Technology Risk Analyst

Cretex Companies, Inc. • Elk River, MN

10d • $60,800 - $91,200

About The Position

The Technology Risk Analyst helps Digital & IT operate as a well-governed, resilient, risk-aware, and effective business function, with a primary focus on strengthening organizational resilience and managing technology risk. The role works across Digital & IT and the business to strengthen organizational resilience, manage technology risk, improve governance, and help leaders understand technology dependencies and their role in reducing risk. The primary focus is Business Continuity and Disaster Recovery, technology risk management, governance, and business education. The role also supports broader Office of the CIO priorities, including data governance, compliance, financial management, contracts, performance reporting, and continuous improvement. The ideal candidate is highly organized, analytical, comfortable working across technical and business teams, and able to turn complex risks and requirements into practical actions and measurable improvements.

Requirements

• Bachelor’s degree in Information Technology, Business, Risk Management, Cybersecurity, Finance, or a related field, or an equivalent combination of education and relevant experience.
• 3+ years of experience in technology, risk management, governance, business continuity, cybersecurity, business analysis, finance, or a related field.
• Strong analytical, organizational, documentation, and project coordination skills.
• Demonstrated ability to identify risks, organize complex information, and drive actions through completion.
• Strong written and verbal communication skills with the ability to work effectively with technical and non-technical audiences.
• Ability to translate technology concepts, risks, and requirements into clear business language.
• Experience coordinating cross-functional projects or initiatives.
• Strong attention to detail and ability to manage multiple priorities in a fast-paced environment.
• Strong proficiency with Excel, PowerPoint, and other reporting or analytical tools

Nice To Haves

• Experience with business continuity, disaster recovery planning, Business Impact Analysis, tabletop exercises, or recovery testing.
• Familiarity with technology and cybersecurity risk frameworks such as NIST, ISO 27001, or similar standards.
• Experience with technology governance, policy development, audit, risk, or compliance activities.
• Experience with data classification, data retention, privacy, or information governance.
• Experience supporting IT financial management, budgeting, contracts, renewals, or vendor management.
• Experience developing KPIs, dashboards, management reporting, or executive-level presentations.
• Experience using AI, automation, or workflow tools to improve business or technology processes.
• Experience in manufacturing, medical device, regulated, or multi-site environments.
• Relevant certifications in risk, business continuity, cybersecurity, finance, or project management are valued.

Responsibilities

• Own the development, maintenance, testing, and continuous improvement of technology Business Continuity and Disaster Recovery plans.
• Partner with business and technology leaders to identify critical processes, technology dependencies, recovery requirements, and operational risks.
• Coordinate Business Impact Analyses, tabletop exercises, disaster recovery testing, and follow-up remediation.
• Maintain the technology risk register and coordinate risk identification, assessment, remediation, acceptance, and reporting.
• Identify critical technology, vendor, and process dependencies that could impact business operations.
• Help business leaders understand technology risks, preparedness expectations, and actions they can take to improve organizational resilience.
• Develop, coordinate, and maintain Digital & IT policies, standards, procedures, and governance processes, including stakeholder review, approval, communication, implementation, and periodic review.
• Lead or support initiatives related to data classification, retention, handling, privacy, and other information-governance requirements.
• Support technology-related regulatory, legal, contractual, customer, and geographic compliance requirements.
• Coordinate technology risk exceptions and ensure accepted risks are appropriately documented, approved, reviewed, and tracked.
• Support audits, assessments, customer requirements, cyber insurance requests, and related documentation.
• Partner closely with the Cybersecurity Manager to support cybersecurity risk management and alignment with applicable frameworks and requirements.
• Help translate cybersecurity risks into clear business impacts and practical actions.
• Support cybersecurity awareness, employee education, phishing programs, and other activities designed to reduce human-related risk.
• Assist with cybersecurity risk assessments, customer security requirements, and remediation tracking.
• Support monthly Digital & IT financial management, including budget tracking, forecast updates, actual-versus-plan analysis, vendor spend, and identification of significant variances.
• Maintain visibility to key technology contracts, renewals, obligations, and upcoming decisions.
• Support annual planning, investment prioritization, and development of business cases for technology initiatives.
• Help identify opportunities to optimize technology spending, licensing, vendors, and services.
• Develop and maintain Digital & IT KPIs, KRIs, scorecards, dashboards, and management reporting.
• Support recurring Digital & IT operating reviews, governance meetings, and leadership discussions.
• Track significant risks, issues, actions, and commitments through completion and provide analysis to help leadership identify trends and improvement opportunities.
• Lead or coordinate cross-functional initiatives related to risk, governance, resilience, compliance, and operational improvement.
• Identify and apply opportunities to use AI, automation, and digital tools to streamline Digital & IT processes, improve reporting, reduce manual effort, and increase operational effectiveness.
• Support special projects and emerging CIO priorities that require structured analysis, coordination, and follow-through.
• Work across Digital & IT, Finance, Legal, HR, business leadership, and external partners to drive initiatives to completion.

Benefits

• 401k retirement savings plan with a company match contribution
• onsite health clinics
• discretionary holiday bonus program (based on years of service)
• Cretex University
• 24/7 employee assistance program with access to five confidential visits with a licensed counselor at no cost
• wellness program with incentives
• employee death benefit
• employee sick and safe leave
• comprehensive medical insurance with access to virtual providers
• dental insurance (Little Partners Dental benefit covers services 100 percent for children 12 and younger when seen by a Health Partners in network provider)
• vision insurance
• a pre-tax health savings account
• healthcare and dependent care pre-tax reimbursement accounts
• paid holidays
• paid time off
• discretionary profit sharing program
• Parental Leave
• accident and critical illness benefits
• optional employee, spouse, and child life
• short and long term disability
• company provided life insurance
• tuition assistance programs

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level