IT Governance Analyst

AAON; Redmond (OR); On-site; USD 100,000 - 150,000; Full time

Benefits offered by this job

Tuition reimbursement

Paid time off

Paid holidays

Health insurance + HSA

Profit sharing

401(k) plan

Job summary

AAON is seeking an IT Governance Analyst to contribute to governance, risk management, and compliance within Information Services. You will develop policies, procedures, and controls to meet regulatory requirements and industry standards.

You will lead risk monitoring, conduct IT audits (SOX/ITGC), coordinate remediation, and work with IT teams and vendors to ensure data protection and cybersecurity measures across AAON's technical landscape.

Qualifications

• Bachelor's degree required or equivalent in business, risk, or information security.
• Strong analytical, problem‑solving, and decision‑making abilities.
• Excellent written and verbal communication throughout all levels of the organization.

Responsibilities

• Develop risk, compliance, and assurance monitoring and measurement strategies.
• Oversee IT program and project audits and communicate status and risk to stakeholders.
• Determine operational and business risk impacts of cybersecurity lapses.
• Assess procurement and supply chain risks and address cybersecurity requirements.
• Conduct comprehensive IT audits focused on SOX, ITGC, and related frameworks.
• Develop independent cybersecurity audit processes for apps, networks, and systems.
• Coordinate remediation of gaps identified in the Due Diligence process.
• Collaborate with IT teams and vendors to track risk findings from discovery to remediation.
• Maintain a secure enterprise environment across the AAON technical landscape.
• Communicate effectively with all levels of the organization.

Skills

Analytical skills

Communication skills

Writing skills

Education

Bachelor’s degree in Business Administration, Risk Management, Information Security, or related field

Job description

Job Description

The IT Governance Analyst will be responsible for contributing to the governance, risk management, and compliance functions within the Information Services organization. This role involves developing and implementing policies, procedures, and controls to ensure compliance with regulatory requirements and industry standards.

Essential Job Duties And Responsibilities Include

• Develop risk, compliance, and assurance monitoring and measurement strategies
• Oversee and conduct technology program and project audits and communicate status and risk to business stakeholders
• Determine the operational and business risk impacts of cybersecurity lapses
• Determine if procurement activities sufficiently address supply chain risks and recommend improvements to address cybersecurity requirements
• Conduct comprehensive IT audits focused on Sarbanes-Oxley (SOX), IT General Controls (ITGC), and other frameworks
• Develop and implement independent cybersecurity audit processes for application software, networks, and systems
• Coordinate and track remediation of all gaps identified as part of the Due Diligence (DD) process
• Work with internal IT Teams and third-party vendors to track key findings from risk assessments, from discovery to remediation
• Assist in maintaining a secure enterprise environment across the AAON technical landscape; leverage specific or broad in-depth technical skillsets to achieve this outcome
• Communicate clearly, diplomatically and effectively at all levels of the organization and to audiences with varying degrees of process and technical knowledge
• Execute tasks in a high-pressure environment and multi-task | Experience working in a team-oriented, matrixed, collaborative environment while using analytical and problem-solving skills.
• Ensure alignment with organizational goals and regulatory requirements.
• Facilitate the development and implementation of corporate governance strategies.
• Identify, assess, and prioritize risks across the organization.
• Develop risk mitigation strategies and action plans.
• Monitor and report on risk management activities and outcomes.
• Ensure compliance with relevant laws, regulations, and industry standards.
• Conduct regular compliance audits and assessments.
• Develop and deliver compliance training programs for employees.
• Collaborate with IT and security teams to ensure data protection and cybersecurity measures are in place.
• Monitor and respond to security incidents and breaches.
• Maintain and update information security policies and procedures.
• Other duties as assigned.

Qualifications: Preferred but not required qualifications include

• Bachelor’s degree in Business Administration, Risk Management, Information Security, or a related field.
• Minimum of 5 years of experience in business process analysis
• Strong knowledge of regulatory requirements and industry standards (e.g., ISO 27001, GDPR, SOX).
• Excellent analytical, problem-solving, and decision-making skills.
• Strong communication and interpersonal skills.
• Professional certifications such as CISSP, CISM, CRISC, or similar are preferred.
• Demonstrate strong writing skills.

Disclaimer

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at a time with or without notice. This job description is not an exhaustive list of all functions that the employee may be required to perform, and the employee may be required to perform additional functions. The company reserves the right to revise this job description at any time. The employee must be able to perform the essential functions of the position satisfactorily. If requested, reasonable accommodations may be made to enable employees with disabilities to perform the essential functions of the job, absent undue hardship.

Benefits And Compensation Summary

• Tuition reimbursement
• Paid time-off
• Paid holidays
• Healthcare insurance & Health Savings Accounts
• Profit sharing or Annual Incentive Plan Bonus
• Premium 401(k) plan