Policy, Risk,

**Job Description / Role Profile**Job/Position: Risk AnalystBU/Organization: Global Data & TechnologyDepartment: Cyber & Digital TrustLocation: MexicoManagement Level: TBDGlobal Reporting Level (CEO=1): TET-5Line Manager’s Job/Position Title: Head of Policy, Risk and Control Analytics**_ OBJECTIVES/PURPOSE _**_(3-4 bullets)_- Collects and maintains risk and policy exception data using the team’s Governance, Risk, and Compliance (GRC) platform- Assists in providing a holistic, business-oriented approach to the management of information security risk using likelihood and impact to guide and advise the business- Assists in providing technical and business leadership teams across the organization with the analysis needed to make risk-based decisions**_ ACCOUNTABILITIES _**_(Describe the primary duties and responsibilities of the job. Include only the essential functions of the job. Approximately 5 - 10 bulleted task statements should be identified)._- Triage and manage risks and policy exceptions according to internal operating standards- Participate in team meetings and aid colleagues- Collaborate with risk stakeholders to develop and track mitigation plans and ensure compliance with policies and standards- Assist in the development and maintenance of our internal control framework- Assist in the maintenance of our policy framework and training platforms**_ DIMENSIONS AND ASPECTS _****Leadership** _(Vision, strategy and business alignment, people management, communication, influencing others, managing change) _- Influences action across various technical, non-technical, and geographic teams to reduce risk- Ability to effectively manage conflicting priorities- Develops strong relationships with other teams across the organization**Decision-making and Autonomy** _(The capacity and authority to make organizational decisions, autonomy in decision-making, complexity of decisions, impact of decisions, problem-soliving)_- Operates autonomously to triage and manage risks and exceptions- Responds to risk stakeholders in a timely manner, engages colleagues when needed, and escalates when necessary**Interaction** _(The span and nature of one’s engagement with others when performing one’s job, internal and external relationships)_- Balances conflicting priorities by leveraging personal organization skills- Operates effectively across a matrixed organization- Demonstrates cultural sensitivity and is respectful of colleagues**Innovation** _(The required level of scientific knowledge, knowledge sharing, innovation and risk taking)_- Innovates to find new solutions to problems- Applies innovative approaches to reduce risk and minimize business impact**Complexity** _(Products managed, mix of businesses, internal and/or external business environment, cultural considerations)_- Operates across geographies and technologies- Collaborates effectively within the team, across teams, and with vendors**_ EDUCATION, BEHAVIOURAL COMPETENCIES AND SKILLS:_** _(List the essential and desirable education and competency requirements to perform the primary responsibilities of the job. Any minimum requirements should be noted.)_- ** Essential**- Bachelor’s degree or equivalent- Ability to manage multiple workstreams simultaneously- Ability to thick critically and analytically- Excellent communication, interpersonal, presentation, and organizational skills- Comfortable operating in and navigating a global organization where risk stakeholders can be located across geographies and time zones- ** Desired**- Preferred experience with risk management practices such as NIST 800-30 and 800-33- Background with control frameworks such as NIST CSF and 800-53- Ability to create macros and simple automation in Excel**_ ADDITIONAL INFORMATION_**_ (Add any information legally required for your country here)_- Flexibility to participate in risk activities outside of local business hours**Locations**:MEX - Santa Fe**Worker Type**:Employee**Worker Sub-Type**:Regular**Time Type**:Full time