Comerica Bank

Business Application Risk Analyst

The Business Application Analyst role is responsible for supporting the Enterprise Risk organization through the development, enhancement, maintenance, and support of the GRC tool Archer. The role is a part of an agile methodology application development team and is responsible for the facilitation of key Agile ceremonies such as Grooming and requirements gathering. The role works closely with the developers of Archer as well as other business stakeholders and is seen as a bridge between the technical world and the business world.

This role is a critical is responsible for the facilitation of key meetings such as requirements refinement and prioritization. They work closely with Scrum Masters and Project Managers of applications, Risk stakeholders, and other team members to identify and execute top priority projects for the Risk Division. This role is also responsible for the facilitation of requirements gathering within the Risk Division. This includes adherence to the requirement gathering process, communication of recommended solutions, and organization of requirement documents.

Position Responsibilities:

Documentation, Process Enhancement, and Reporting

• Work with application developers to document and convert business requirements into end solutions.
• Manage the priority of tasks with key stakeholders through backlog management and refinement.
• Work closely with the Technology team to ensure new/updated processes are properly documented.
• Prepare risk reports and communicate findings and recommendations to senior management and stakeholders.

Cross-Team Collaboration

• Facilitate cross-team discussions with Risk colleagues to determine and document business requirements and perform gap analysis between current and future states.
• Collaborate regularly with technical teams to ensure dependencies are captured and that the team has comprehensive test scripts.
• Communicate incident response activities to leadership and stakeholders.

Risk Management and Identification

• Analyze business applications for potential Risks related to data security, compliance, and operational continuity.
• Evaluate the likelihood and impact of identified risks and prioritize them based on severity.
• Ensure applications comply with relevant regulations, industry standards, and internal policies.
• Develop strategies to reduce or eliminate risks, which could involve recommending changes to applications, processes, or policies to business partners.
• Other duties as assigned.