IT Risk Analyst

Kforce Inc; Town of Florida (NY); On-site; USD 70,000 - 110,000; Full time

Job summary

Kforce is seeking an IT Risk Analyst for a client in Lake Mary, Florida. The role focuses on coordinating responses to IT audits, evaluating third-party risk, and supporting the IT risk program with strong collaboration across teams.

Responsibilities include monitoring KRIs, developing risk policies, supporting continuity planning, and promoting risk standards such as NIST, COBIT, and ISO 27001. Excellent communication and analytical skills are essential.

Qualifications

• Bachelor's degree from an accredited college or university.
• 2 to 5 years of experience in IT risk management, information security, or compliance.
• Excellent written and verbal communication skills.
• Working knowledge of system architecture, business processes and system risks, the audit process, and database platforms.
• Familiarity with risk management frameworks (NIST, ISO27001, COBIT, FAIR) and IT general controls.
• Strong analytical and problem-solving skills with accountability for outcomes.

Responsibilities

• Creation and delivery of responses to internal and external IT audits and state examinations.
• Evaluate third-party vendors and partners for IT risk and security posture via Vendor Risk Assessments.
• Monitor KRIs and support IT audits, compliance reviews, and regulatory reporting.
• Develop and maintain IT risk management policies, standards, plans, and procedures.
• Collaborate with cybersecurity teams to assess controls and incident response plans.
• Support business continuity, disaster recovery planning, and incident management activities.
• Promote IT risk management standards and frameworks (ISO270xxx, COBIT, NIST).
• Identify and evaluate risk/impacts for identified processes and technologies.
• Educate and coach internal teams on audit principles and execution.

Skills

Written & verbal communication

IT risk management

NIST/ISO27001/COBIT awareness

Analytical thinking

Risk-based decision making

Cross-functional collaboration

Education

Bachelor's degree in IT risk management, information security, or compliance

Tools

NIST

COBIT

ISO 27001

FAIR

Job description

Responsibilities

Kforce has a client that is seeking an IT Risk Analyst in Lake Mary, FL. Key Tasks:

• Responsible for creation and delivery of responses to internal and external IT audits and state examinations
• Evaluate third-party vendors and partners for IT risk and security posture by conduction Vendor Risk Assessments
• Monitor key risk indicators (KRIs) and support IT audits, compliance reviews, and regulatory reporting
• Support the development and maintenance of IT risk management policies, standards, plans, and procedures
• Collaborate with cybersecurity teams to assess security controls and incident response plans
• Support business continuity, disaster recovery planning, and incident management activities
• Drive the adoption of established IT risk management standards and frameworks, such as ISO27xxx, COBIT, NIST
• Assist in the identification and evaluation of risk/impacts associated with identified processes and technologies
• Educate and coach internal teams on audit principles and execution as needed

Responsibilities

Kforce has a client that is seeking an IT Risk Analyst in Lake Mary, FL. Key Tasks:

• Responsible for creation and delivery of responses to internal and external IT audits and state examinations
• Support IT Risk Assessment process
• Evaluate third-party vendors and partners for IT risk and security posture by conduction Vendor Risk Assessments
• Monitor key risk indicators (KRIs) and support IT audits, compliance reviews, and regulatory reporting
• Support the development and maintenance of IT risk management policies, standards, plans, and procedures
• Collaborate with cybersecurity teams to assess security controls and incident response plansSupport business continuity, disaster recovery planning, and incident management activities
• Drive the adoption of established IT risk management standards and frameworks, such as ISO27xxx, COBIT, NIST
• Assist in the identification and evaluation of risk/impacts associated with identified processes and technologies
• Educate and coach internal teams on audit principles and execution as needed

Requirements

• Bachelor's degree from an accredited college or university
• 2 to 5 years of experience in IT risk management, information security, or compliance
• Excellent written and verbal communication skills
• Working knowledge of system architecture, business processes and system risks, the audit process, and database platforms, with a basic understanding of networking concepts and security configurations for network components
• Working knowledge of risk management frameworks (e.g., NIST, ISO 27001, COBIT, FAIR), IT general controls, audit sampling and testing methodologies, and statutory reporting
• Strong analytical, problem-solving, and communication skills
• Demonstrates a strong willingness to take ownership of assigned responsibilities, proactively drive risk management activities to completion, and accept accountability for outcomes
• Exercises sound judgment, takes initiative to identify and address risks, and is empowered to make recommendations and influence risk-based decisions across the organization

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.