Strategic IT Risk Leader

Northwest; Pittsburgh, Northern (Allegheny County, KY); Hybrid; USD 110,000 - 150,000; Full time

Job summary

Northwest is seeking an Information Technology Enterprise Risk Manager to support the enterprise risk framework across technology, information security and data risks. This role will identify, assess, monitor and report key technology risks, embedding risk awareness into strategic and operational decision-making.

The position requires leading RCSA activities, testing controls, and collaborating with IT and Data teams to mature risk assessments while ensuring GLBA, HIPAA and PCI DSS compliance.

Qualifications

• Experience leading IT risk and control assessments.
• Familiarity with GLBA, HIPAA, PCI DSS and related regulations.
• Strong analytical and reporting abilities.
• Experience with RCSA processes.
• Knowledge of IT governance and risk frameworks.

Responsibilities

• Oversee RCSA activities for technology-related processes.
• Validate IT/IS/Data controls and test effectiveness.
• Partner with IT, IS and Data teams to mature risk assessments.
• Support GLBA, HIPAA and PCI DSS assessments.
• Provide credible challenge and remediation tracking.

Skills

IT risk management

RCSA

Information security

Data risk

Regulatory compliance

Threat & vulnerability

Education

Bachelor's Degree

Tools

NIST CSF

GLBA

PCI DSS

HIPAA

ITIL

Job description

Northwest is seeking an Information Technology Enterprise Risk Manager to support the enterprise risk framework across technology, information security and data risks. This role will identify, assess, monitor and report key technology risks, embedding risk awareness into strategic and operational decision-making.

The position requires leading RCSA activities, testing controls, and collaborating with IT and Data teams to mature risk assessments while ensuring GLBA, HIPAA and PCI DSS compliance.