IT Risk Analyst (Onsite Role)

O'Reilly Auto Parts•Headquarters, KY

10d•Onsite

About The Position

The IT Risk Analyst helps safeguard O’Reilly Auto Parts’ digital ecosystem and strengthen operational resilience. The role gathers critical data, monitors technology and operational risks, evaluates control effectiveness, and supports cross-functional remediation efforts. Working with IT, Security, Legal, and Compliance teams, the analyst tracks deviations from established risk frameworks, surfaces actionable insights, and supports alignment with industry standards and organizational policies. The position is located in Springfield, Missouri, and remote work is not an option.

Requirements

Associate degree, equivalent technical training, or relevant industry certification.
7–12 months of hands-on experience working with standard IT, risk, or compliance procedures and systems.
4–6 months of foundational experience coordinating tasks or leading the work of others.
Working knowledge of relevant IT laws, regulations, policies, and industry standards.
Ability to assimilate data from multiple sources, identify patterns, and draw sound, actionable conclusions.

Nice To Haves

Experience modeling or assessing risk probability and impact scenarios.
Familiarity with gap analysis techniques and change management processes.
Track record of drafting clear, structured compliance documentation and executive reports.
Proficiency with standard enterprise office tools, risk registers, and productivity suites.
High self-direction and ability to manage workflows independently under general supervision.

Responsibilities

Monitor operational and technology risk parameters within established frameworks, identify deviations, and escalate them to senior colleagues.
Assist in evaluating IT controls to ensure they effectively mitigate existing and emerging technology risks.
Support risk treatment planning, track remediation across departments, and verify issue resolution.
Partner with IT, Information Security, Legal, and Compliance teams to develop, implement, and enforce risk management strategies.
Collect, interpret, and analyze risk and compliance data using standard tools and frameworks to support leadership decisions and reporting.
Conduct compliance monitoring, identify procedural gaps, and provide basic guidance on regulatory and governance requirements.
Address internal and external stakeholder inquiries about risk policies, governance standards, and operational processes.