• Coterie is seeking a Senior Risk Management Analyst to help design, build and mature key capabilities within our Information Security Risk Management program. • In this role, you will support governance, risk management, privacy, compliance and continuity/disaster recovery (BC/DR) initiatives. • Identify opportunities to streamline and enhance GRC processes. • Stay curious and proactive in exploring new solutions and methodologies to improve the organization’s risk management and compliance practices. • Execute risk assessments including scoping, threat and risk scenario identification, and all aspects of the risk assessment process. • Identify areas of opportunity to reduce residual risk to a level consistent with risk appetite, and collaborate with Risk Management Manager, CISO and other security team members to build out the security capability road map. • Support teams in conducting Business Impact Analysis (BIA), assist in planning recovery tests, and provide expert consultation to strengthen business continuity and disaster recovery (BCDR) strategies. • Identify and analyze single points of failure in business processes, systems, and infrastructure, and collaborate with relevant stakeholders to implement risk mitigation strategies. • Contribute to the management and maturity of our third-party risk management program. • Support Service Organization Control (SOC 2, SOC 1) program through evidence gathering, testing, and coordination with auditors and stakeholders. • Execute the security awareness program. Work collaboratively and support cross-functional teams in assessing and mitigating risks related to regulatory compliance, data privacy, information security, and business continuity. • Strong desire to drive efficiencies, make risk-based decisions, implement automation, and recommend and track meaningful KPIs and KRIs. Development and administration of Coterie’s Information Security Program documents including policies, standards, plans and controls library. Ability to work independently on complex programs and assignments with diverse teams and perform other duties as assigned.