IT Governance, Risk & Compliance Analyst (Remote)

RMI; New York (NY); Hybrid; USD 77,000 - 95,000; Full time

Benefits offered by this job

Medical insurance

401(k)/403(b) with match

Dental & Vision coverage

Paid time off & parental leave

Hybrid/Remote options

Learning & development budget

Job summary

RMI is transforming the energy system and seeks an IT Governance, Risk, and Compliance Analyst to support governance, risk, privacy, and compliance programs. You will work with Legal, IT, Procurement, and People teams to align technology systems and vendors with regulatory obligations.

The role focuses on policy maintenance, risk assessments, and vendor reviews in GDPR/UK GDPR and other programs. Remote USA eligibility with salary range posted.

Qualifications

• Bachelor's degree or equivalent experience in governance, compliance, risk, privacy, information security, or business operations.
• 3–5 years of progressive experience in governance, compliance, risk management, privacy, procurement, internal audit, information security, or related fields.
• Experience supporting compliance audits, vendor risk assessments, or regulatory programs, including reviewing contracts and vendor documentation.

Responsibilities

• Maintain governance policies, standards, and procedures for technology, privacy, and information management; support audits with evidence and documentation.
• Review contracts and business initiatives for security, privacy, and compliance obligations with Legal and Procurement.
• Coordinate compliance initiatives (Colorado Privacy Act, GDPR/UK GDPR) and track remediation to closure.
• Conduct risk assessments for new technologies and vendors; maintain IT risk register and drive mitigations to closure.
• Perform security, privacy, and compliance reviews of third-party vendors and sub-processors, including DPAs and security questionnaires.
• Assist with data governance: data inventories, ROPAs, classification, retention, and lifecycle documentation.
• Advise stakeholders on data collection, use, sharing, retention, and protection.

Skills

Governance

Compliance

Risk Management

Privacy

Audit

Cross-Functional Collaboration

Analytical

Communication

Education

Bachelor's degree in related field

Job description

RMI is transforming the energy system and seeks an IT Governance, Risk, and Compliance Analyst to support governance, risk, privacy, and compliance programs. You will work with Legal, IT, Procurement, and People teams to align technology systems and vendors with regulatory obligations.

The role focuses on policy maintenance, risk assessments, and vendor reviews in GDPR/UK GDPR and other programs. Remote USA eligibility with salary range posted.