Remote IT Governance & Third-Party Risk Analyst

Apex Systems; Durham, Northern (NC, KY); Hybrid; USD 90,000 - 120,000; Full time

Benefits offered by this job

Health insurance

401K with company match

HSA (Health Savings Account)

Employee Assistance Program (EAP)

Certification prep and study resources

Corporate discounts

Job summary

Everforth Apex is hiring an IT Governance Analyst in Durham, NC (Remote). The role focuses on identifying, assessing, and mitigating risks associated with third-party vendors and outsourced providers, with emphasis on cybersecurity and data privacy.

You will develop risk metrics, dashboards, and training materials, while collaborating with business owners to strengthen risk controls across technology initiatives.

Qualifications

• Bachelor's degree or advanced degree required; 5+ years in related field if no degree.
• 3+ years of experience in a related field required.
• Experience in third-party risk and owning the security compliance process end-to-end; strong communication skills necessary.

Responsibilities

• Identify and assess risks from third-party entities.
• Support owners and project teams to raise risk awareness and control understanding.
• Develop, assess, and monitor mitigation plans for IT-related risks.
• Consult on projects to ensure third-party risks are addressed.
• Assess vendor control environments via audit reports, certifications, and security assessments.
• Create metrics, dashboards, and reporting for management and executives.
• Deliver training and awareness to promote a strong third-party risk culture.

Skills

Third-party risk

Security controls

Communication

Education

Bachelor's degree or higher

Tools

Adobe products

Prevalent

Job description

Everforth Apex is hiring an IT Governance Analyst in Durham, NC (Remote). The role focuses on identifying, assessing, and mitigating risks associated with third-party vendors and outsourced providers, with emphasis on cybersecurity and data privacy.

You will develop risk metrics, dashboards, and training materials, while collaborating with business owners to strengthen risk controls across technology initiatives.