IT Risk & Governance Analyst (Hybrid/Remote)

NC Health Affiliates; North Carolina; Hybrid; USD 81,000 - 130,000; Full time

Benefits offered by this job

Health insurance

401(k) with employer match

Paid Time Off (PTO)

Tuition reimbursement

Parental leave and support

Job summary

Blue Cross NC is seeking an IT Governance Analyst to support the development and improvement of the IT risk management framework, controls, training, and documentation. You will participate in IT audit activities and track findings, test exceptions, and systemic issues.

You will identify IT and security risks, collaborate with owners and project teams to strengthen controls, provide risk guidance for initiatives, and maintain clear risk documentation in line with policies and regulatory

Qualifications

• Bachelor’s degree or advanced degree in a related field.
• 3+ years of experience in IT risk, governance, or related field.
• In lieu of degree, 5+ years of experience in related field.

Responsibilities

• Identify and assess organizational IT risks, with emphasis on security and key initiatives.
• Partner with owners and project teams to raise risk awareness and support development, assessment, and monitoring of risk mitigation plans.
• Identify, evaluate, and upscale risks beyond risk tolerance and provide risk consulting for projects to ensure proper risk handling.
• Evaluate control environments and work with business areas to strengthen controls or develop action plans to mitigate risks.
• Maintain clear risk documentation in line with company policies and regulatory requirements.

Skills

3+ years experience in IT risk/related

5+ years experience in IT risk/related

Education

Bachelor’s degree

Advanced degree

Job description

Blue Cross NC is seeking an IT Governance Analyst to support the development and improvement of the IT risk management framework, controls, training, and documentation. You will participate in IT audit activities and track findings, test exceptions, and systemic issues.

You will identify IT and security risks, collaborate with owners and project teams to strengthen controls, provide risk guidance for initiatives, and maintain clear risk documentation in line with policies and regulatory