IT GRC Analyst II — Risk, Controls & Reporting

SECU; Raleigh (NC); On-site; USD 95,000 - 135,000; Full time

Job summary

SECU seeks an IT GRC Analyst II to assess, test, document, and monitor the technology ecosystem, ensuring the IT control environment mitigates risks amid a changing threat landscape. The role requires bridging tech and business, with capability to perform risk assessments and report metrics to senior stakeholders.

Ideal candidates bring strong collaboration, policy/documentation skills, and experience in managing risk across internal, vendor, and cloud environments.

Qualifications

• 5 years IT Security and/or IT Risk Management experience in a mid-to-large size company.

Responsibilities

• Identify, document, and monitor technology risks across internal and external environments (vendor/cloud).
• Quantify inherent and residual IT risk levels to inform prioritizations and reporting.
• Establish remediation plans with milestones and target dates, and monitor progress toward remediation.

Skills

Teamwork

Communication

IT Security

IT Risk Mgmt

Job description

SECU seeks an IT GRC Analyst II to assess, test, document, and monitor the technology ecosystem, ensuring the IT control environment mitigates risks amid a changing threat landscape. The role requires bridging tech and business, with capability to perform risk assessments and report metrics to senior stakeholders.

Ideal candidates bring strong collaboration, policy/documentation skills, and experience in managing risk across internal, vendor, and cloud environments.