IT Governance Analyst

Blue Shield of North Carolina•Durham, NC

8d•Hybrid

About The Position

The IT Governance Analyst assists with the development, maintenance, and ongoing improvement of IT risk management, the IT controls framework, training, and related processes and documentation. The role supports IT audits and tracking open audit findings, test exceptions, and systemic issues, and assists internal and external auditors during engagements as needed. The analyst identifies and assesses organizational risks, especially those involving IT, security, and key business initiatives. Working with business owners and project teams, the analyst builds awareness of risks and controls and supports the development, assessment, and monitoring of IT risk mitigation plans. The role also provides risk guidance for projects, evaluates control environments, helps strengthen controls or develop mitigation action plans, maintains risk documentation, and develops guidance, processes, and training to improve understanding of IT and security risk management.

Requirements

Bachelor’s degree or advanced degree, where required; in lieu of a degree, 5+ years of experience in a related field.
3+ years of experience in a related field.

Nice To Haves

Experience supporting critical incident or crisis management, including cybersecurity-related incidents.
Knowledge of recovery testing, reporting, and control assessment.
Experience partnering with technology and business teams on recovery preparedness and continuity planning.

Responsibilities

Identify and assess organizational risks, with emphasis on IT, security, and key business initiatives.
Partner with business owners and project teams to build awareness of risks and controls and support IT risk mitigation plans.
Identify, evaluate, and escalate risks that exceed the organization’s established risk tolerance.
Provide risk consulting and guidance for projects and initiatives to ensure risks are identified and addressed.
Evaluate control environments and work with business areas to strengthen controls or develop action plans to mitigate identified risks.
Maintain accurate risk documentation in accordance with company policies, industry standards, and regulatory requirements.
Develop guidance, processes, and training to strengthen awareness and understanding of IT and security risk management.
Assist with development, maintenance, and improvement of IT risk management, the IT controls framework, training, and related processes and documentation.
Support IT audit processes and track open audit findings, test exceptions, and systemic issues.
Support internal and/or external auditors during audit engagements as needed.