Remote IT GRC Analyst: Privacy, Risk & Compliance

Rocky Mountain Institute in; Denver (CO); Hybrid; USD 77,000 - 95,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

401k retirement match

Hybrid/remote work options

Generous paid time off

Job summary

Rocky Mountain Institute (RMI) seeks an IT Governance, Risk, and Compliance Analyst (Finance) to support governance, privacy, and regulatory programs across technology, vendors, contracts, and processes.

You will collaborate with Legal, Information Security, IT, People Team, and Procurement to mature governance, privacy, and audit activities while aligning with Colorado and other regulatory requirements.

Qualifications

• Bachelor's degree or equivalent in governance, compliance, risk management, privacy, information security, or business operations.
• 3–5 years of experience in governance, compliance, risk management, privacy, procurement, internal audit, or information security.
• Experience supporting compliance audits, vendor risk assessments, or regulatory programs.
• Certifications such as CIPP/US, CIPP/E, CIPM, CIPT, CRISC, or CISA are a plus.

Responsibilities

• Governance, policy & audit support: maintain policies and assist audits with evidence and documentation.
• Risk & vendor management: conduct risk assessments, manage IT risk register, and mitigation plans.
• Data governance & privacy: evaluate AI/privacy implications, maintain data inventories and ROPAs.
• Monitoring & continuous improvement: oversee monthly cybersecurity awareness training and conduct audits.

Skills

Analytical thinking

Cross-functional collaboration

Communication skills

Risk assessment

Education

Bachelor's degree in governance, compliance, risk management, privacy, information security, or business operations

Job description

Rocky Mountain Institute (RMI) seeks an IT Governance, Risk, and Compliance Analyst (Finance) to support governance, privacy, and regulatory programs across technology, vendors, contracts, and processes.

You will collaborate with Legal, Information Security, IT, People Team, and Procurement to mature governance, privacy, and audit activities while aligning with Colorado and other regulatory requirements.