IT Governance, Risk & Compliance Analyst

AAON; Redmond (OR); On-site; USD 100,000 - 150,000; Full time

Benefits offered by this job

Tuition reimbursement

Paid time off

Paid holidays

Health insurance + HSA

Profit sharing

401(k) plan

Job summary

AAON is seeking an IT Governance Analyst to contribute to governance, risk management, and compliance within Information Services. You will develop policies, procedures, and controls to meet regulatory requirements and industry standards.

You will lead risk monitoring, conduct IT audits (SOX/ITGC), coordinate remediation, and work with IT teams and vendors to ensure data protection and cybersecurity measures across AAON's technical landscape.

Qualifications

• Bachelor's degree required or equivalent in business, risk, or information security.
• Strong analytical, problem‑solving, and decision‑making abilities.
• Excellent written and verbal communication throughout all levels of the organization.

Responsibilities

• Develop risk, compliance, and assurance monitoring and measurement strategies.
• Oversee IT program and project audits and communicate status and risk to stakeholders.
• Determine operational and business risk impacts of cybersecurity lapses.
• Assess procurement and supply chain risks and address cybersecurity requirements.
• Conduct comprehensive IT audits focused on SOX, ITGC, and related frameworks.
• Develop independent cybersecurity audit processes for apps, networks, and systems.
• Coordinate remediation of gaps identified in the Due Diligence process.
• Collaborate with IT teams and vendors to track risk findings from discovery to remediation.
• Maintain a secure enterprise environment across the AAON technical landscape.
• Communicate effectively with all levels of the organization.

Skills

Analytical skills

Communication skills

Writing skills

Education

Bachelor’s degree in Business Administration, Risk Management, Information Security, or related field

Job description

AAON is seeking an IT Governance Analyst to contribute to governance, risk management, and compliance within Information Services. You will develop policies, procedures, and controls to meet regulatory requirements and industry standards.

You will lead risk monitoring, conduct IT audits (SOX/ITGC), coordinate remediation, and work with IT teams and vendors to ensure data protection and cybersecurity measures across AAON's technical landscape.