IT Risk Analyst

IDR; Brentwood (TN); Ibrido; USD 90.000 - 130.000; Tempo pieno

Vantaggi offerti da questo lavoro

Medical, Vision, Dental

Employee Stock Ownership Program

Dedicated Engagement Manager

Descrizione del lavoro

IDR is seeking an IT Risk Analyst for a hybrid role in the greater Nashville, TN area to support technology compliance programs amid a dynamic retail environment.

The position focuses on cybersecurity regulatory requirements, coordinating assessments, and maintaining audit-ready documentation with cross-functional teams. It emphasizes remediation tracking and ongoing regulatory reviews for continuous improvement.

Competenze

• 6+ years of IT Governance, Risk, and Compliance experience in technology, retail, or similar environments.
• Hands-on IT risk management using frameworks like NIST, CCPA, FAIR, ISO, or others.
• Experience with PCI, SOX, IT General Controls, change management, and data privacy regulations.
• Professional certifications such as CISSP, CISA, CRISC, CISM, or SANS GIAC are desirable.

Mansioni

• Support and execute technology compliance programs, including CCPA/CPRA, PCI DSS, and emerging cybersecurity requirements.
• Coordinate compliance assessments, evaluate control effectiveness, and maintain audit evidence.
• Collaborate with cross-functional teams to interpret and translate regulatory requirements into practical controls.
• Manage and track remediation activities, ensuring timely resolution of compliance gaps.
• Maintain audit-ready documentation and assist with ongoing regulatory reviews.

Conoscenze

Regulatory compliance

IT risk management

Regulatory frameworks

Data privacy

Descrizione del lavoro

IDR is seeking an IT Risk Analyst to join one of our top clients for a hybrid opportunity in the greater Nashville TN area. This role involves supporting the organizations technology compliance program, focusing on cybersecurity regulations and industry standards within a dynamic retail environment.

Position Overview For The IT Risk Analyst

• Support and execute technology compliance programs, including CCPA/CPRA, PCI DSS, and emerging cybersecurity requirements.
• Coordinate compliance assessments, evaluate control effectiveness, and maintain audit evidence.
• Collaborate with cross-functional teams to interpret and translate regulatory requirements into practical controls.
• Manage and track remediation activities, ensuring timely resolution of compliance gaps.
• Maintain audit-ready documentation and assist with ongoing regulatory reviews.

Requirements For The IT Risk Analyst

• 6+ years of IT Governance, Risk, and Compliance experience in technology, retail, or similar environments.
• Hands-on experience managing IT risk management programs using frameworks like NIST, CCPA, FAIR, ISO, or others.
• Proven expertise with PCI, SOX, IT General Controls, change management, and data privacy regulations.
• Strong analytical and problem-solving skills with project management experience.
• Professional certifications such as CISSP, CISA, CRISC, CISM, or SANS GIAC are desirable.

What's in it for you?

• Competitive compensation package
• Full Benefits; Medical, Vision, Dental, and more!
• Opportunity to get in with an industry leading organization.

Why IDR?

• 25+ Years of Proven Industry Experience in 4 major markets
• Employee Stock Ownership Program
• Dedicated Engagement Manager who is committed to you and your success.
• Medical, Dental, Vision, and Life Insurance
• ClearlyRated's Best of Staffing Client and Talent Award winner 12 years in a row.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. IDR is subject to certain governmental recordkeeping and reporting requirements for the administration of civil rights laws and regulations. In order to comply with these laws, we invite employees to voluntarily self-identify their race or ethnicity, gender, and veteran status (if applicable). Submission of this information is voluntary and refusal to provide it will not subject you to any adverse treatment. The information obtained will be kept confidential and may only be used in accordance with the provisions of applicable laws, executive orders, and regulations, including those that require the information to be summarized and reported to the federal government for civil rights enforcement. You may access this form here.