IT Risk & Compliance Analyst

State Employees' Credit Union; Raleigh (NC); On-site; USD 90,000 - 120,000; Full time

Job summary

State Employees' Credit Union is seeking an IT GRC Analyst II to assess, test, document, and monitor the technology ecosystem, ensuring the IT control environment mitigates risks amid evolving threats. This role bridges technology groups and business units, requiring a broad perspective and ability to manage end-to-end risk processes.

The candidate will perform technology risk assessments, help document IT policies and standards, develop remediation plans, and aggregate risk metrics for senior

Qualifications

• 5+ years of IT Security and/or IT Risk Management experience.
• Ability to document policies, standards, and guidelines.
• Experience with risk aggregation, KPI/KRI reporting, and remediation tracking.
• Familiarity with frameworks (NIST, ISO 27001, SoGP) and third-party risk management.

Responsibilities

• Identify, document, and monitor technology risks across internal and external environments.
• Quantify inherent and residual IT risk levels to inform prioritizations and reporting.
• Collaborate with remediation owners to establish plans with milestones and dates and monitor progress.
• Support continuous improvement of risk management processes and program design.
• Perform risk and controls assessments and contribute to audit/regulatory reporting.
• Partner with stakeholders to establish clear IT risk reporting, metrics, and KPIs.

Skills

IT Security

IT Risk Management

Communication skills

Teamwork

Risk reporting

Job description

State Employees' Credit Union is seeking an IT GRC Analyst II to assess, test, document, and monitor the technology ecosystem, ensuring the IT control environment mitigates risks amid evolving threats. This role bridges technology groups and business units, requiring a broad perspective and ability to manage end-to-end risk processes.

The candidate will perform technology risk assessments, help document IT policies and standards, develop remediation plans, and aggregate risk metrics for senior