Remote IT Governance, Risk & Privacy Analyst

Rocky Mountain Institute; Colorado; Hybrid; USD 77,000 - 95,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401k retirement match

Life insurance

Disability insurance

PTO and sabbatical leaves

Work from home allowances

Job summary

Rocky Mountain Institute is hiring to strengthen governance, privacy, and compliance across technology, contracts, and business processes. The role partners with Legal, IT, People Team, and Procurement to embed controls and manage regulatory obligations in Colorado privacy programs.

The successful candidate will drive risk assessments, vendor reviews, data governance, and ongoing monitoring, while supporting audits and continuous improvement initiatives in a remote-friendly work environment

Qualifications

• Bachelor's degree or equivalent in governance, compliance, risk, privacy, information security, or business operations.
• 3–5 years in governance, compliance, risk management, privacy, procurement, internal audit, or information security.
• Experience supporting compliance audits, vendor risk assessments, or regulatory programs.

Responsibilities

• Maintain governance policies, standards, and procedures for technology, privacy, and information management; support audits with evidence and documentation.
• Review contracts for security, privacy, and compliance obligations with Legal and Procurement; track remediation activities to closure.
• Conduct risk assessments for new technologies and vendors; manage IT risk register and mitigation plans.
• Evaluate data governance and privacy considerations for new AI tech and provide guidance to stakeholders.

Skills

Governance

Regulatory Compliance

Privacy

Data Protection

Risk Management

Vendor Management

Audit & Compliance

Policy Documentation

Cross-functional Collaboration

Education

Bachelor's degree in related field

Job description

Rocky Mountain Institute is hiring to strengthen governance, privacy, and compliance across technology, contracts, and business processes. The role partners with Legal, IT, People Team, and Procurement to embed controls and manage regulatory obligations in Colorado privacy programs.

The successful candidate will drive risk assessments, vendor reviews, data governance, and ongoing monitoring, while supporting audits and continuous improvement initiatives in a remote-friendly work environment