Principal IT Risk Management Analyst

Join Capella University as a Principal IT Risk Management Analyst, spearheading enterprise-level IT risk management strategy in the United States. This full-time leadership role focuses on identifying, assessing, and managing technology risks at the organizational level—setting itself apart from compliance or audit functions through emphasis on risk strategy and business impact.

The Opportunity

As a senior risk leader at Capella University, you'll shape how we identify, quantify, and respond to IT and technology risks. Working closely with executive leadership, you'll define our risk strategy, evaluate emerging threats to our technology infrastructure, and ensure technology decisions align with organizational risk appetite. This role requires both technical depth—understanding security controls and vulnerabilities—and business acumen to translate technical findings into strategic insights that guide executive decisions.

Responsibilities

• Drive the development and continuous improvement of our IT security risk management program, ensuring alignment with organizational goals and risk tolerance
• Identify, assess, and quantify technology risks using qualitative and quantitative methodologies, applying NIST CSF and CIS Controls v8
• Establish and maintain the enterprise IT risk register, overseeing risk scoring, ownership, lifecycle management, and ongoing updates
• Execute comprehensive risk assessments across our technology environment, examining cybersecurity threats, operational vulnerabilities, and emerging technology risks
• Oversee the risk exception management process, evaluating requests, documenting decisions, and approving risk acceptance within organizational tolerance levels
• Create and manage risk metrics, key risk indicators (KRIs), and executive dashboards that translate complex risk data into strategic insights for leadership and board audiences
• Deliver risk-informed recommendations on technology initiatives carrying significant risk, including artificial intelligence and machine learning initiatives
• Embed IT security risk management practices into business and technology operations across the organization
• Mentor junior analysts and lead specific risk workstreams, guiding team members in cross-functional settings
• Pursue and operationalize automation opportunities and efficiency improvements throughout risk management workflows and systems

What We're Looking For

• 5+ years of IT risk management experience, with proven expertise in risk assessment, risk quantification, and enterprise risk register management
• 3+ years of experience leading or mentoring analysts, with demonstrated success owning and delivering discrete risk programs or initiatives
• Comprehensive understanding of NIST CSF, CIS Controls v8, and other established risk management frameworks
• Solid track record building enterprise risk registers, administering risk exception processes, and managing residual risk documentation
• Technical capability to assess security controls, analyze threat and vulnerability data, and convert technical findings into business risk language
• Hands-on experience with GRC (governance, risk, and compliance) platforms and automation tools—such as Archer, ServiceNow GRC, OneTrust, Jira, or Rapid7 Nexpose
• Experience building risk metrics, executive dashboards, and leadership-level risk reports
• Background managing risks from emerging technologies, with particular expertise in AI/ML risk areas including model performance risk, data quality, algorithmic bias, and adversarial threats
• Strong communication skills in translating technical risk and residual risk concepts for non-technical audiences
• Bachelor's degree in a related field (Master's degree preferred)
• Preferred certifications: CRISC, CISSP, CISM, CompTIA Security+, CompTIA CySA+, CompTIA CASP+, or CGEIT

Why Join Capella University

Capella University is dedicated to expanding educational access and supporting economic mobility for learners worldwide. We recognize that robust risk management and technology governance are fundamental to our mission. In this role, you'll work alongside strategic executives on complex, enterprise-scale challenges, directly influence technology decisions at the leadership level, and build a high-performing IT risk management program. The position includes competitive compensation with an anticipated salary range of $119,300 to $178,900, along with a comprehensive benefits package for employees working 30+ hours per week. Benefits include medical, dental, and vision coverage; life and disability insurance; wellness programs and incentives; parental leave; paid time off; flexible spending and health savings accounts (FSA and HSA); 401(k) retirement plan; employee stock purchase opportunities; and educational assistance. We are an equal opportunity employer committed to building a diverse, inclusive workforce where every employee can excel and advance their career.

Next Steps

To apply, complete your application directly on this page, or you'll be redirected to the employer's application platform to finish submitting there.