IT Risk Analyst

TechDigital Group; Santa Clara (CA); On-site; USD 110,000 - 170,000; Full time

Job summary

TechDigital Group in the United States seeks an experienced IT risk professional to lead IT risk management, information security compliance, and internal IT audits in large enterprise environments.

You will communicate complex control findings clearly to senior leadership and collaborate with technical teams, balancing independent work with team involvement in a complex environment, leveraging strong analytical and problem-solving skills.

Qualifications

• Undergraduate degree in information technology, management information systems, or a related field.
• 5+ years of experience in IT risk management, information security compliance, or internal IT audit in large enterprise environments.
• Ability to communicate complex control findings clearly to both technical teams and non-technical stakeholders, including senior leadership.
• Comfortable working both independently or in teams in a complex environment.
• Excellent analytical, technical and problem-solving skills, with strong attention to detail.
• Strong understanding of IT General Computer Controls (ITGCs), system development lifecycle, and IT auditing techniques; including broad knowledge of IT technologies, operating systems, databases, and application platforms.

Skills

Agile Scrum

Risk and Compliance

Release Management

Risk Audit

Risk assignments

Education

Undergraduate degree in IT or MIS

Job description

Mandatory Skills

• Agile - Scrum
• Risk and Compliance
• Release Management
• Risk Audit
• Risk assignments to identify information security

Job Description

• Undergraduate degree in information technology, management information systems, or a related field
• 5+ years of experience in IT risk management, information security compliance, or internal IT audit in large enterprise environments.
• Able to communicate complex control findings clearly to both technical teams and non-technical stakeholders, including senior leadership.
• Comfortable working both independently or in teams and working within a complex environment.
• Excellent analytical, technical and problem-solving skills, with strong attention to detail.
• Strong understanding of IT General Computer Controls (ITGCs), system development lifecycle, and IT auditing techniques; including broad knowledge of IT technologies, operating systems, databases, and application platforms.

Nice to Have

• Knowledge of SOX, NIST SP 800-53, NIST AI Risk Management Framework (AI RMF), ISO 42001, or EU AI Act is a plus.
• Professional accreditation (e.g., CISA, CISM) is a plus.
• Familiarity with ServiceNow Integrated Risk Management (IRM) platform is a plus.