Analyst I, IT Risk Management

Cencora•Conshohocken, PA

5d•Onsite

About The Position

Our team members are at the heart of everything we do. At Cencora, we are united in our responsibility to create healthier futures, and every person here is essential to us being able to deliver on that purpose. If you want to make a difference at the center of health, come join our innovative company and help us improve the lives of people and animals everywhere. Apply today! Job Details Summary : Evaluates IT system configurations to support foundational technology risk assessments and internal compliance audits. Compiles routine risk intelligence data to assist in the identification of potential operational vulnerabilities within the corporate infrastructure. Updates standardized risk registers and compliance documentation to ensure accurate tracking of organizational security postures. Coordinates with cross-functional IT teams to gather necessary technical evidence for scheduled regulatory evaluations.

Requirements

Bachelor's degree in information technology, cybersecurity, risk management, business administration, computer science, or a related field, or equivalent experience required.
Less than 2 years of experience in IT risk management, cybersecurity, IT audit, technology compliance, or a related field required.
Strong written and verbal communication skillsets
Ability to work well both independently as well as within a team oriented environment

Nice To Haves

CompTIA Security+, Information Systems Audit and Control Association (ISACA) Cybersecurity Fundamentals Certificate, or equivalent preferred.

Responsibilities

Evaluates standard technology configurations and user access logs to support foundational IT risk assessments and compliance reviews.
Compiles basic threat intelligence data and operational incident reports to assist senior analysts in identifying potential system vulnerabilities.
Updates centralized IT risk registers and security compliance databases to maintain an accurate and current organizational risk profile.
Coordinates the collection of technical evidence and system documentation from various IT departments to support internal and external audits.
Resolves foundational compliance inquiries from internal staff regarding standard security policies and acceptable technology use guidelines.
Collaborates with senior risk management personnel to track the progress of basic remediation activities following identified audit deficiencies.