> Markdown version of [/jobs/ext/86482-it-risk-management-senior-analyst](https://www.wearedevelopers.com/jobs/ext/86482-it-risk-management-senior-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Risk Management Senior Analyst - **Company:** Tenneco Inc. - **Location:** Northville, MI, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Cyber Security, IT Management, Smartsuite, Systems Integration, RSA Archer Platform, Servicenow - **Published:** May 19, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=6f59f644270256fe ## About the Role * 5-8+ years of experience in cybersecurity risk management, technology risk, GRC, or operational risk. * Demonstrated experience setting risk tolerance and thresholds and translating them into practical decision rules. * Proven track record of building and operating a risk register. * Experience creating or maturing a risk management lifecycle and supporting processes * Strong understanding of cybersecurity concepts (controls, threats, vulnerabilities, cloud risk, identity, incident risk, third-party risk). * Excellent written and verbal communication: ability to deliver clear, executive-ready risk narratives and recommendations. * Experience with GRC tools (e.g., ServiceNow GRC, Archer, OneTrust, LogicGate, MetricStream) or comparable workflow systems. Skills: * Excellent communication, organization time management and problem-solving skills * Exceptional track record of building relationships with stakeholders * Strong multi-tasking skills with the ability to manage multiple projects * Ability to function as a Team Player and maintain a good working relationship, yet think and act independently with professionalism, discretion and confidentiality * Excellent communication, organization time management and problem-solving skills ## Description We are seeking an IT Risk Management Senior Analyst to help design, implement, and mature our enterprise cybersecurity and technology risk program. This role is ideal for a risk professional who has built risk programs-not just operated them-and who can translate complex technical risks into clear, prioritized, and measurable risk decisions for leaders. You will lead the development of our risk tolerance and thresholds, establish and manage a central risk register, and build a repeatable risk management lifecycle and supporting processes. You will partner across Cybersecurity, Physical Security, IT, Privacy, and business teams to ensure risks are identified, assessed, tracked, mitigated, and reported with consistency and transparency. This position is based in Northville, Michigan and reports directly to the Senior IT Governance Manager of the company., Risk Governance * Define and operationalize risk tolerance and risk thresholds in partnership with leadership and stakeholders. * Develop and maintain a risk taxonomy, risk scoring methodology, and risk rating guidance to support consistent assessments. * Create and mature the risk management lifecycle including decision criteria, artifacts, roles, and accountability. Risk Register Management * Establish a scalable security/technology risk register. * Implement workflows for intake, review, approval, and periodic reassessment. * Ensure risks are measurable, comparable, and traceable through evidence and documentation. Risk Assessment & Treatment * Partner closely with the IT Compliance team to document risk treatment plans: mitigation, acceptance, transfer, or avoidance; ensure alignment with risk thresholds. * Develop and manage the process for risk acceptance and exception handling, including decision criteria, approvals, and expiration/renewal. Reporting, Metrics & Executive Communication * Build risk reporting and dashboards that clearly communicate: + Risk posture against thresholds + Top risks and trends + Treatment progress and overdue actions * Prepare risk summaries for leadership forums Process Development & Continuous Improvement * Create and maintain risk management playbooks, templates, standards, and procedures * Identify opportunities to streamline risk operations through tooling and automation (GRC platforms, workflow automation, integrations). ## Related Videos - [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Your Manager Doesn’t Come with a User Manual (But You Can Totally Write One)](https://www.wearedevelopers.com/videos/1495-your-manager-doesn-t-come-with-a-user-manual-but-you-can-totally-write-one) - [AI in Production: applied AI & enterprise use cases](https://www.wearedevelopers.com/videos/100130-ai-in-production-applied-ai-enterprise-use-cases) - [Engineering/Manager Pendulum: Generating compound interest on your career](https://www.wearedevelopers.com/videos/100348-engineering-manager-pendulum-generating-compound-interest-on-your-career) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [From developer to manager – what does it take to become an engineering manager?](https://www.wearedevelopers.com/magazine/42-from-developer-to-manager-what-does-it-take-to-become-an-engineering-manager) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)