446 matching jobs for “Analyst - Business Risk Controls Management”

How results work

Exact titles rank first, then title variations and keywords in descriptions. These labels aren't qualification scores. Without keywords, recently added jobs appear first.

TIAA

Analyst - Business Risk Controls Management

Pune, India 2 postings

Hybrid

and Duties Perform application risk assessments using defined frameworks. Validate security controls across various application control …

Added Oct 27, 2026

Save job

Centene

Enterprise Risk Management Analyst

Remote-MO

Full time
Regular

Pay posted by employer$70,100–$126,200 per year

Position Purpose: The Enterprise Risk Management (ERM) team is responsible for all aspects of ERM and corporate sustainability/ Environmental, …

Added Oct 27, 2026

Save job

Cardinal Health

Sr. Analyst, Global Risk Management

OH-Ohio-Work from Home

Pay posted by employer$68,500–$88,020

This role is as a member of the Risk Management team reporting to Manager, Global Risk Management to support various department goals and …

Added Oct 27, 2026

Save job

Bank of America

Market Risk - Stress Testing Business Analyst

Charlotte, North Carolina, United States +1 location

Pay posted by employer$110,200–$183,400

… benefits. We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life …

Added Oct 27, 2026

Save job

Bristol-Myers Squibb

Senior Risk Analyst

Hyderabad - TS - IN

Full time
Regular

Senior Risk Judgment & Advisory Serve as the senior analytical authority for complex, high-tier risk cases — including …

Added Oct 15, 2026

Save job

Bank of America

Risk Process Analyst

Charlotte, North Carolina, United States +7 locations

Pay posted by employer$65,000–$85,000

… flexible benefits. We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life …

Added Oct 30, 2026

Save job

Northern Trust

Business Analyst, IAM Strategy & Product Management

Chicago, Illinois, United States +1 location

Full time
Regular

Pay posted by employer$88,900–$151,100 USD

The Business Analyst, Identity & Access Management (IAM) Strategy & Product Management, plays a key role in bridging …

Added Oct 16, 2026

Save job

Johnson & Johnson

Sr Business Analyst, Digital Product Management

Bengaluru, India

Role Summary The Sr. Business Analyst, Digital Product Management translates business needs into clear, actionable requirements that …

Added Oct 18, 2026

Save job

Chevron

Platform SOX Risk Analyst

Bengaluru, India

partners with platform leaders, control owners, control performers, Internal Controls, Finance, audit teams, and cybersecurity stakeholders to evaluate control design and operating …

Added Oct 30, 2026

Save job

Tyson Foods

Senior Analyst Risk Finance

Corporate - Springdale, Arkansas

Full time

… Assist in analyzing loss trends and claim development to support reserve adequacy and renewal processes SOX Controls & Financial Compliance Prepare and execute monthly and quarterly Sarbanes-Oxley (SOX) financial controls …

Added Oct 27, 2026

Save job

Williams

Project Controls Analyst III/Sr

UT Salt Lake City - Office +2 locations

Full time
Regular

… understanding of project status through the life cycle Prepares and communicates project-related reports to business partners and leaders Supports the Project Change Request process and Project Risk Analysis, including …

Added Oct 28, 2026

Save job

Bank of America

Transaction Management Operations Analyst - Investment and Monetary Controls (Wealth Management Operations)

Pennington

Pay posted by employer$25.00–$36.92 per hour

Added Oct 27, 2026

Save job

Constellation Brands

Sr. Internal Controls & Compliance Analyst

Chicago, Illinois, United States +1 location

Full time
Regular

Pay posted by employer$82,400–$123,600

Position Summary The Process Sr. Analyst, Internal Controls supports the Logistics & Fulfillment Team by executing daily/weekly operational …

Added Oct 15, 2026

Save job

Carrier Global

Manager Cybersecurity & Digital Risk Management

Palm Beach Gardens, Florida, United States

Pay posted by employer$96,000–$192,000 per year

acts as the primary liaison between intelligence analysts, security operations, incident response, insider risk, exposure management, engineering teams, business stakeholders, executive leadership, and external …

Added Oct 27, 2026

Save job

State Street

Payments Risk & Resilience Lead Business Analyst - Assistant Vice President

Quincy, Massachusetts, United States

Full time

Pay posted by employer$90,000–$157,500

… the anomaly detection and traceability leads so that infrastructure resilience, transaction visibility, controls, testing and operational response are designed as one coherent capability. Why this role is important to …

Added Oct 27, 2026

Save job

State Street

Business Analyst – Account & Reference Data Management, Senior Associate

London, England

Full time

Alpha Data Services is seeking a highly motivated Business Analyst to support the growth and strategic evolution of the Account & Reference Data Management practice. …

Added Oct 27, 2026

Save job

Crown Holdings

Governance, Risk and Compliance Analyst

PA - Yardley

Full time
Regular

Global Information Security GRC Analyst – Third-Party Risk The Company: CROWN Cork & Seal USA, Inc., a wholly owned company of Crown Holdings, Inc. …

Added Oct 27, 2026

Save job

Lennar

Sr Business Analyst

Miami, FL (Job Posting Location)

on the Team Lead the analysis of complex security, risk, and compliance problems and opportunities across Lennar's Cybersecurity and Compliance programs, including …

Added Oct 27, 2026

Save job

Northern Trust

Analyst - Global Financial Controls (CCAR Testing)

Chicago, Illinois, United States

Full time
Regular

Pay posted by employer$60,700–$100,100 USD

About Northern Trust As a global leader in innovative wealth management, asset servicing, asset management and banking services, Northern Trust (Nasdaq: NTRS) is proud to guide …

Added Oct 16, 2026

Save job

Capital One Financial

Principal Analyst, SOX and Risk Advisory

McLean, Virginia, United States +1 location

include: Lead one or more lines of business through our robust approach to risk management including scoping, risk assessment, control design, testing, …

Added Oct 27, 2026

Save job

Bristol-Myers Squibb

Senior Risk Analyst

Hyderabad - TS - IN

Full time
Regular

View job

Save job

About this opportunity

Original employer description

At Bristol Myers Squibb, our employees often ask, “Who are you working for?”—a question that fuels collaboration, accountability, and urgency in our work. Our purpose-driven culture inspires us to discover, develop, and deliver innovative medicines to prevail over serious diseases. We offer uniquely interesting and meaningful work, opportunities for growth, and a supportive environment that values inclusion, wellbeing, flexibility, and comprehensive benefits. This is work that transforms the lives of patients, and the careers of those who do it.

Key Responsibilities

Senior Risk Judgment & Advisory

Serve as the senior analytical authority for complex, high-tier risk cases — including Cyber Risk, AI risk, cross-jurisdictional privacy complexity, and novel technology types not clearly addressed by existing framework
Provide risk advisory support to IT leadership, BISOs, Legal/Privacy, and business stakeholders — translating complex risk landscapes into clear, actionable guidance
Own the integrity of the risk determination record for high-profile or sensitive programs; provide independent review where risk signals are ambiguous or where determinations carry material business or regulatory consequence
Guide analysts on when to accept, challenge, escalate, or override risk outputs — serving as a calibration resource and quality anchor for the team

Framework Stewardship & Continuous Monitoring

Monitor patterns across risk assessments — override rates, exception volumes, flag frequencies — to identify systematic accuracy issues, framework gaps, or emerging risk themes
Support continuous monitoring initiatives and contribute to the evolution of BMS's integrated risk framework (Scope Screening → Regulatory Classification → Risk-Tiered Controls) as the operating model matures
Identify where the risk tiering model, control library, or assessment logic may need refinement; articulate improvement recommendations with supporting evidence to Risk Leads and leadership
Contribute to periodic reviews of auto-approved projects, leading structured assessments where findings may have broader programmatic implications

Stakeholder Leadership & Cross-Functional Engagement

Lead engagement with senior project sponsors, IT architects, Legal/Privacy SMEs, and Compliance teams on high-risk or high-complexity assessments
Represent the IT Risk function in cross-functional forums; provide subject matter expertise on regulatory risk implications (GDPR, EU AI Act, GxP, NIST frameworks)
Build and maintain strong partnerships across IT, Legal, Privacy, Cybersecurity, and Business functions; act as a trusted advisor rather than a compliance gatekeeper
Support escalation resolution between Risk Leads, BISOs, Privacy SMEs, and project teams; facilitate closure on disputes involving risk determinations and framework interpretation

Operational Excellence & Governance

Ensure audit-ready documentation standards across the team; review and validate complex SNOW and GRC records for accuracy, completeness, and audit defensibility
Contribute to or lead training initiatives for analysts on evolving framework components, updated risk tiering logic, and operational workflow changes
Support governance reporting; prepare executive-quality risk summaries, trend analyses, and control attestation packages for senior leadership and compliance audiences
Provide UAT support for framework and tooling updates — including validating that risk outputs align with expected SME-level determinations

Mentorship & Team Development

Provide mentorship and guidance to junior analysts; support calibration, quality review, and professional development within the team
Model the expected analyst behavior in an automation-enabled environment: review-first, judgment-driven, override with rationale, and escalate with clarity

Qualifications & Experience

Required

5–10 years of progressive experience in IT risk management, cybersecurity risk, IT audit, privacy compliance, or a closely related field
Demonstrated track record of independent, senior-level risk judgment — including experience handling complex, ambiguous, or high-stakes risk determinations
Deep knowledge of NIST Cyber Risk Management Framework, NIST 800-53 controls library, and at least one major privacy regulatory framework (GDPR, EU AI Act, GxP, CCPA)
Experience working with GRC platforms at an advanced level (ServiceNow GRC or equivalent); ability to review, validate, and ensure quality of records produced by others
Strong executive communication skills; experience preparing and presenting risk findings to senior leadership or audit/compliance audiences
Experience with AI/ML, automation, or emerging technology risk programs — including digital transformation and data privacy risk governance

Desired Candidate Characteristics

Highly developed risk judgment — able to form defensible, well-reasoned positions on complex determinations and explain them clearly to any audience
Advisory mindset: seen as a trusted partner by stakeholders, not just a process owner
Comfortable with automation and system-generated risk signals as primary inputs — focused on interpreting and acting rather than manually gathering data
Strategic thinker with an eye on where the risk function is heading, not just where it is today
Strong influencer and collaborator; able to drive alignment across Legal, Privacy, IT, and Business without formal authority

Passion for healthcare and the belief that excellent risk management enables better science and better patient outcomes

We hire for skills and capabilities, not just credentials – if this role excites you, but doesn’t perfectly match your resume, we encourage you to apply anyway.

How We Work

Where you work matters – because collaboration, innovation and patient impact happen in many settings. Our roles are structured across four work models: site-essential, site-by-design, field-based and remote-by-design. The model assigned to this role is based on its core responsibilities. Learn more at https://careers.bms.com/ways-of-working.

Supporting People with Disabilities

BMS is dedicated to ensuring that people with disabilities can excel through a transparent recruitment process, reasonable workplace accommodations/adjustments and ongoing support in their roles. Applicants can request a reasonable workplace accommodation/adjustment prior to accepting a job offer. If you require reasonable accommodations/adjustments in completing this application, or in any part of the recruitment process, direct your inquiries to [email protected]. Visit careers.bms.com/eeo-accessibility to access our complete Equal Employment Opportunity statement.

Candidate Rights

BMS will consider qualified applicants with arrest and conviction records, pursuant to applicable laws in your area.

For roles based in Los Angeles County only: If you live in or expect to work from Los Angeles County if hired for this position, please visit this page for important additional information: https://careers.bms.com/california-residents/

Data Protection

We will never request payments, financial information, or social security numbers during our application or recruitment process. Learn more about protecting yourself at https://careers.bms.com/fraud-protection.

Any data processed in connection with role applications will be treated in accordance with applicable data privacy policies and regulations.

If this posting is missing required information required by local law or incorrect, contact BMS at [email protected] with the Job Title and Requisition number. Do not send application-related inquiries to this email. To check your application status, please login to your Candidate Home Account.

R1606940 : Senior Risk Analyst

Why this result? · Employer labels

Keywords also found in description

Business Insights and Technology
Full time
Permanent

Location reference: GeoNames (CC BY 4.0), normalized by Referizz.