IT Governance Risk Compliance Analyst

Job Summary

Collaborating with various teams, the full-time IT Governance Risk Compliance Analyst will execute governance, risk, and compliance activities aligned with regulatory frameworks, conduct IT assessments, and maintain control libraries while supporting departmental risk remediation efforts.

Key responsibilities

• Serve as a liaison between internal IT/IS/Cyber teams and Enterprise Risk and Audit to facilitate compliance efforts and assessments
• Coordinate the collection of evidence for assessments and execute testing procedures, documenting results and drafting reports
• Collaborate with internal teams to maintain and review policy/standards documentation and support remediation of identified risks

Required qualifications

• Bachelor's degree in information security, Information Systems/Technology, Risk Management, Cybersecurity, or a similar discipline
• 1 year of experience in IT GRC, IT audit, or a closely related compliance or risk function
• Proficiency with Microsoft Office 365, including Excel and SharePoint for documentation and collaboration
• Familiarity with GRC platforms and ITSM tools
• Strong written communication skills for drafting audit findings and control narratives