IT Governance Analyst

Blue Cross and Blue Shield of North Carolina; Durham (CA); Hybrid; USD 81,000 - 130,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Parental leave and adoption support

Tuition reimbursement

401k match

Job summary

Blue Cross and Blue Shield of North Carolina in Durham is seeking an IT Governance Analyst to help develop and refine our IT risk management and controls framework. You’ll document processes, support audits, and track findings and test exceptions to ensure controls remain effective.

The role emphasizes collaboration with business owners and project teams to raise risk awareness, strengthen controls, and deliver training.

Qualifications

• Bachelor’s degree or advanced degree in a related field.
• 3+ years of experience in IT risk, security, or related field.
• In lieu of degree, 5+ years of related experience.

Responsibilities

• Identify and assess organizational risks, with emphasis on IT, security, and key business initiatives.
• Partner with owners and project teams to build awareness of risks and controls and support development, assessment, and monitoring of IT risk mitigation plans.
• Identify, evaluate, and escalate risks that fall outside the organization’s established risk tolerance.
• Provide risk consulting and guidance for projects and initiatives to ensure risks are identified and addressed.
• Evaluate control environments and partner with business areas to strengthen controls or develop action plans to mitigate identified risks.
• Maintain clear and accurate risk documentation in accordance with company policies, industry standards, and regulatory requirements.
• Develop guidance, processes, and training to strengthen awareness and understanding of IT and security risk management.

Skills

IT risk management

IT security

Risk assessment

Controls framework

Audit support

Education

Bachelor’s degree

Advanced degree

Job description

Job Description

The IT Governance Analyst will assist in the development, maintenance, and ongoing improvement of the IT risk management, IT controls framework, training, and associated processes, including documentation. Assists the audit process within IT and the process for tracking open audit findings, test exceptions, and systemic issues. Supports internal and/or external audit as needed during audit engagements.

WhatYou’llDo

• Identify and assess organizational risks, with an emphasis on IT, security, and key business initiatives.

• Partner with business owners and project teams to build awareness of risks and controls and support the development, assessment, and monitoring of IT risk mitigation plans.

• Identify, evaluate, and escalat risks that fall outside the organization’s established risk tolerance.

• Provide risk consulting and guidance for projects and initiatives to ensure risks are appropriately identified and addressed.

• Evaluate control environments and partner with business areas to strengthen controls or develop action plans to mitigate identified risks.

• Maintain clear and accurate risk documentation in accordance with company policies, industry standards, and regulatory requirements.

• Develop guidance, processes, and training to strengthen awareness and understanding of IT and security risk management.

What You Bring

• Bachelor’s degree or advanced degree (where required)

• 3+ years of experience in related field

• In lieu of degree, 5+ years of experience in related field

**Bonus Points**

• Experience supporting critical incident or crisis management, including cybersecurity-related incidents.

• Knowledge of recovery testing, reporting, and control assessment.

• Experience partnering with technology and business teams on recovery preparedness and continuity planning.

WhatYou’llGet

• The opportunity to work at thecutting edgeof health care delivery with a teamthat’sdeeply invested in the community

• Work-life balance, flexibility, and the autonomy to dogreat work

• Medical, dental, and vision coverage along withnumeroushealth and wellness programs

• Parental leave and support plus adoption and surrogacyassistance

• Career development programs and tuition reimbursement for continued education

• 401k match including an annual company contribution

• Learn more

Where You’ll Work

Our Hybrid Flex approach is built on presence with a purpose – giving you flexibility to work remotely with intentional in-person connection – that supports a workplace that’s flexible, connected, and future focused.

In a Hybrid-Flex role, you’ll work in the office at least two days a week for collaboration and connection. In a Remote Flex role, you’ll work virtually, with a few in-office visits each year for meaningful moments that matter.

Whether your role is Hybrid Flex or Remote Flex depends on the nature of the work and distance from our Durham headquarters. We welcome candidates from outside the local area and in any states listed on this job posting. Onsite expectations will be discussed during the interview process.

Salary Range

At Blue Cross NC, we take great pride in a fair and equitable compensation package that reflects market-price and our starting salaries are typically planned near the middle of the range listed. Compensation decisions are driven by factors including experience and training, specialized skill sets, licensure and certifications and other business and organizational needs.Our base salary is part of a robust Total Rewards package that includes an Annual Incentive Bonus*, 401(k) with employer match, Paid Time Off (PTO), and competitive health benefits and wellness programs.

*Based on annual corporate goal achievement and individual performance.

$81,068.00 - $129,708.00

Skills

_____________________________________________________________________