IT Risk & Compliance Analyst | Cybersecurity (Hybrid)

IDR; Brentwood (TN); Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Medical, Vision, Dental

Employee Stock Ownership Program

Dedicated Engagement Manager

Job summary

IDR is seeking an IT Risk Analyst for a hybrid role in the greater Nashville, TN area to support technology compliance programs amid a dynamic retail environment.

The position focuses on cybersecurity regulatory requirements, coordinating assessments, and maintaining audit-ready documentation with cross-functional teams. It emphasizes remediation tracking and ongoing regulatory reviews for continuous improvement.

Qualifications

• 6+ years of IT Governance, Risk, and Compliance experience in technology, retail, or similar environments.
• Hands-on IT risk management using frameworks like NIST, CCPA, FAIR, ISO, or others.
• Experience with PCI, SOX, IT General Controls, change management, and data privacy regulations.
• Professional certifications such as CISSP, CISA, CRISC, CISM, or SANS GIAC are desirable.

Responsibilities

• Support and execute technology compliance programs, including CCPA/CPRA, PCI DSS, and emerging cybersecurity requirements.
• Coordinate compliance assessments, evaluate control effectiveness, and maintain audit evidence.
• Collaborate with cross-functional teams to interpret and translate regulatory requirements into practical controls.
• Manage and track remediation activities, ensuring timely resolution of compliance gaps.
• Maintain audit-ready documentation and assist with ongoing regulatory reviews.

Skills

Regulatory compliance

IT risk management

Regulatory frameworks

Data privacy

Job description

IDR is seeking an IT Risk Analyst for a hybrid role in the greater Nashville, TN area to support technology compliance programs amid a dynamic retail environment.

The position focuses on cybersecurity regulatory requirements, coordinating assessments, and maintaining audit-ready documentation with cross-functional teams. It emphasizes remediation tracking and ongoing regulatory reviews for continuous improvement.