IT Risk and Governance Analyst/Remote

IT Risk and Governance Analyst

Location: Remote 

Position Summary

We are seeking an IT Risk and Governance Analyst to support the organization's IT governance, risk management, and compliance initiatives. The successful candidate will help identify, assess, and monitor technology risks, ensure adherence to internal policies and regulatory requirements, and support the implementation of effective governance frameworks and controls.

Key Responsibilities

• Conduct IT risk assessments and assist in maintaining the IT risk register.
• Identify, evaluate, and report technology, cybersecurity, operational, and compliance risks.
• Support IT governance processes, policies, standards, and procedures.
• Monitor compliance with internal controls, regulatory requirements, and industry standards.
• Assist with internal and external audits, including evidence collection and remediation tracking.
• Track and report risk mitigation activities and control effectiveness.
• Collaborate with IT, Security, Compliance, and Business teams to address identified risks.
• Support third-party/vendor risk assessment activities.
• Prepare risk and governance reports, dashboards, and presentations for management.
• Maintain documentation related to policies, procedures, controls, and governance activities.

Required Qualifications

• Bachelor's degree in Information Technology, Information Security, Business Administration, Risk Management, or a related field.
• 3+ years of experience in IT risk management, IT governance, compliance, audit, or information security.
• Understanding of IT risk management principles and control frameworks.
• Knowledge of governance and compliance standards such as:
  • COBIT
  • NIST Cybersecurity Framework
  • ISO 27001
  • ITIL
• Experience supporting audits, risk assessments, or compliance reviews.
• Strong analytical, organizational, and documentation skills.
• Proficiency with Microsoft Office applications, particularly Excel and PowerPoint.

Preferred Qualifications

• Experience with Governance, Risk, and Compliance (GRC) tools.
• Familiarity with cybersecurity controls and security governance practices.
• Knowledge of regulatory requirements relevant to the industry (e.g., SOX, GDPR, PCI DSS, HIPAA).
• Professional certifications such as:
  • CRISC
  • CISA
  • CISM
  • ITIL Foundation