Cyber Risk Mgmt Sr Analyst

Texas Capital is built to help businesses and their leaders. Our depth of knowledge and expertise allows us to bring the best of the big firms at a scale that works for our clients, with highly experienced bankers who truly invest in people’s success — today and tomorrow.  

While we are rooted in core financial products, we are differentiated by our approach. Our bankers are seasoned financial experts who possess deep experience across a multitude of industries. Equally important, they bring commitment — investing the time and resources to understand our clients’ immediate needs, identify market opportunities and meet long-term objectives. At Texas Capital, we do more than build business success. We build long-lasting relationships. 

Texas Capital provides a variety of benefits to colleagues, including health insurance coverage, wellness program, fertility and family building aids, life and disability insurance, retirement savings plans with a generous 401K match, paid leave programs, paid holidays, and paid time off (PTO). 

Texas Capital is headquartered in Dallas with offices in Austin, Fort Worth, Houston, Richardson, Plano, San Antonio, Chicago, Los Angeles and New York. For more information about joining our team, please visit us at www.texascapital.com.

The Information Risk function serves as the Bank’s Second Line of Defense (2LOD), independently assessing and monitoring information risks across the organization. This role supports the Information Risk Team by translating complex data into clear, actionable reports that inform senior management and decision-making committees on the Bank’s risk posture and strategy. Responsibilities include conducting, creditable review & Challenge, and validating risk assessments; analyzing the potential impact of identified risks; recommending mitigation strategies; and developing governance documentation. The position also prepares detailed reports for senior, executive, and board-level committees while contributing to broader risk activities such as business impact assessments, key risk metrics, scenario analysis, material risk identification, and issue management.

Responsibilities

• Served as a key member of the Information Risk function, providing independent oversight and challenge of information security, technology, and cyber risks across the enterprise.
• Led risk assessments, control reviews, and risk validation activities to identify emerging threats, assess business impact, and recommend effective mitigation strategies.
• Analyzed enterprise risk data, specifically vulnerability management results, security assessments, and operational metrics to identify trends and strengthen the organization's risk posture.
• Developed and maintained Information Risk governance frameworks, including policies, standards, procedures, risk methodologies, and supporting documentation.
• Produced executive-level reporting and dashboards for senior leadership, risk committees, and Board committees, translating complex technical risks into concise business-focused insights.
• Partnered with business units, technology teams, and control functions to support risk management, regulatory compliance, and strategic initiatives.
• Oversaw key risk management activities including Risk and Control Self-Assessments (RCSAs), Key Risk Indicators (KRIs), scenario analysis, issue management, and material risk identification.
• Supported regulatory examinations and audits by ensuring risk documentation, evidence, and reporting met regulatory and governance expectations.
• Evaluated cybersecurity and technology risks related to cloud environments, third-party vendors, software development, vulnerability management, and operational resilience.
• Developed actionable recommendations that improved risk governance, control effectiveness, and decision-making across the organization.
• Created executive dashboards, risk heatmaps, and trend analyses to provide timely visibility into risk exposures and mitigation efforts.
• Collaborated with regulators, auditors, and stakeholders to ensure alignment with industry standards and regulatory requirements.

Core Competencies

Cybersecurity Governance, Risk & Compliance (GRC) | Vulnerability Management | Incident Response Management | IT GRC Controls

Assessment & Control Testing | Security Audit & Audit Readiness | Threat Hunting & Threat Intelligence | Third-Party / Vendor

Risk Management | Secure SDLC & Security Documentation | Cloud Security & AWS Risk Monitoring | SOX, SOC, ISO, NIST, NIST RMF, CRI, BASIL

COBIT & PCI DSS Alignment | Penetration

Key Skills and Knowledge in the following areas

• Vulnerability & Exception Management
• Information Risk Management (2LOD)
• Cybersecurity Governance, Risk & Compliance (GRC)
• Risk & Control Self-Assessments (RCSA)
• Key Risk Indicators (KRI)
• Regulatory Exam & Audit Management (OCC, FDIC, FRB)
• Information Security Risk Assessments
• Executive & Board Reporting
• Enterprise Risk Management
• Third-Party Risk Management
• Issue Management & Remediation Oversight
• Cloud Security & AWS Risk Governance
• Policy, Standards & Procedure Development
• NIST, NIST RMF, COBIT, PCI DSS, SOX, SOC, ISO 27001
• Data Analytics, Risk Metrics & Dashboard Development
• Business Impact Analysis & Scenario Analysis

• Testing & Security Assessment | Executive Reporting & Risk Metrics

Qualifications

• Bachelor’s degree (preferred in Finance, Accounting, Business, or Analytics, Computer Science); or equivalent combination of education, training, experience
• Minimum 5 years of experience, preferably directly in risk management related to Risk Control Self-Assessment (RCSA), Key Risk Indicator (KRI), internal/external losses, scenario analysis, organizational change management, and/or program strategic design and execution.
• Risk Compliance and/or Audit experience, with experience reading, interpreting, tracking, and administrating regulatory and general risk requirements
• Experience with regulators (FRB, OCC, FDIC).
• Strong documentation capabilities.
• Ability to communicate results to both technical and business audiences.
• Strong analytical and problem-solving mindset, focused on results with critical thinking, research and problem-solving, and decision-making skills.
• Ability to implement and communicate actionable insights to streamline processes/transactions.
• Highly self-motivated with a strong sense of initiative.
• Ability to manage competing priorities on concurrent large, complex projects, initiatives, and deliverables.
• Strong verbal, written, and interpersonal communication skills.

The duties listed above are the essential functions, or fundamental duties within the job classification.  The essential functions of individual positions within the classification may differ. Texas Capital Bank may assign reasonably related additional duties to individual employees consistent with standard departmental policy.Texas Capital is an Equal Opportunity Employer.