Technology Risk & Compliance Analyst

About This Opportunity

We are representing a confidential insurance organization seeking a Technology Risk & Compliance Analyst to join their retail technology portfolio. This role embeds risk and compliance capabilities directly into technology delivery, enabling teams to move quickly while maintaining quality and regulatory alignment.

You will partner with portfolio leaders, delivery teams, security stakeholders, and business units to proactively identify, prioritize, and manage technology risks. Your work will ensure compliance standards are met and drive remediation across applications, infrastructure, and data environments.

Responsibilities

Technology Risk Management

• Identify, assess, and document technology risks across projects, products, and platforms
• Facilitate risk prioritization based on business impact, regulatory exposure, and defined risk appetite
• Conduct risk assessments for new initiatives, including M&A integrations and platform implementations
• Partner with project managers and product teams to integrate risk mitigation into delivery plans
• Monitor risk exposure and track remediation activities through completion

Compliance Oversight & Governance

• Ensure alignment with internal policies and external regulatory requirements (SOX, SOC controls, data privacy standards)
• Support implementation and maintenance of IT governance, risk, and compliance (GRC) frameworks
• Evaluate technology policies, standards, and procedures for regulatory and business alignment
• Recommend policy updates based on regulatory changes, audit findings, and evolving risk landscape
• Maintain compliance documentation, control narratives, and evidence repositories
• Monitor and report adherence to policies and standards across the portfolio

Audit & Control Effectiveness

• Support internal and external audit activities, including evidence collection, walkthroughs, and remediation tracking
• Partner with audit teams to support successful outcomes, including SOX compliance and evidence validation
• Assess effectiveness of IT controls and identify gaps across applications, infrastructure, and processes
• Partner with control owners to strengthen control design and execution
• Drive timely closure of audit findings and control deficiencies

Vendor & Third-Party Risk

• Partner with vendor management and enterprise risk teams to identify and address technology-related vendor risks
• Incorporate vendor-related risks into portfolio-level visibility and reporting
• Support tracking and remediation of vendor-related control gaps

Reporting & Decision Support

• Prepare decision-ready reporting for governance forums, steering committees, and leadership
• Provide insights that enable leadership to evaluate risk exposure alongside investment and delivery progress
• Highlight trade-offs, emerging risks, and areas requiring leadership attention
• Track key risk indicators, control effectiveness, and remediation progress

Continuous Improvement

• Identify opportunities to streamline and improve GRC processes, tooling, and operating model effectiveness
• Contribute to the evolution of governance, risk, and control frameworks

What We're Looking For

• Bachelor's degree in Information Technology, Cybersecurity, Business, or related field
• 3–7 years of experience in IT risk, compliance, audit, or cybersecurity
• Strong working knowledge of GRC frameworks (NIST, ISO 27001, COBIT)
• Knowledge of regulatory standards such as SOX, SOC, GDPR, or similar
• Experience with risk assessment, control design, and audit support
• Ability to translate technical risk into business impact and executive-level messaging
• Strong collaboration and stakeholder management skills across technology and business teams
• High attention to detail with disciplined documentation practices
• Ability to travel up to 30%

How We Work With You

Our talent team at Get A Job.ai will guide you through the entire process. When you apply through our platform, a recruiter will screen your background and experience. If there's a strong match, we'll submit your profile to our client for consideration. Please do not contact the client directly—all communication and coordination will flow through Get A Job.ai to ensure the best experience for you.

Pay

Pay details will be discussed during the screening process with our recruiting team.

Equal Opportunity
Get A Job.ai is committed to inclusive hiring practices and welcomes candidates from all backgrounds. We evaluate all applicants based on qualifications and fit for the role.