IT Risk Analyst

IDR, Inc.; Brentwood (TN); Hybrid; USD 95,000 - 130,000; Full time

Benefits offered by this job

Competitive compensation

Full benefits

Industry-leading organization

Job summary

IDR, Inc. is seeking an IT Risk Analyst to join one of our top clients in the greater Nashville area on a hybrid basis.

This role focuses on supporting the organization's technology compliance program, including privacy, security controls, and regulatory standards in a dynamic retail environment. Responsibilities include coordinating assessments, translating regulatory requirements into practical controls, tracking remediation, and maintaining audit-ready documentation.

Qualifications

• 6+ years of IT risk, governance, and compliance experience.
• Hands-on with frameworks like NIST, ISO, PCI DSS, SOX, or equivalent.
• Certified bodies such as CISSP, CISA, CRISC, or CISM are desirable.

Responsibilities

• Support and execute technology compliance programs, including PCI DSS and data privacy requirements.
• Coordinate assessments, evaluate control effectiveness, and maintain audit evidence.
• Translate regulatory requirements into practical, implementable controls.
• Manage remediation activities and track closure of gaps.

Skills

IT Governance

Risk Assessment

Regulatory Compliance

PCI/SOX Compliance

Job description

IDR is seeking an IT Risk Analyst to join one of our top clients for a hybridopportunity in the greater Nashville TN area.This role involves supporting the organization’s technology compliance program, focusing on cybersecurity regulations and industry standards within a dynamic retail environment.

Position Overview for the IT Risk Analyst :

• Support and execute technology compliance programs, including CCPA/CPRA, PCI DSS, and emerging cybersecurity requirements.
• Coordinate compliance assessments, evaluate control effectiveness, and maintain audit evidence.
• Collaborate with cross-functional teams to interpret and translate regulatory requirements into practical controls.
• Manage and track remediation activities, ensuring timely resolution of compliance gaps.
• Maintain audit-ready documentation and assist with ongoing regulatory reviews.

Requirements for the IT Risk Analyst :

• 6+ years of IT Governance, Risk, and Compliance experience in technology, retail, or similar environments.
• Hands-on experience managing IT risk management programs using frameworks like NIST, CCPA, FAIR, ISO, or others.
• Proven expertise with PCI, SOX, IT General Controls, change management, and data privacy regulations.
• Strong analytical and problem-solving skills with project management experience.
• Professional certifications such’ such as CISSP, CISA, CRISC, CISM, or SANS GIAC are desirable.

What's in it for you?

• Competitive compensation package
• Full Benefits; Medical, Vision, Dental, and more!
• Opportunity to get in with an industry leading organization.

Why IDR?

• 25+ Years of Proven Industry Experience in 4 major markets
• Employee Stock Ownership Program
• Dedicated Engagement Manager who is committed to you and your success.
• Medical, Dental, Vision, and Life Insurance
• ClearlyRated's Best of Staffing® Client and Talent Award winner 12 years in a row.