Information Risk Management Analyst III

The Information Risk Management Analyst III will play a critical role within the second line of defense by leveraging Generative AI (Gen AI) to optimize contract review processes and validate first-line defense activities in vendor risk assessments. This role ensures strong oversight and governance by challenging controls where gaps or deficiencies exist and confirming policy compliance across the Global Wealth and Asset Management (GWAM) segment.

The successful candidate will also support the Control Self-Assessment (CSA) process by validating business-critical operational evidence and contributing to ongoing control evaluations.

Key Responsibilities

• Execute and refine Gen AI prompt-based assessments of vendor contracts, aligning outputs with management evaluations.
• Review and validate controls, identifying gaps in first-line evidence and ensuring compliance with third-party risk policies.
• Verify the con...