risk management framework analyst

PROZ TECHNOLOGIES

<p><b>Job Title:</b> Techno-Functional Risk Systems Analyst<br/><b>Location:</b> Onsite</p><p><b>Job Description:</b><br/>We are seeking a highly skilled <b>Techno-Functional Risk Systems Analyst</b> to join our Risk Change Management team. The ideal candidate will support various risk management initiatives and play a key role in translating business requirements into effective system solutions across a global banking environment.</p><p><b>Key Responsibilities:</b></p><ul><li>Work closely with business stakeholders on risk system implementation and support</li><li>Gather and translate business requirements into functional and technical specifications</li><li>Support enterprise-wide risk functions including Portfolio Risk, ALM, Liquidity &amp; Funding Risk, Market Risk, and Governance</li><li>Assist in risk system architecture and integration planning</li><li>Participate in ALM and FTP framework validation and implementation</li><li>Monitor daily ALM operations and analyze data discrepancies between systems</li><li>Design and execute UAT test cases for key risk metrics</li><li>Recommend and implement best-practice solutions to enhance system performance</li></ul><p><b>Requirements:</b></p><ul><li>Minimum <b>5+ years of experience</b> in Risk Management systems within the banking sector</li><li>Strong expertise in risk modelling, risk systems, and data management</li><li>Hands-on experience with <b>PD, IFRS9, RAROC, VaR, Duration Gap Analysis, Earnings at Risk</b></li><li>Knowledge of <b>Basel regulations</b></li><li>Experience in designing and implementing risk management processes</li><li>Strong understanding of IT systems, applications, and financial products</li><li>Ability to manage multiple tasks/projects independently</li><li>Excellent communication and stakeholder management skills</li><li>Bachelor&rsquo;s degree (Risk/Finance certifications are a plus)</li></ul><p><b>Preferred Skills:</b></p><ul><li>Understanding of Project Management fundamentals</li><li>Strong analytical and problem-solving skills</li><li>Detail-oriented with the ability to work under pressure</li></ul><p><b>How to Apply: </b>Recruitment@proztec.com</p><p>We look forward to hearing from you!</p><p>Job Type: Permanent</p><p>Pay: QAR15,000.00 - QAR20,000.00 per month</p><p>Work Location: In person</p>

Techno-Functional Risk Systems Analyst

cFocus Software Incorporated

<div><h1 class="jobSectionHeader"><b>Vulnerability Analyst II &ndash; Job Description</b></h1><b>
Position Title: </b>Vulnerability Analyst II<br>
<b>Program: </b>SBA Enterprise Cybersecurity Services (ECS)<h2 class="jobSectionHeader"><b>
Position Summary</b></h2>
The Vulnerability Analyst II provides cybersecurity risk, vulnerability management, and compliance support services in alignment with the SBA Enterprise Cybersecurity Services (ECS) RFQ Task Area 3.5.2. The position supports the SBA Risk Management Framework (RMF), FISMA compliance initiatives, Information System Continuous Monitoring (ISCM), vulnerability management, controls assessment activities, audit support, and continuous monitoring operations across enterprise systems and cloud environments. The analyst performs vulnerability assessments, supports POA&amp;M development, validates security controls, coordinates remediation efforts, and assists Information System Security Officers (ISSOs) and system owners with maintaining compliant and secure systems.<h2 class="jobSectionHeader"><b>
Essential Duties and Responsibilities</b></h2><ul><li>
Perform enterprise vulnerability assessments and compliance scans using SBA-approved tools such as Tenable Security Center (SC), Nessus, and Microsoft TVM.</li><li>
Review identified vulnerabilities, assess impact and risk, and provide remediation recommendations for operating systems, applications, network devices, and cloud environments.</li><li>
Support continuous monitoring and Risk Management Framework (RMF) activities in accordance with NIST SP 800-37, NIST SP 800-53 Rev. 5, and NIST SP 800-53A.</li><li>
Assist with the creation, maintenance, and review of cybersecurity documentation including System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&amp;Ms), Configuration Management Plans (CMPs), and contingency documentation.</li><li>
Support control assessments and validation activities by documenting NIST 800-53A Determine If Statements (DISs) and mapping vulnerabilities to applicable controls.</li><li>
Conduct vulnerability scanning activities every 72 hours across workstations, servers, routers, switches, and cloud-based assets in accordance with SBA requirements.</li><li>
Monitor CISA Known Exploited Vulnerabilities (KEV) listings and Binding Operational Directives (BODs) to identify and report emerging risks.</li><li>
Track zero-day vulnerabilities, coordinate remediation activities, and provide ad hoc reporting to leadership and stakeholders.</li><li>
Generate weekly vulnerability reports, dashboards, and briefing materials for ISSOs, system owners, and management.</li><li>
Assist with audit preparation and support activities involving IG, GAO, internal auditors, and external assessors.</li><li>
Maintain scanning infrastructure including scanner deployment, configuration, plugin updates, scan repositories, and vulnerability management SOPs.</li><li>
Support FedRAMP Continuous Monitoring (CONMON) activities by reviewing vulnerability reports and assessing vendor remediation activities.</li><li>
Participate in change management, security operations meetings, and enterprise cybersecurity coordination activities.</li><li>
Ensure all deliverables are complete, accurate, aligned with agency templates, and delivered within required timeframes.</li></ul><h2 class="jobSectionHeader"><b>
Minimum Qualifications</b></h2><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, Information Assurance, or related discipline. Additional years of experience may substitute for degree requirements.</li><li>
3&ndash;6 years of experience supporting vulnerability management, cybersecurity compliance, RMF, or information assurance activities in a federal environment.</li><li>
Experience performing vulnerability assessments and remediation activities using Tenable SC/Nessus or equivalent tools.</li><li>
Knowledge of FISMA, NIST RMF, NIST SP 800-53 Rev. 5, NIST SP 800-53A, NIST SP 800-137, and related federal cybersecurity standards.</li><li>
Experience supporting POA&amp;M management, security assessments, continuous monitoring, and audit response activities.</li><li>
Working knowledge of Windows, Linux/Unix, network infrastructure, cloud platforms, and enterprise security technologies.</li><li>
Strong written and verbal communication skills with the ability to produce technical documentation and executive-level reports.</li><li>
Ability to analyze security findings, prioritize risks, and coordinate remediation with technical stakeholders.</li></ul><h2 class="jobSectionHeader"><b>
Preferred Certifications</b></h2><ul><li>
CompTIA Security+</li><li>
Certified Information Systems Security Professional (CISSP)</li><li>
Certified Ethical Hacker (CEH)</li><li>
GIAC Security Certifications (GSEC, GPEN, or similar)</li><li>
Tenable Certified Professional or equivalent vulnerability management certification</li></ul><p>
</p><p>Gupkg0JOaj</p></div>

SBA - Vulnerability Analyst II

DOHA BANK Q.P.S.C.

<p><b>Doha Bank Q.P.S.C</b> is one of the largest private commercial banks in Qatar. Established in 1979. Offers retail, corporate, international, treasury, and investment banking services</p><p>A <b>Credit Risk Analyst</b> at <b>Doha Bank</b> is responsible for assessing, monitoring, and managing credit risk exposure of corporate, retail, and institutional clients. The role ensures that all lending decisions are financially sound, compliant with Qatar Central Bank (QCB) regulations, and aligned with bank policies.</p><p><b>Key Responsibilities:</b></p><p>Credit Analysis</p><p>Loan &amp; Facility Evaluation</p><p>Risk Monitoring</p><p>Compliance &amp; Governance</p><p>Stakeholder Coordination</p><p>Senior Credit Risk Analyst (Additional Duties)</p><p>Mentor junior analysts</p><p>Participate in credit policy improvement and risk framework development</p><p>Support strategic decision-making in credit committees</p><p><b>Requirements:</b></p><p>Bachelor&rsquo;s degree in Finance, Accounting, Economics, or related field</p><p>CFA / FRM is a strong advantage</p><p>3&ndash;10+ years banking / credit risk experience (senior roles require more)</p><p>Strong financial analysis and Excel skills</p><p>Knowledge of Basel norms and banking regulations</p><p>Good communication and report writing skills</p><p>Job Type: Full-time</p><p>Pay: From QAR18,000.00 per month</p><p>Work Location: In person</p>

Credit Risk Analyst / Senior Credit Risk Analyst (Doha Bank Q.P.S.C)

Openkyber

<div><p>8 or more years of experience, relies on experience and judgment to plan and accomplish goals, independently performs a variety of complicated tasks, a wide degree of creativity and latitude is expected. Min 5 years of experience, served as a liaison between the Business community and Customer IT Teams (i.e., Architecture, Project Delivery, Application Sustain, etc.). Strong experience as a Data Analyst in analyzing raw data, and as a Business Analyst in requirements gathering, understanding technology, and any project management experience with PMP are a huge plus. Reviews, analyzes, and evaluates business systems and user needs. Formulates systems to parallel overall business strategies. Experienced with business process reengineering and identifying new applications of technology to business problems to make business more effective. Familiar with industry standard business process mapping, and reengineering. Prepares solution options, risk identification, and financial analyses such as cost/benefit, ROI, buy/build, etc. Writes detailed description of user needs, program functions, and steps required to develop or modify computer programs. Contractor will support the State Health Analytics Reporting Platform (SHARP) by working as a Business Analyst (BA) on a project which will expand the reporting and analytics available to users. In addition to BA and Quality Assurance (QA) tasks, this role will also be the Scrum Master for the project team, and will be responsible for status updates, project reporting, leading meetings with the program area and the vendor's sprint team. The BA will be the primary contact between the in-house development team, the vendor development team and the program area. Contractor will manage the schedule, budget and scope for this project.</p>
<b>CANDIDATE SKILLS AND QUALIFICATIONS:</b>
<ul><li>8Years-Required-Project Management</li>
<li>8 Years -Required-Managing enterprise scale data management projects.</li>
<li>8 Years -Required-Managing agile projects at state or federal government agencies or similar</li>
<li>8 Years -Required-Business Analysis</li>
<li>5 Years -Preferred-Knowledge and experience with common project management systems like Jira</li>
<li>5 Years -Preferred-Quality Assurance</li>
<li>5 Years -Preferred-Data Analysis</li>
<li>3 Years -Preferred-Experience with creating Texas Project Delivery Framework deliverables and managing projects using this framework strongly preferred.</li>
<li>1 Year-Preferred-Certified Scrum Master (CSM), PMI-Agile Certified Practitioner (PMI-ACP), or other Agile-related certifications</li>
</ul><p><b>For applications and inquiries, contact:</b> hirings@openkyber.com</p></div>

Cognos Financial Analytics Developer

Texas Farm Bureau - Insurance Agents

<p></p><div><div><div><div><div><div><div><div><div><div><div>Req #110</div></div></div><div><div><div><div>
7420 Fish Pond Rd, Waco, TX 76710, USA</div></div></div></div></div></div></div></div><div><div><div><div><p>
</p></div></div></div><div></div><div><div>
Job Description</div></div><div>
Posted Tuesday, April 14, 2026, 12:00 AM</div><div><div><div><div><p>
The Voice of Texas Agriculture.</p></div></div><div><div><p><b>
Company Name: Texas Farm Bureau Casualty Insurance Company | Department: Information Systems</b></p>
<p>
This position is responsible for overseeing and managing projects and enhancements through the respective life cycles to ensure business objectives are achieved by working with the team to establish and achieve goals, coordinate the activities of cross-functional teams, and communicate with executives regarding project progress, impediments, and priority.</p>
<p>
Additionally, this role will serve as a subject matter expert for other Information Systems (IS) project managers and provide critical input/guidance to ensure production timelines are met.</p><br>
<p></p>
<p><b>
MAJOR RESPONSIBILTIES AND AUTHORITY</b></p><br>
<p></p>
<p>
Operate at the advanced level or higher in the following areas:</p>
<p>
Manage enhancements and projects related to infrastructure upgrades, technical application development, new business functionality, and software defects.</p>
<p>
Manage production defects.
</p><p>Plan and manage projects efficiently and effectively.</p>
<p>
Address problems through risk and issue management.</p>
<p>
Work with teams to create mitigation solutions as needed.</p>
<p>
Communicate to management impact of risk and issues and present mitigation solutions.</p>
<p>
Effectively coach and assist other team members.</p>
<p>
Guide other teams and team members on assigned projects.</p>
<p>
Identify the need for and oversee the creation and implementation of contingency plans.</p>
<p>
Use the current project management systems to manage schedules, resources, budgets, risk, and changes.</p>
<p>
Manage project schedules and status updates in project meetings.</p>
<p>
Use the current work management system to open and maintain prioritized work.</p>
<p>
Follow project management methodologies as appropriate for project deliverables.</p>
<p>
Prepare charters with Business Analyst (BA), System Architect (SA), Quality Analyst (QA), and required business units to address business requests.</p>
<p>
Collaborate with Business Analyst (BA), System Architect (SA), Quality Analyst (QA), and IS Technical staff during enhancement and project cycles.
</p><p>Use the project management system to report metrics on assigned enhancements and projects.</p>
<p>
Acts as a single point of contact for assigned project and enhancement status and maintains communication with stakeholders.</p>
<p>
Facilitate project and value stream meetings.</p>
<p>
Utilize project management methodologies, and agile methodologies to complete, implement and maintain projects within budget and on time.</p>
<p>
Prepare and present project status updates and resource allocations to all levels of the company with minimal assistance.</p>
<p>
Develop and track the operating budget to accomplish the project objectives of the Company by utilizing internal resources as well as outsourced talent when appropriate.</p>
<p>
Provide necessary information and resources for the company Disaster Recovery Plan, Business Continuity Plan, Incident Response Plan and actively participate in periodic testing exercises.</p><br>
<p></p>
<p><b>
Departmental Responsibilities:</b></p><br>
<p></p>
<p>
Utilize ITIL framework for Change, Incident, and Problem Management for supporting the production environment.</p>
<p>
Complete all training and assignments in a timely and effective manner.</p>
<p>
Apply departmental standards and procedures to all assignments.</p>
<p>
Adhere to all defined processes and procedures.</p>
<p>
Effectively communicate with appropriate personnel.</p>
<p>
Manage multiple projects and requests simultaneously.</p>
<p>
Function effectively as a team member and mentor.</p>
<p>
Knowledge of the Microsoft Office Suite.</p>
<p>
Escalate problems to appropriate personnel, as needed.</p>
<p>
Comply with the Certified Fleet Operator requirements of the Company Driving and Safety Policy.</p>
<p>
Other duties as assigned.</p><br>
<p></p>
<p><b>
MINIMUM POSITION QUALIFICATIONS</b></p><br>
<p></p>
<p>
At least one of the following:</p>
<ul>
<li>Bachelor&rsquo;s degree from accredited college or university in a network, computer, or management related field and proven experience in an information technology-related field.</li>
<li>Associate degree from an accredited school in an information technology-related field and substantial experience in an information technology-related field.
</li></ul><p>Foundational resource management experience is required.</p>
<p>
Project Management Professional (PMP) certification is required.</p>
<p>
An Agile Certification such as Certified Scrum Master is preferred.</p>
<p>
ITIL Framework Certifications are preferred.</p>
<p>
SEI-CMMI Software Development Methodology Process experience a plus.</p>
<p>
Excellent problem-solving abilities.</p>
<p>
Ability and willingness to learn and extend skills.</p>
<p>
Excellent oral and written communication skills.</p>
<p>
Proven ability to effectively work multiple projects.</p>
<p>
Learn quickly when facing new problems, open to change, and analyze both successes and failures for clues towards improvement.</p>
<p>
Ability to plan, organize, and complete detailed work independently or in a team environment.</p>
<p>
Willing to travel as required.</p>
<p>
Valid Texas driver&rsquo;s license and driving record at the time of hire which would not place the employee on probation or disqualify the employee from Certified Fleet Operator status under the Company Driving and Safety Policy.</p><br>
<p></p>
<p><b>
PHYSICAL REQUIREMENTS</b></p><br>
<p></p>
<p>
Use of PC, telephone, copy machine, fax, and other office equipment over six (6) hours per day.</p>
<p>
Extended periods of sitting and concentration.</p>
<p>
Occasional bending, twisting, crouching, pulling, pushing, lifting, and moving items weighing up to 30 lbs.</p><br>
<p>
</p><p><b>WORKING CONDITIONS</b></p><br>
<p></p>
<p>
Occasional long, irregular hours.</p>
<p>
Occasional travel by auto or other public transportation.</p>
<p>
Work to be conducted in office environment owned or leased by company.</p></div></div><div><div><p><b>
Texas Farm Bureau is an Equal Opportunity Employer (M/F/D/V).</b></p></div></div></div></div></div></div></div></div></div><div></div>

IS Project Manager Senior

Rivian

<div><div>The Cybersecurity Analyst &ndash; Risk Management is a mid-career individual contributor supporting Rivian&rsquo;s cybersecurity risk management practice. This role involves day-to-day management of cybersecurity risks, monitoring key risk indicators (KRIs), and facilitating risk discussions with technology and business stakeholders.</div><div></div><div><br>
The analyst will leverage Rivian&rsquo;s risk platforms and AI-enabled tooling to improve efficiency, transparency, and defensibility of risk decisions. This role sits within Enterprise Cybersecurity on the Cybersecurity Risk Management team and partners closely with the Cyber Third-Party Risk Management (TPRM) lead, security engineering teams, and other functions.</div><br>
<ul><li>
Risk Register Ownership: Maintain and continuously improve the cybersecurity and crown-jewel risk registers, ensuring risks are clearly defined, scored, prioritized, and kept current.</li><li>
Track risk status from identification through treatment and closure, including documenting decisions, owners, due dates, dependencies, and evidence.</li><li>
Design, implement, and monitor KRIs and related metrics, such as control health, incident trends, and assessment throughput, to provide an objective view of risk posture.</li><li>
Meet regularly with risk owners and functional leaders to gather updates, validate assumptions, and align on risk treatment plans and progress.</li><li>
Evaluate how risks propagate across systems, suppliers, processes, and programs; surface second-order and cascading impacts in risk narratives and dashboards.</li><li>
Collaborate with the Cyber TPRM lead where responsibilities intersect, including supplier-driven risks, concentration risk, and systemic control gaps, to ensure consistent risk assessment and treatment.</li><li>
Help facilitate workshops and review sessions with business and technology leaders to clarify risk scenarios, tradeoffs, and treatment options.</li><li>
Use Rivian&rsquo;s risk platform and AI-enabled tools to improve efficiency, effectiveness, and expediency in risk logging, analysis, reporting, and communication.</li><li>
Maintain and evolve a Cybersecurity Risk Dashboard that provides an accurate, near real-time view of key risks, KRIs, and trends for leadership and governance forums.</li><li>
Apply NIST CSF and ISO 27001 concepts when assessing controls, documenting risks, and proposing treatments, helping ensure consistency with the ISMS and enterprise risk practices.</li><li>
Identify gaps and friction in current risk processes and propose practical improvements to increase clarity, adoption, and impact.</li></ul><div><b><br>
Minimum Qualifications</b></div><ul><li>
5+ years of combined experience in cybersecurity, technology risk, enterprise risk management, or related fields.</li><li>
At least 3 years with primary responsibility for leading or owning a risk management function, program, or risk domain within an organization.</li><li>
Hands-on experience maintaining and operating risk registers and risk management tooling, including GRC, IRM, or dedicated risk platforms.</li><li>
Working knowledge of the NIST Cybersecurity Framework (CSF) and exposure to frameworks such as ISO/IEC 27001, including risk assessment/treatment concepts and control alignment.</li><li>
Demonstrated ability to influence risk treatment decisions, not just document them, by framing options, tradeoffs, and business impact for stakeholders.</li><li>
Strong analytical and quantitative risk skills, including building KRIs, basic risk modeling, scenario comparison, and trend analysis.</li><li>
High comfort working with AI tools for analysis, synthesis, workflow automation, and responsible experimentation to improve risk processes.</li><li>
Excellent written and verbal communication skills with the ability to translate complex technical risks into concise, business-relevant narratives.</li><li>
Proven ability to work cross-functionally, build trust with stakeholders, and facilitate productive discussions in ambiguous situations.</li></ul><div><b>
Preferred Qualifications</b></div><ul><li>
Experience with modern GRC/IRM or dedicated risk platforms and building risk dashboards for security leadership.</li><li>
Professional certifications such as CRISC, PMI-RMP, CISM, or similar.</li><li>
Experience in fast-paced, high-growth environments such as technology, automotive, or manufacturing, where speed, agility, and rigor are required.</li></ul></div>

Staff Cybersecurity Analyst, Risk Management

AMERICAN SYSTEMS

<div>Overview:
<div>
AMERICAN SYSTEMS is an employee-owned federal government contractor supporting national priority programs through our strategic solutions in the areas of Information Technology, Test &amp; Evaluation, Program Mission Support, Engineering &amp; Analysis, and Training.</div>
Responsibilities:
<div>
Provide knowledge and experience with RDT&amp;E and Business IT systems and the phases of Certification and Accreditation (C&amp;A) process.
</div><div>Satisfies provisions of CNSS no. 4016 (Risk Analyst), Intermediate Level, but is not required to actually hold the certificate.
</div><div>Demonstrate in-depth knowledge of all C&amp;A subject areas with in-depth familiarity and understanding of Navy IT sites, systems and infrastructure; applies Navy C&amp;A guidance to Navy C&amp;A efforts.
</div><div>Work with Navy C&amp;A efforts as a Navy Validator.</div><div>
Develop and maintain System Security Plans (SSP), Contingency Plans, Privacy Impact Assessments, Certification Reports, Accreditation Reports, Plan of Action &amp; Milestones (POA&amp;M), and other C&amp;A documentation.
</div><div>Work closely with all levels of personnel involved in IT operations and technical aspects of systems.</div>
Qualifications:
<ul><li>Experience working within the Team SUB environment</li><li>
7 or more years of experience with RDT&amp;E and Business IT systems and the phases of Certification and Accreditation (C&amp;A) process. Required: Qualification as a Level III Navy Qualified Validator (NQV) as defined by DoD Instruction 8510.01 - Risk Management Framework (RMF) for DoD Information Technology (IT).</li><li>
Bachelor's level degree in Computer Science or in a technical or managerial related field.
</li><li>Active Secret level security clearance</li><li>
U.S. Citizenship Required for the purposes of obtaining/holding a U.S. security clearance</li></ul>
EEO Statement: EEO Race/Sex/Disability Status/Veteran Status</div>

Navy Qualified Validator III

Search 10000+ Risk management framework analyst jobs near you this May. New roles added regularly across leading industries. Apply today.