Remote IT Governance, Risk & Compliance Analyst

Rocky Mountain Institute; United States; Hybrid; USD 77,000 - 95,000; Full time

Benefits offered by this job

Medical, dental, vision

403b retirement match

Hybrid/Remote options

Generous paid time off

Job summary

Rocky Mountain Institute is seeking a governance, risk, privacy, and compliance professional to align technology systems and contracts with regulatory obligations. You will partner with Legal, Information Security, IT, People Team, and Procurement to mature governance and privacy programs.

The role involves policy maintenance, risk assessments, vendor reviews, and data governance, with remote-ready flexibility across the continental United States and a competitive compensation package.

Qualifications

• Bachelor’s degree or equivalent experience in governance, compliance, risk management, privacy, information security, or business operations.
• 3–5 years of progressively responsible experience in governance, compliance, risk management, privacy, procurement, internal audit, information security, or related functions.
• Experience supporting compliance audits, vendor risk assessments, or regulatory programs, including reviewing contracts and vendor documentation.
• Strong analytical, organizational, communication, and cross-functional collaboration skills.

Responsibilities

• Governance, Policy & Audit Support: Maintain governance policies, standards, and procedures for technology, privacy, and information management; support audits with evidence and documentation.
• Risk & Vendor Management: Conduct risk assessments for new technologies, vendors, and changes; maintain IT risk register and drive mitigation.
• Data Governance & Privacy: Evaluate new technologies for privacy and governance considerations; maintain data inventories and classifications.
• Monitoring & Continuous Improvement: Manage monthly cybersecurity awareness training; perform audits of user access and IT assets; track corrective actions to closure.

Skills

Governance

Risk management

Privacy

Regulatory compliance

Education

Bachelor’s degree or equivalent

Job description

Rocky Mountain Institute is seeking a governance, risk, privacy, and compliance professional to align technology systems and contracts with regulatory obligations. You will partner with Legal, Information Security, IT, People Team, and Procurement to mature governance and privacy programs.

The role involves policy maintenance, risk assessments, vendor reviews, and data governance, with remote-ready flexibility across the continental United States and a competitive compensation package.