IT Governance Analyst

Blue Cross and Blue Shield of North Carolina; Durham (NC); Hybrid; USD 81,000 - 130,000; Full time

Benefits offered by this job

Medical, Dental, Vision coverage

Work-life balance

Parental leave and surrogacy support

Tuition reimbursement and career dev

Job summary

Blue Cross and Blue Shield of North Carolina is seeking an IT Governance Analyst to help develop, maintain, and improve IT risk management, controls, and related processes. The role supports audits and tracks open findings, test exceptions, and systemic issues within IT.

You will partner with business and IT teams to identify risks, improve control environments, and develop training to raise IT risk awareness and compliance across the organization.

Qualifications

• Bachelor's degree or advanced degree (where required).
• 3+ years of experience in related field.
• In lieu of degree, 5+ years of experience in related field.

Responsibilities

• Identify and assess organizational IT risks and security risks.
• Partner with owners and project teams to raise risk awareness and support mitigation plans.
• Identify and elevate risks beyond the organization’s risk tolerance.
• Provide risk consulting for projects to address risks.
• Evaluate control environments and collaborate on action plans to mitigate risks.
• Maintain risk documentation per policies, standards, and regulatory requirements.
• Develop guidance and training to strengthen IT risk management awareness.

Skills

3+ years experience

Education

Bachelor's degree or advanced degree

Job description

Job Description

The IT Governance Analyst will assist in the development, maintenance, and ongoing improvement of the IT risk management, IT controls framework, training, and associated processes, including documentation. Assists the audit process within IT and the process for tracking open audit findings, test exceptions, and systemic issues. Supports internal and/or external audit as needed during audit engagements.

WhatYou'llDo

• Identify and assess organizational risks, with an emphasis on IT, security, and key business initiatives.
• Partner with business owners and project teams to build awareness of risks and controls and support the development, assessment, and monitoring of IT risk mitigation plans.
• Identify, evaluate, and elevate risks that fall outside the organization's established risk tolerance.
• Provide risk consulting and guidance for projects and initiatives to ensure risks are appropriately identified and addressed.
• Evaluate control environments and partner with business areas to strengthen controls or develop action plans to mitigate identified risks.
• Maintain clear and accurate risk documentation in accordance with company policies, industry standards, and regulatory requirements.
• Develop guidance, processes, and training to strengthen awareness and understanding of IT and security risk management.

What You Bring

• Bachelor's degree or advanced degree (where required)
• 3+ years of experience in related field
• In lieu of degree, 5+ years of experience in related field

Bonus Points

• Experience supporting critical incident or crisis management, including cybersecurity-related incidents.
• Knowledge of recovery testing, reporting, and control assessment.
• Experience partnering with technology and business teams on recovery preparedness and continuity planning.

WhatYou'llGet

• The opportunity to work at thecutting edgeof health care delivery with a teamthat'sdeeply invested in the community
• Work-life balance, flexibility, and the autonomy to dogreat work
• Medical, dental, and vision coverage along withnumeroushealth and wellness programs
• Parental leave and support plus adoption and surrogacyassistance
• Career development programs and tuition reimbursement for continued education
• 401k match including an annual company contribution
• Learn more

Where You'll Work

Our Hybrid Flex approach is built on presence with a purpose - giving you flexibility to work remotely with intentional in-person connection - that supports a workplace that's flexible, connected, and future focused.

In a Hybrid-Flex role, you'll work in the office at least two days a week for collaboration and connection. In a Remote Flex role, you'll work virtually, with a few in-office visits each year for meaningful moments that matter.

Whether your role is Hybrid Flex or Remote Flex depends on the nature of the work and distance from our Durham headquarters. We welcome candidates from outside the local area and in any states listed on this job posting. Onsite expectations will be discussed during the interview process.

Salary Range

At Blue Cross NC, we take great pride in a fair and equitable compensation package that reflects market-price and our starting salaries are typically planned near the middle of the range listed. Compensation decisions are driven by factors including experience and training, specialized skill sets, licensure and certifications and other business and organizational needs.Our base salary is part of a robust Total Rewards package that includes an Annual Incentive Bonus*, 401(k) with employer match, Paid Time Off (PTO), and competitive health benefits and wellness programs.

*Based on annual corporate goal achievement and individual performance.

$81,068.00 - $129,708.00