IT Governance Analyst

Blue Cross and Blue Shield of North Carolina

1d • $81,068 - $129,708 • Hybrid

About The Position

Assists in the development, maintenance, and ongoing improvement of the IT risk management, IT controls framework, training, and associated processes, including documentation. Assists the audit process within IT and the process for tracking open audit findings, test exceptions, and systemic issues. Supports internal and/or external audit as needed during audit engagements.

Requirements

• Bachelor's degree or advanced degree (where required)
• 3+ years of experience in related field
• In lieu of degree, 5+ years of experience in related field

Nice To Haves

• Technical fluency; prior IT Audit experience is highly beneficial
• Control design and documentation, including process mapping and governance
• CISSP, CISM, CISA or CRISC certification preferred

Responsibilities

• Assists with the identification and assessment of risks to the organization, with an emphasis on IT, Security, and/or key initiative risks.
• Provides support to business owners and project teams to increase awareness and understanding of risks and controls.
• Assists in the development, assessment and monitoring of mitigation plans for IT-related risks, to ensure they are managed to an acceptable level.
• Identifies, evaluates and escalates issues that conflict with BCBSNC’s risk tolerance.
• Provides assistance and/or consulting on projects and other initiatives to ensure risks are considered and addressed appropriately.
• Identifies and evaluates risks with business areas based on an assessment of the control environment. Works with business areas to enhance controls or develop action plans to address risks.
• Works with business areas and process owners to ensure that risk related documentation is clear and accurate.
• Develops processes and procedures to ensure documentation is properly maintained in accordance with company policies, industry standards and regulatory requirements.
• Aids in developing and implementing plans and guidance (which may include formal and informal training) to increase awareness about IT and Security risk management.

Benefits

• Medical, dental, and vision coverage along with numerous health and wellness programs
• Parental leave and support plus adoption and surrogacy assistance
• Career development programs and tuition reimbursement for continued education
• 401k match including an annual company contribution

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level