Staff IT Analyst I – IT Governance, Risk and Controls

Western Alliance Bank

. Support identification, assessment, monitoring, and reporting of technology risks and internal controls as a first line of defense risk professional .

Posted 9/21/2026full-timeUnited StatesLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in IT Risk Management, Internal Controls, and Compliance, with a strong focus on risk assessment, control documentation, and adherence to industry standards. Proficient in facilitating discussions and coordinating with stakeholders to enhance risk visibility and improve control practices.

Highest-signal resume keywords

IT Risk ManagementInternal ControlsRisk and Control Self-AssessmentsCOBIT FrameworkNIST Standards

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk AssessmentControl DocumentationIssue ManagementRemediation TrackingControl TestingData AnalysisAudit Evidence PracticesCompliance PracticesTechnology AuditGovernance Frameworks

Soft Skills

Analytical SkillsCommunication SkillsOrganizational SkillsProblem-Solving SkillsCollaboration Skills

Industry Keywords

Information TechnologyCybersecurityFinancial ServicesBankingRegulated Industries

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Support identification, assessment, monitoring, and reporting of technology risks and internal controls as a first line of defense risk professional
Partner with IT, business stakeholders, control owners, risk owners, and second line of defense partners to maintain effective risk and control practices
Support risk assessments, control inventory documentation, issue and remediation tracking, audit and regulatory readiness, and execution of IT risk policies, standards, and procedures
Use a data-driven approach to strengthen risk visibility, improve control documentation, and support Risk and Control Self-Assessments
Track risk and control priorities, updates, action items, and remediation activities through completion
Collect, validate, analyze, and organize risk and control information from multiple sources
Execute assigned IT risk program activities and business unit risk deliverables within required timelines
Support management of risks and controls across applicable risk categories and monitor adherence to policies, procedures, standards, and program requirements
Facilitate discussions to confirm process understanding, review process maps, validate narratives, and document process-level risks, controls, dependencies, and key handoffs
Coordinate with second line of defense partners to clarify expectations, provide status updates, escalate concerns, and resolve open items
Document review results, observations, risk and control updates, process changes, stakeholder feedback, issue details, and recommended actions
Identify and recommend process improvements to strengthen control documentation, execution consistency, transparency, reporting quality, and alignment with IT risk program expectations

Requirements

What you’ll need

3+ years of related experience in IT risk management, IT governance, internal controls, compliance, technology audit, information security, or a similar field
Bachelor’s degree in information technology, Information Systems, Cybersecurity, Business, Risk Management, Accounting, Finance, or a related field; equivalent work experience may be considered
Working knowledge of technology risk, control, and governance frameworks such as COBIT, NIST, FFIEC, ISO 27001, CRI, ITIL, or similar industry standards
Experience with IT general controls, Risk and Control Self-Assessments, issue management, exception management, audit evidence practices, remediation tracking, and control testing or monitoring
Strong analytical skills with ability to manage multiple priorities, drive deliverables, meet deadlines, and follow through on open items
Basic to intermediate knowledge of applicable regulatory obligations, legal requirements, industry standards, and common compliance practices
Entry level to intermediate knowledge of financial services, banking, or other regulated industries is preferred
Entry level experience as an analyst in a specific IT domain, such as Data Analyst, Quality Assurance Analyst, Product Owner/Manager, Finance Analyst, or Business Systems Analyst
Intermediate speaking and writing communication skills
Occasional travel may be required

Benefits

Comp & perks

Competitive salaries
An ownership stake in the company
Medical and dental insurance
Time off
401k matching program
Tuition assistance program
Employee volunteer program
Wellness program
Opportunity to bolster business knowledge and gain hands-on experience to help grow your career