Overview
The IT Risk Analyst will support technology, information security, and regulatory risk management activities in a fully remote capacity. This role involves conducting risk assessments, maintaining enterprise risk registers, and collaborating with various business and technology stakeholders to ensure risks are effectively identified and managed according to internal frameworks and regulatory requirements.
Responsibilities
- Conduct technology, information security, data, and third-party risk assessments.
- Utilize knowledge of ISO 27001 and NIST to evaluate risks.
- Maintain risk registers and monitor remediation actions.
- Liaise with Risk Owners to assess and update risk scores as necessary.
Requirements
- Minimum of 1 year of experience in a GRC, technology risk, information security risk, or internal audit role.
- Familiarity with ISO 27001, NIST, and GDPR regulatory frameworks.
- Experience in conducting risk assessments and managing remediation actions.
- Proficient in updating risk registers and performing administrative tasks within a risk management function.
- Strong skills in Excel and PowerPoint.