Senior Risk Analyst

Benefits

Parental leave

Not verified

Non-birth-parent leave

Not verified

Family-building benefits

• Fertility benefits: Not verified
• Adoption assistance: Not verified
• Surrogacy assistance: Not verified

Mental health support

Not verified

Relocation assistance

Not verified

Childcare support

Not verified

Learning budget

Not verified

Verification

Not verified checked Jun 7, 2026

Salary

Not verified

401(k) match

Reported from DOL Form 5500 industry filing (not employer-specific)

Was this benefit information wrong? Tell us.

Role

Role function

Security From the posting source checked Jun 20, 2026

Seniority

Senior From the posting source checked Jun 20, 2026

Schedule

Shift type

Not verified

Weekend work

Not verified

Company

Equity

Offered Verified - SEC 10-K source checked Jun 20, 2026

Application

Cover letter

Not verified

Assessment

Not verified

Deadline

Not stated

Where they hire

State eligibility is not yet verified.

About this role

Senior Risk Analyst Popular Center 011 | Posting Country Puerto Rico General Description The Senior Risk Analyst is responsible for executing and documenting design effectiveness (DE) and operating effectiveness (OE) testing of IT and Cybersecurity controls across applications, databases, infrastructure, and cloud services. The role safeguards the integrity, availability, and confidentiality of technology that supports financial reporting and critical operations, ensuring compliance with applicable banking regulations (e.g., SOX, NYDFS) and alignment to leading frameworks and standards (e.g., NIST, CRI, CCM, PCI DSS, FFIEC) as well as the institution's internal policies and standards. The Sr. Risk Analyst partners with firstline technology owners, internal/external auditors, cyber risk teams, and business stakeholders to drive effective control execution, timely remediation of issues, and clear, decision ready reporting. Essential Duties and Responsibilities • Lead control walkthroughs with system/process owners to confirm design, identify key attributes, and determine evidence requirements. • Obtain, evaluate, and securely retain evidence (configurations, logs, tickets, reports, approvals) sufficient to support conclusions. • Perform comprehensive testing and validation of core IT and Cybersecurity controls across key domains, including Identity & Access Management (provisioning, terminations, periodic access reviews, privileged access), Change Management (authorization, segregation of duties, migration controls), IT Operations (backups, batc

Read the full description at jobs.popular.com. FewerJobs shows a preview and links to the original posting.