The Senior Information Security Policy & Risk Analyst evaluates and strengthens information security controls, manages risk assessment lifecycles, oversees compliance, and collaborates with stakeholders to enhance security policy adherence. They also handle internal audits and provide consultative advice based on risk assessments.