Technology Risk Analyst Jobs
Technology Risk Analyst jobs are open across financial services, healthcare, fintech, and consulting, from entry-level to senior and principal, with specializations in IT risk, operational risk, and regulatory compliance. See the openings below and apply to the ones that match your experience.
Find Technology Risk Analyst JobsLooking for remote work? View remote technology risk analyst jobs →Overview
Showing 5 of 155+ Technology Risk Analyst jobs
About Us
Visa is a world leader in payments technology, facilitating transactions between consumers, merchants, financial institutions and government entities across more than 200 countries and territories, dedicated to uplifting everyone, everywhere by being the best way to pay and be paid.
At Visa, you'll have the opportunity to create impact at scale — tackling meaningful challenges, growing your skills and seeing your contributions impact lives around the world.
Join Visa and do work that matters – to you, to your community, and to the world. Progress starts with you.
Job Description
The Global Technology Risk team provides independent second-line oversight of technology availability, reliability, operational resilience, and recovery capabilities across Visa's critical services and infrastructure. The team partners closely with Engineering, Site Reliability Engineering (SRE), Architecture, Incident Management, Business Continuity, and Technology Risk stakeholders globally to assess and strengthen the resiliency of Visa's technology ecosystem.
This role combines deep technical expertise with technology risk management to evaluate whether critical systems are designed, operated, monitored, and recovered within established service objectives and risk tolerances. The successful candidate will be capable of translating complex technical risks into meaningful business impacts while providing independent challenge and oversight of engineering controls and resilience practices.
The ideal candidate possesses hands-on experience supporting large-scale distributed systems and production environments and can effectively assess technology risks using technical evidence and data-driven analysis.
Key Responsibilities
Availability & Reliability Risk Oversight
- Independently assess availability, reliability, and resilience risks across critical services, cloud platforms, infrastructure, applications, and third-party dependencies.
- Evaluate technology risks in relation to service criticality, customer impact, operational resilience requirements, and Visa's risk appetite.
- Provide effective challenge and oversight of engineering processes, reliability practices, and control effectiveness.
Risk Assessment & Control Assurance
- Develop and execute risk-based assurance reviews focused on availability, reliability, and operational resilience controls.
- Assess both design adequacy and operating effectiveness of technology controls using objective technical evidence.
- Define testing methodologies, sampling approaches, evidence requirements, and assessment criteria.
- Review system configurations, telemetry, deployment records, incident data, recovery testing results, and operational metrics to validate control performance.
- Use scripting, automation, and data analysis techniques to support repeatable testing and evidence-based conclusions.
- Document findings, assess residual risk, and validate remediation activities through closure.
Incident Learning & Recovery Assurance
- Review significant service disruptions, recurring incidents, near misses, and post-incident analyses.
- Evaluate the quality of root cause analysis, contributing factors, customer impact assessments, and corrective action plans.
- Assess disaster recovery, resilience testing, and recovery-exercise outcomes to ensure alignment with recovery objectives and resilience expectations.
Reliability Metrics & Risk Reporting
- Define, monitor, and report key risk indicators (KRIs) and reliability metrics related to service availability and operational resilience.
- Assess trends related to SLO attainment, outage frequency and duration, error-budget consumption, recovery performance, change failure rates, capacity utilization, and control deficiencies.
- Prepare executive-level reporting and risk insights for technology governance forums, senior leadership, and risk committees.
- Communicate business exposure, emerging risks, remediation progress, and reliability trends in a clear and concise manner.
AI-Enabled Risk Analysis & Assurance
- Leverage approved AI and automation capabilities to improve analysis of incident data, control evidence, technical documentation, and testing activities.
- Validate AI-generated outputs through independent review and source evidence verification.
- Ensure appropriate governance, traceability, data protection, and human accountability within AI-supported assurance processes.
Stakeholder Engagement
- Build effective partnerships across Engineering, SRE, Architecture, Cybersecurity, Business Continuity, and Technology Risk teams.
- Influence stakeholders to strengthen reliability, resilience, and control maturity across critical technology services.
- Provide subject matter expertise and independent challenge during risk reviews, resilience assessments, and remediation discussions.
Qualifications
Basic Qualifications
- 8 or more years of relevant work experience with a bachelor’s degree, OR 5 or more years of relevant work experience with an Advanced Degree (e.g., Master's, MBA, JD, MD), OR 2 or more years of work experience with a PhD, OR 11 or more years of relevant work experience.
- Hands-on experience in Software Engineering, Site Reliability Engineering (SRE), Production Engineering, Platform Engineering, Infrastructure Engineering, or a comparable role supporting business-critical systems.
- Strong understanding of distributed systems, networking, databases, cloud infrastructure, observability platforms, service dependencies, high availability architectures, fault tolerance, and disaster recovery.
- Experience conducting technology risk assessments and evaluating the effectiveness of technical controls.
- Demonstrated ability to perform control testing, evidence evaluation, issue documentation, and remediation validation.
- Proficiency with scripting or data analysis tools such as Python, SQL, or equivalent technologies.
- Ability to interpret operational telemetry, reliability metrics, and technical evidence to assess risks and control effectiveness.
- Practical understanding of AI-assisted analysis and automation techniques, including associated risks such as hallucinations, bias, and data leakage.
- Strong written, verbal, and executive-level communication skills.
Preferred Qualifications
- Experience supporting highly available, large-scale production environments and critical customer-facing services.
- Experience participating in incident response, post-incident reviews, reliability engineering initiatives, capacity planning, resilience testing, or disaster recovery exercises.
- Experience independently presenting risk assessments and evidence-based findings to senior engineering leaders, risk committees, auditors, or regulators.
- Working knowledge of industry frameworks such as NIST Cybersecurity Framework (CSF), NIST SP 800-53, ISO 27001, ISO 22301, COBIT, or related operational resilience standards.
- Experience applying risk and resilience frameworks to technical environments beyond compliance-based assessments.
- Experience in payments, financial services, fintech, or other highly regulated industries.
- Experience assessing cloud-native architectures and large-scale distributed technology platforms.
- Experience applying AI, automation, or analytics capabilities to technology risk management, engineering analysis, or control assurance activities.
- Experience working within a global matrixed organization.
Information for US Applicants
Work Hours
Varies upon the needs of the department.
Travel Requirements
This position requires travel 5-10% of the time.
Mental/Physical Requirements
This position will be performed in an office setting. The position will require the incumbent to sit and stand at a desk, communicate in person and by telephone, frequently operate standard office equipment, such as telephones and computers.
Visa is an EEO Employer
Qualified applicants will receive consideration for employment without regard to race, color religion, sex, national origin, sexual orientation, gender identity, disability or protect veteran status. Visa will also consider for employment qualified applicants with criminal histories in a manner consistent with the EEOC guidelines and applicable local law.About Us
Visa is a world leader in payments technology, facilitating transactions between consumers, merchants, financial institutions and government entities across more than 200 countries and territories, dedicated to uplifting everyone, everywhere by being the best way to pay and be paid.
At Visa, you'll have the opportunity to create impact at scale — tackling meaningful challenges, growing your skills and seeing your contributions impact lives around the world.
Join Visa and do work that matters – to you, to your community, and to the world. Progress starts with you.
Job Description
The Global Technology Risk team provides independent second-line oversight of technology availability, reliability, operational resilience, and recovery capabilities across Visa's critical services and infrastructure. The team partners closely with Engineering, Site Reliability Engineering (SRE), Architecture, Incident Management, Business Continuity, and Technology Risk stakeholders globally to assess and strengthen the resiliency of Visa's technology ecosystem.
This role combines deep technical expertise with technology risk management to evaluate whether critical systems are designed, operated, monitored, and recovered within established service objectives and risk tolerances. The successful candidate will be capable of translating complex technical risks into meaningful business impacts while providing independent challenge and oversight of engineering controls and resilience practices.
The ideal candidate possesses hands-on experience supporting large-scale distributed systems and production environments and can effectively assess technology risks using technical evidence and data-driven analysis.
Key Responsibilities
Availability & Reliability Risk Oversight
- Independently assess availability, reliability, and resilience risks across critical services, cloud platforms, infrastructure, applications, and third-party dependencies.
- Evaluate technology risks in relation to service criticality, customer impact, operational resilience requirements, and Visa's risk appetite.
- Provide effective challenge and oversight of engineering processes, reliability practices, and control effectiveness.
Risk Assessment & Control Assurance
- Develop and execute risk-based assurance reviews focused on availability, reliability, and operational resilience controls.
- Assess both design adequacy and operating effectiveness of technology controls using objective technical evidence.
- Define testing methodologies, sampling approaches, evidence requirements, and assessment criteria.
- Review system configurations, telemetry, deployment records, incident data, recovery testing results, and operational metrics to validate control performance.
- Use scripting, automation, and data analysis techniques to support repeatable testing and evidence-based conclusions.
- Document findings, assess residual risk, and validate remediation activities through closure.
Incident Learning & Recovery Assurance
- Review significant service disruptions, recurring incidents, near misses, and post-incident analyses.
- Evaluate the quality of root cause analysis, contributing factors, customer impact assessments, and corrective action plans.
- Assess disaster recovery, resilience testing, and recovery-exercise outcomes to ensure alignment with recovery objectives and resilience expectations.
Reliability Metrics & Risk Reporting
- Define, monitor, and report key risk indicators (KRIs) and reliability metrics related to service availability and operational resilience.
- Assess trends related to SLO attainment, outage frequency and duration, error-budget consumption, recovery performance, change failure rates, capacity utilization, and control deficiencies.
- Prepare executive-level reporting and risk insights for technology governance forums, senior leadership, and risk committees.
- Communicate business exposure, emerging risks, remediation progress, and reliability trends in a clear and concise manner.
AI-Enabled Risk Analysis & Assurance
- Leverage approved AI and automation capabilities to improve analysis of incident data, control evidence, technical documentation, and testing activities.
- Validate AI-generated outputs through independent review and source evidence verification.
- Ensure appropriate governance, traceability, data protection, and human accountability within AI-supported assurance processes.
Stakeholder Engagement
- Build effective partnerships across Engineering, SRE, Architecture, Cybersecurity, Business Continuity, and Technology Risk teams.
- Influence stakeholders to strengthen reliability, resilience, and control maturity across critical technology services.
- Provide subject matter expertise and independent challenge during risk reviews, resilience assessments, and remediation discussions.
Qualifications
Basic Qualifications
- 8 or more years of relevant work experience with a bachelor’s degree, OR 5 or more years of relevant work experience with an Advanced Degree (e.g., Master's, MBA, JD, MD), OR 2 or more years of work experience with a PhD, OR 11 or more years of relevant work experience.
- Hands-on experience in Software Engineering, Site Reliability Engineering (SRE), Production Engineering, Platform Engineering, Infrastructure Engineering, or a comparable role supporting business-critical systems.
- Strong understanding of distributed systems, networking, databases, cloud infrastructure, observability platforms, service dependencies, high availability architectures, fault tolerance, and disaster recovery.
- Experience conducting technology risk assessments and evaluating the effectiveness of technical controls.
- Demonstrated ability to perform control testing, evidence evaluation, issue documentation, and remediation validation.
- Proficiency with scripting or data analysis tools such as Python, SQL, or equivalent technologies.
- Ability to interpret operational telemetry, reliability metrics, and technical evidence to assess risks and control effectiveness.
- Practical understanding of AI-assisted analysis and automation techniques, including associated risks such as hallucinations, bias, and data leakage.
- Strong written, verbal, and executive-level communication skills.
Preferred Qualifications
- Experience supporting highly available, large-scale production environments and critical customer-facing services.
- Experience participating in incident response, post-incident reviews, reliability engineering initiatives, capacity planning, resilience testing, or disaster recovery exercises.
- Experience independently presenting risk assessments and evidence-based findings to senior engineering leaders, risk committees, auditors, or regulators.
- Working knowledge of industry frameworks such as NIST Cybersecurity Framework (CSF), NIST SP 800-53, ISO 27001, ISO 22301, COBIT, or related operational resilience standards.
- Experience applying risk and resilience frameworks to technical environments beyond compliance-based assessments.
- Experience in payments, financial services, fintech, or other highly regulated industries.
- Experience assessing cloud-native architectures and large-scale distributed technology platforms.
- Experience applying AI, automation, or analytics capabilities to technology risk management, engineering analysis, or control assurance activities.
- Experience working within a global matrixed organization.
Information for US Applicants
Work Hours
Varies upon the needs of the department.
Travel Requirements
This position requires travel 5-10% of the time.
Mental/Physical Requirements
This position will be performed in an office setting. The position will require the incumbent to sit and stand at a desk, communicate in person and by telephone, frequently operate standard office equipment, such as telephones and computers.
Visa is an EEO Employer
Qualified applicants will receive consideration for employment without regard to race, color religion, sex, national origin, sexual orientation, gender identity, disability or protect veteran status. Visa will also consider for employment qualified applicants with criminal histories in a manner consistent with the EEOC guidelines and applicable local law.Technology Risk Analyst Jobs by Experience Level
See All 155+ Technology Risk Analyst Jobs
Find roles that match your experience and apply in just a few clicks.
Find Technology Risk Analyst JobsTechnology Risk Analyst Job Market
Who's Hiring
- Deloitte33
- JPMorganChase12
- EY8
- Citi7
- M&T Bank5
Top Industries Hiring
- Banking & Financial Services
- Investment & Asset Management
- Accounting & Auditing
- Fintech
- Technology & Software
What Employers Look For
The qualifications that appear most often in technology risk analyst jobs.
- Bachelor's degree in information technology, computer science, finance, or a related field
- Experience conducting IT risk assessments and developing risk mitigation strategies
- Proficiency with risk frameworks such as NIST, ISO 27001, or COBIT
- Familiarity with GRC platforms such as Archer, ServiceNow, or similar tools
- Professional certification such as CRISC, CISA, or CISSP preferred
- Strong written communication skills for producing risk reports and audit documentation
Tips for Your Technology Risk Analyst Job Search
Align your resume to risk frameworks
Hiring managers in this role screen for NIST, ISO 27001, or COBIT experience before anything else. Name the specific frameworks you've applied and in what context, rather than listing risk management as a general skill.
Certify before you compete for senior roles
The CRISC certification is a consistent differentiator in mid-level and senior postings. If you don't have it yet, note active candidacy on your resume so recruiters don't screen you out before you get to interview.
Apply early to roles that fit
Migrate Mate lists technology risk analyst openings from across the United States in one place, so you can find roles that match and apply directly to each listing.
Tailor your profile for the industry vertical
A technology risk analyst resume for a bank should emphasize regulatory controls and audit readiness, while one targeting a tech company should lead with vendor risk and cloud security exposure. Swapping the emphasis increases your callback rate.
Prepare for technical and behavioral rounds
Expect at least one scenario question asking how you'd assess a third-party vendor's risk posture or respond to a control gap finding. Rehearse structured answers that walk through your assessment methodology, not just the outcome.
Negotiate using total compensation, not just base
Technology risk roles in regulated industries often include annual incentive bonuses tied to audit cycle performance. Ask your recruiter whether the target bonus is discretionary or formulaic before anchoring your counteroffer to base salary alone.
Technology Risk Analyst Jobs: Frequently Asked Questions
Which companies are hiring the most technology risk analysts?
The companies hiring the most technology risk analysts right now include Deloitte, JPMorganChase, and EY, with the largest share of openings in New York, Texas, and Ohio, based on current listings on Migrate Mate as of November 2026. Financial institutions, consulting firms, and large technology companies consistently make up the majority of demand.
How many technology risk analyst jobs are remote?
About 82% of technology risk analyst openings are fully remote or hybrid as of November 2026, with availability varying by industry and seniority level. Sub-areas such as third-party vendor risk management and GRC advisory tend to offer the highest concentration of remote and hybrid arrangements, while roles embedded in bank examination or on-site audit programs are more likely to require in-office presence.
How do you become a technology risk analyst?
Start with a bachelor's degree in information systems, computer science, finance, or a related discipline. Build foundational knowledge in IT controls, risk assessment methodology, and regulatory compliance through coursework or entry-level audit or IT roles. Earn a recognized certification such as CRISC or CISA to validate your expertise. Then target junior risk analyst or IT audit associate roles to build hands-on experience before moving into dedicated technology risk positions.
How do you get hired as a technology risk analyst with little experience?
Entry-level candidates fare best when they can point to adjacent experience such as internal audit internships, IT helpdesk roles, or compliance work, even outside of formal risk titles. Pairing that background with an in-progress CISA or CompTIA Security+ shows employers you understand the technical foundations. Targeting roles posted as associate analyst or risk coordinator levels opens more doors than applying directly to mid-level positions before you have the full profile.
What does the technology risk analyst interview process look like?
Most technology risk analyst processes run three to four rounds. An initial recruiter screen confirms your background and expectations. A hiring manager interview focuses on how you approach risk assessments, control testing, and documentation. Technical or panel rounds typically present a scenario, such as evaluating a vendor's security posture or identifying control gaps in a process walkthrough. Some employers add a written case study or presentation to assess how you structure and communicate a risk finding.
Where can I find and apply to technology risk analyst jobs?
You can find and apply to technology risk analyst jobs on Migrate Mate, which lists current openings from across the United States. Search for roles that match your experience level and industry focus, then apply directly to each listing that fits. Migrate Mate pulls together openings in one place so you're not hunting across multiple sources to build a complete picture of what's available.
See All 155+ Technology Risk Analyst Jobs
Find roles that match your experience and apply in just a few clicks.
Find Technology Risk Analyst Jobs