IT Risk & Governance Analyst (Hybrid/Remote)

Blue Cross and Blue Shield of North Carolina; Durham (CA); Hybrid; USD 81,000 - 130,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Parental leave and adoption support

Tuition reimbursement

401k match

Job summary

Blue Cross and Blue Shield of North Carolina in Durham is seeking an IT Governance Analyst to help develop and refine our IT risk management and controls framework. You’ll document processes, support audits, and track findings and test exceptions to ensure controls remain effective.

The role emphasizes collaboration with business owners and project teams to raise risk awareness, strengthen controls, and deliver training.

Qualifications

• Bachelor’s degree or advanced degree in a related field.
• 3+ years of experience in IT risk, security, or related field.
• In lieu of degree, 5+ years of related experience.

Responsibilities

• Identify and assess organizational risks, with emphasis on IT, security, and key business initiatives.
• Partner with owners and project teams to build awareness of risks and controls and support development, assessment, and monitoring of IT risk mitigation plans.
• Identify, evaluate, and escalate risks that fall outside the organization’s established risk tolerance.
• Provide risk consulting and guidance for projects and initiatives to ensure risks are identified and addressed.
• Evaluate control environments and partner with business areas to strengthen controls or develop action plans to mitigate identified risks.
• Maintain clear and accurate risk documentation in accordance with company policies, industry standards, and regulatory requirements.
• Develop guidance, processes, and training to strengthen awareness and understanding of IT and security risk management.

Skills

IT risk management

IT security

Risk assessment

Controls framework

Audit support

Education

Bachelor’s degree

Advanced degree

Job description

Blue Cross and Blue Shield of North Carolina in Durham is seeking an IT Governance Analyst to help develop and refine our IT risk management and controls framework. You’ll document processes, support audits, and track findings and test exceptions to ensure controls remain effective.

The role emphasizes collaboration with business owners and project teams to raise risk awareness, strengthen controls, and deliver training.