IT Governance Analyst

NC Health Affiliates; North Carolina; Híbrido; USD 81.000 - 130.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health insurance

401(k) with employer match

Paid Time Off (PTO)

Tuition reimbursement

Parental leave and support

Descripción de la vacante

Blue Cross NC is seeking an IT Governance Analyst to support the development and improvement of the IT risk management framework, controls, training, and documentation. You will participate in IT audit activities and track findings, test exceptions, and systemic issues.

You will identify IT and security risks, collaborate with owners and project teams to strengthen controls, provide risk guidance for initiatives, and maintain clear risk documentation in line with policies and regulatory

Formación

• Bachelor’s degree or advanced degree in a related field.
• 3+ years of experience in IT risk, governance, or related field.
• In lieu of degree, 5+ years of experience in related field.

Responsabilidades

• Identify and assess organizational IT risks, with emphasis on security and key initiatives.
• Partner with owners and project teams to raise risk awareness and support development, assessment, and monitoring of risk mitigation plans.
• Identify, evaluate, and upscale risks beyond risk tolerance and provide risk consulting for projects to ensure proper risk handling.
• Evaluate control environments and work with business areas to strengthen controls or develop action plans to mitigate risks.
• Maintain clear risk documentation in line with company policies and regulatory requirements.

Conocimientos

3+ years experience in IT risk/related

5+ years experience in IT risk/related

Educación

Bachelor’s degree

Advanced degree

Descripción del empleo

Job Description

The IT Governance Analyst will assist in the development, maintenance, and ongoing improvement of the IT risk management, IT controls framework, training, and associated processes, including documentation. Assists the audit process within IT and the process for tracking open audit findings, test exceptions, and systemic issues. Supports internal and/or external audit as needed during audit engagements.

What You’ll Do

• Identify and assess organizational risks, with an emphasis on IT, security, and key business initiatives.
• Partner with business owners and project teams to build awareness of risks and controls and support the development, assessment, and monitoring of IT risk mitigation plans.
• Identify, evaluate, and upscale risks that fall outside the organization’s established risk tolerance.
• Provide risk consulting and guidance for projects and initiatives to ensure risks are appropriately identified and addressed.
• Evaluate control environments and partner with business areas to strengthen controls or develop action plans to mitigate identified risks.
• Maintain clear and accurate risk documentation in accordance with company policies, industry standards, and regulatory requirements.
• Develop guidance, processes, and training to strengthen awareness and understanding of IT and security risk management.

What You Bring

• Bachelor’s degree or advanced degree (where required)
• 3+ years of experience in related field
• In lieu of degree, 5+ years of experience in related field

Bonus Points

• Experience supporting critical incident or crisis management, including cybersecurity-related incidents.
• Knowledge of recovery testing, reporting, and control assessment.
• Experience partnering with technology and business teams on recovery preparedness and continuity planning.

What You Get

• The opportunity to work at the cutting edge of health care delivery with a team that’s deeply invested in the community
• Work-life balance, flexibility, and the autonomy to do great work
• Medical, dental, and vision coverage along with numerous health and wellness programs
• Parental leave and support plus adoption and surrogacy assistance
• Career development programs and tuition reimbursement for continued education
• 401k match including an annual company contribution

Where You’ll Work

Our Hybrid Flex approach is built on presence with a purpose - giving you flexibility to work remotely with intentional in-person connection - that supports a workplace that’s flexible, connected, and future focused. In a Hybrid-Flex role, you’ll work in the office at least two days a week for collaboration and connection. In a Remote Flex role, you’ll work virtually, with a few in-office visits each year for meaningful moments that matter. Whether your role is Hybrid Flex or Remote Flex depends on the nature of the work and distance from our Durham headquarters. We welcome candidates from outside the local area and in any states listed on this job posting. Onsite expectations will be discussed during the interview process.

Salary Range

At Blue Cross NC, we take great pride in a fair and equitable compensation package that reflects market-price and our starting salaries are typically planned near the middle of the range listed. Compensation decisions are driven by factors including experience and training, specialized skill sets, licensure and certifications and other business and organizational needs. Our base salary is part of a robust Total Rewards package that includes an Annual Incentive Bonus*, 401(k) with employer match, Paid Time Off (PTO), and competitive health benefits and wellness programs.

*Based on annual corporate goal achievement and individual performance.

$81,068.00 - $129,708.00