership to evaluate risk exposure, assess controls, drive remediation, and improve the resilience and reliability of critical technology services.

The ideal candidate has strong experience in technology/infrastructure risk management and understands enterprise infrastructure environments. Cybersecurity, Business Continuity, and IT Disaster Recovery knowledge is beneficial but is not the primary focus.

Key Responsibilities

Perform technology risk assessments across infrastructure, operations, services, processes, and controls. Identify and document inherent and residual risks, control gaps, and emerging technology risks. Evaluate risks related to cloud/on-prem infrastructure, networks, compute, storage, databases, technology lifecycle, capacity, change management, vulnerabilities, privileged access, backup/recovery, and third-party dependencies. Assess control design and effectiveness and provide constructive challenge to risk owners and technical teams. Develop remediation plans, monitor milestones, validate closure evidence, and escalate overdue or significant risks. Establish and monitor Key Risk Indicators (KRIs), risk thresholds, dashboards, heat maps, trends, and remediation metrics. Translate complex technical findings into clear business-risk language for technology leadership. Use ServiceNow IRM/GRC to manage risk workflows and treatments. Leverage ServiceNow CMDB/CSDM data to understand infrastructure, application, service, ownership, and dependency relationships. Partner with Infrastructure & Operations, Cybersecurity, Audit, Architecture, IT Asset Management, Incident Management, Change Control, Business Continuity, and Disaster Recovery teams.