{"id":3149095,"url":"https://alion.io/job/popular-senior-risk-analyst","title":"Senior Risk Analyst","company":{"id":2750784,"name":"Popular","domain":"popular.com","url":"https://alion.io/company/popular-com","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Finance","role_family":"Finance","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Juan, Puerto Rico"],"countries":["PR"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":51000,"max_usd":115000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":7681},"experience_years_min":5,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Microsoft Excel","optional":false},{"name":"Microsoft Office","optional":true},{"name":"Outlook","optional":true}],"status":"live","first_seen_at":"2026-09-25T00:00:00Z","employer_posted_date":"2026-09-25","last_verified_at":"2026-10-30T01:07:51Z","board_verified":true,"closed_at":null,"days_open":35,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":35},"description":"General Description\nThe Senior Risk Analyst will play a key role in advancing the second-line IT and Cyber Risk Monitoring and Assurance Program. This position provides independent oversight and effective challenge across technology and cybersecurity risk domains, partnering with first line and control functions to strengthen risk governance, and supports senior management and committees through actionable risk insights, reporting, and regulatory readiness.\nEssential Duties and Responsibilities\nIT & Cyber Risk Framework & Governance:\nLead the ongoing enhancement and governance of the IT & Cyber Risk and Control Matrix, ensuring alignment with regulatory requirements and industry frameworks such as NIST, COBIT, FFIEC, CCM, PCI, and others. \nServe as a trusted second-line advisor to IT and Cybersecurity leadership to ensure risk management practices are implemented consistently across the organization. \nPrepare, generate, and provide materials (e.g., risk scorecards, dashboards, and metrics) required for various Risk Committees, Senior Management Team and Executives by the required due dates. \nIndependently monitor remediation commitments and provide credible challenge on timeliness, sustainability of remediation, and residual risk calculation and escalate concerns when risks remain outside of the organization’s risk appetite. \nRisk Oversight & Advisory:\nPerform second-line review and challenge of policies, standards, risk acceptances, risk escalations, and control implementations to ensure alignment with control expectations and the IT & Cyber Risk and Control Matrix. \nLead the execution of the IT and Cyber Risk and Control Self-Assessments (RCSAs), including scoping, control evaluation, issue identification, action-plan development, and residual risk assessments. \nTranslate control weaknesses into clear risk statements, validate root cause, and recommend solutions aligned with the organization’s risk appetite. \nSupport regulatory exams and audits by coordinating activities, reviewing evidence packages, ensuring consistent narratives, and tracking commitments and responses through closure. \nDevelop and deliver targeted training for business and technology stakeholders (e.g., RCSA processes, risk acceptance standards, key controls, evidence expectations, etc.). \nKey Risk Indicators (KRIs):\nDesign, enhance, and govern KRIs, including metric definitions, thresholds, data lineage, data quality controls, and exception handling. \nPerform trends analysis to identify potential issues and perform root cause analysis to provide recommendations to Management on how to better manage their IT & Cyber risk posture.\nEducation\nBachelor’s degree in Business Administration, Information Technology, Computer Engineering, Computer Science, Cybersecurity or related field.\nExperience\nAt least 5 years of working experience in IT controls testing, IT Risk, IT Audit and/or Cybersecurity positions; or in a consulting IT/Cyber role with a broad view of Information Technology or Information Security controls. \nDemonstrated experience applying IT and cybersecurity frameworks and regulatory expectations (e.g., NIST, COBIT, FFIEC, CRI, CCM, etc.) including Policy and Standards review and control design assessments. \nExperience with risk governance processes such as RCSAs, Issue Management, Risk Acceptances, and committee/board level reporting. \nIT or Cyber certifications preferred (e.g. CISA, CISM, CISSP, CGEIT, CRISC\nOther Qualification\nStrong analytical skills with ability to synthesize complex technical topics into clear risk narratives for executives. \nAdvanced Excel skills preferred; experience with reporting/dashboard tools is a plus.\nExcellent written and verbal communication in English and Spanish, including executive-level communication.\nStrong judgement, critical thinking, and ability to operate independently with minimal direction. \nExcellent organizational skills are required to establish priorities, multitask, work under pressure, and meet deadlines.\nExcellent interpersonal skills and teamwork.\nProficient in Microsoft Office: Word, Excel, PowerPoint, and Outlook\nImportant: The candidate must provide evidence of academic preparation or courses related to the job posting, if necessary.\nOur hybrid work model benefit applies to certain positions and is subject to changes based on the organizational needs.\nApplicants must be authorized to work for any employer in the United States. This position is not open to applicants who need visa sponsorship or transfer of visa sponsorship at this time.\nABOUT US\nPopular is Puerto Rico’s leading financial institution and have been evolving since it was founded over a century ago. From a small bank it has developed into a large corporation that offer a wide variety of services and financial solutions to our customers, with presence in the United States, the Caribbean and Latin America.\nAs employees, we are dedicated to making our customers dreams come true by offering financial solutions in each stage of their life. Our extensive trajectory demonstrates the resiliency and determination of our employees to innovate, reach for the right solutions and strongly support the communities we serve; therefore, we value their diverse skills, experiences and backgrounds.\nWe reaffirm our commitment to always offer essential financial services and solutions for our customers and communities, including during emergency situations and/or natural disasters. Popular’s employees are considered essential workers, whose role is critical in the continuity of these important services even under such circumstances. By applying to this position, you acknowledge that Popular may require your services during and immediately after any such events.\nIf you have a disability or need more information about requesting an accommodation, please contact us at . This email inbox is monitored for such types of requests only. All information you provide will be kept confidential and will be used only to the extent required to provide needed exemptions or reasonable accommodations. Any other correspondence will not receive a response.\nAre you ready for a rewarding career?\nPopular is an Equal Opportunity Employer, including Disability/Vets\nLearn more about us at www.popular.com and keep updated with our latest job postings at www.jobs.popular.com.\nConnect with us!\nLinkedIn | Facebook | Twitter | Instagram\nIf you are a California resident, please click here to learn more about your privacy rights.","description_format":"text","description_chars":6518,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"Spanish","level":"Upper-Intermediate (B2)","optional":false},{"language":"English","level":"Upper-Intermediate (B2)","optional":false}]},"benefits":["Hybrid work"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"Puerto Rico","iso":"PR","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial Services","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-23T11:33:19Z"}],"visa":[],"liveness":{"score":17,"band":"cold","label":"Long shot","p_open":1,"p_active":0.499,"p_room":0.35,"age_days":35,"expected_fill_days":8,"reasons":["conf:4","velocity","win:tail"],"computed_at":"2026-10-30T05:48:23Z"},"pay":null,"html_url":"https://alion.io/job/popular-senior-risk-analyst","json_url":"https://alion.io/job/popular-senior-risk-analyst.json","meta":{"generated_at":"2026-10-30T09:10:12Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13160,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2750784},"rest":"https://alion.io/mcp/rest/get_company?id=2750784"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpopular-senior-risk-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpopular-senior-risk-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpopular-senior-risk-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/popular-senior-risk-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpopular-senior-risk-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3149095}},{"tool":"search_jobs","arguments":{"company":"popular.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3149095},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}