IT Risk & Compliance Analyst
Share
Job Location:
Bethesda, MD - USA
Monthly Salary:
Not Disclosed
Posted on:
17 hours ago
Vacancies:
1 Vacancy
Job Summary
Project Overview
Client is seeking an IT Risk & Compliance Analyst to support governance risk and compliance initiatives within its technology environment. This role focuses on analyzing risk and compliance data supporting regulatory frameworks and improving visibility into the organizations control environment.
The analyst will work closely with technology security audit and compliance teams to identify risk trends support audit readiness and maintain structured data for regulatory reporting. The position also involves building dashboards and reports that provide leadership with clear insights into risk posture and control performance.
Key Responsibilities
Risk Identification & Assessment
- Analyze application infrastructure and security datasets to identify risk trends control gaps and emerging threats.
- Support risk classification processes and monitor Key Risk Indicators (KRIs) to surface insights for leadership.
Data Collection & Documentation Management
- Collect cleanse and maintain datasets required for compliance activities related to SOX ISO NIST PCI internal policies and other regulatory requirements.
- Maintain structured repositories for application attributes control documentation and workflow tracking.
Compliance Monitoring & Control Support
- Perform data-driven reviews of compliance obligations and help automate monitoring activities where possible.
- Support the evaluation of control design and operational effectiveness through analysis of logs configuration data and process documentation.
Audit Readiness & Remediation Support
- Prepare datasets dashboards and reports to support internal and external audit risk and compliance activities.
- Track remediation actions identify patterns in recurring issues and highlight risk concentrations to stakeholders.
Reporting & Analytics
- Develop and maintain dashboards that provide visibility into compliance posture risk metrics and control performance.
- Translate technical and compliance data into clear insights for both technical and business stakeholders.
Process & Documentation
- Assist with maintaining playbooks enterprise processes compliance workflows and documentation through data validation and tracking.
Collaboration & Communication
- Work with application teams infrastructure teams security teams and audit groups to ensure accurate and timely data for compliance activities.
- Communicate findings and updates that support risk mitigation planning and improve stakeholder awareness.
Required Qualifications
- Bachelors degree in Business Information Technology Cybersecurity Data Analytics Risk Management or a related field.
- 5 years of experience in Information Technology.
- Experience supporting governance risk audit or compliance functions within IT environments.
- Strong analytical ability with experience using data visualization and reporting tools such as Power BI or Tableau.
- Ability to interpret regulatory and control frameworks including SOX NIST CSF ISO PCI and internal policies.
- Experience working cross-functionally with technology audit and security teams.
Technical & Soft Skills
Technical Skills
- Risk and compliance data analysis
- Governance Risk and Compliance (GRC) frameworks
- Data visualization and reporting tools (Power BI Tableau)
- Regulatory and control frameworks: SOX NIST CSF ISO PCI
- Compliance monitoring and control validation
- Dataset management and analytics for risk reporting
Preferred Technical Skills
- Experience with platforms such as ServiceNow or Jira
- Familiarity with cloud risk management
- Exposure to DevSecOps practices
Soft Skills
- Strong analytical and problem-solving ability
- Clear communication and reporting skills
- Ability to collaborate across technical audit and security teams
- Strong documentation and organizational skills
Key Skills
- ISO 27001
- Microsoft Access
- Risk Management
- Financial Services
- PCI
- Risk Analysis
- Analysis Skills
- COBIT
- NIST Standards
- SOX
- Information Security
- Data Analysis Skills
