Lead Analyst, Information Security (Risk and Governance)

RXO; Charlotte (NC); Hybrid; USD 120,000 - 170,000; Full time

Benefits offered by this job

Medical, dental, and vision plans

401(k) with company match

Job summary

RXO is seeking a Lead Analyst, Information Security – Risk Governance to strengthen our risk management framework. You will own the end-to-end risk lifecycle and collaborate with business and technology teams to identify, assess, and mitigate risks.

The role involves AuditBoard administration, governance reporting, and translating complex risks for senior leadership. Based at RXO headquarters in Charlotte with a 4-day onsite schedule and remote Fridays, you will mentor junior team members and

Qualifications

• Bachelor's degree in Cybersecurity, Information Systems, Risk Management, Business, Finance, or related field.

Responsibilities

• Own and manage the end-to-end information security risk lifecycle including identification, assessment, mitigation planning, monitoring and closure.
• Partner with business leaders and technology teams to identify and evaluate risks and ensure risk treatment plans are in place.
• Serve as administrator for AuditBoard, managing risk intake, issue tracking, and governance workflows.
• Maintain documentation of risks, controls, and remediation activities to support audits and regulatory inquiries.
• Develop dashboards and governance reporting to communicate risk posture to senior leadership.
• Translate technical risks into business-focused discussions and recommendations.

Job description

Accelerate your career at RXORXO is a leading provider of transportation solutions. With cutting-edge technology at the center, we're revolutionizing the industry with our massive network and commitment to finding solutions for every challenge. We create more efficient ways for shippers and carriers to transport goods across North America.As a Lead Analyst, Information Security – Risk Governance you will be responsible for helping strengthen our security and risk management framework. In this role, you'll lead the administration and execution of our information security risk governance program, partnering with business and technology teams to identify, assess, monitor, and mitigate risks that could impact the organization. You'll play a key role in driving risk-informed decision making, enhancing governance processes, and ensuring security risks are managed in alignment with business objectives and regulatory expectations.Work Location & Schedule: This position is based at RXO headquarters located at 11215 N Community House Road, Charlotte, NC 28277 and follows a 4 day onsite work schedule Monday through Thursday, and work from home on Fridays!What your day-to-day will look like:Own and manage the end-to-end information security risk lifecycle, including risk identification, assessment, analysis, mitigation planning, acceptance, monitoring, and closure.Partner with business leaders, technology teams, security engineering, and operational stakeholders to identify and evaluate risks and ensure appropriate risk treatment plans are in place.Serve as the primary administrator and subject matter expert for AuditBoard, managing risk intake, issue tracking, risk reporting, and governance workflows.Maintain accurate and thorough documentation of risks, controls, mitigation activities, and exception processes to support audits, regulatory inquiries, and leadershipTrack remediation efforts and validate the effectiveness of corrective actions and risk treatment plans.Conduct and support periodic risk assessments and controlDevelop dashboards, metrics, executive summaries, and governance reporting to communicate risk posture and trends to senior leadership.Translate complex technical risks into clear business impacts and recommendations for non-technical stakeholders.Drive continuous improvement initiatives related to risk governance processes, reporting, and technology platforms.Ensure alignment with internal policies, industry frameworks, and best practices, including NIST, ISO, COSO, and related standards.Mentor and provide guidance to junior team members while contributing to the overall maturity of the Governance, Risk, and Compliance (GRC) program.What you'll need to excel:At a minimum, you'll need:Bachelor's degree in Cybersecurity, Information Systems, Risk Management, Business, Finance, or a related field, or equivalent combination of education and experience.6+ years of experience in information security, risk management, governance, compliance, audit, or a related discipline.Experience managing and facilitating enterprise risk management processes and risk lifecycle activities.Strong analytical and problem-solving skills with the ability to assess and communicate risk effectively.Experience partnering with cross-functional stakeholders and influencing decisions in a matrixed environment.Ability to translate technical concepts into business-focused risk discussions and recommendations.Strong written, verbal, and presentation skills.Experience with Microsoft O365 applications.It'd be great if you also have:Experience supporting or leading information security risk programs within a large, complex enterprise environment.Hands-on experience with AuditBoard or a comparable GRC platform.Knowledge of information security frameworks and standards, such as NIST, ISO 27001, COSO, or similar.Experience developing executive-level risk reporting, dashboards, and governance metrics.Familiarity with transportation, logistics, supply chain, or other highly regulated industries.Relevant certifications such as CRISC, CISA, CISSP, CGRC, or similar.Does this sound like you? Check out what else RXO has to offer.Why Join Us:Our BenefitsComprehensive medical, dental, and vision plans401(k) retirement plan with up to 5% company matchPre-tax accounts to help streamline eligible expensesCompany-paid disability and life insuranceEmployee Assistance Program (EAP)Career and Leadership Development ProgramsPaid time off, company holidays, and volunteer daysOur CultureOur values are the key to our unique culture and our ability to deliver for everyone we serve.We do great things when we are inclusive and work together. To perform with excellence, we learn from one another, value diverse perspectives, operate safely and build strong relationships.The Next StepReady to join our team? We'd love to hear from you. Fill out an application now and join our talent community to learn about future opportunities. We are proud to be an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. All applicants who receive a conditional offer of employment may be required to take and pass a pre-employment drug test. The above statements are not an exhaustive list of all required responsibilities, duties, and skills for this job classification.