IT Risk & Remediation Analyst

Job#: 3053464

Job Description:

Risk Analyst

Location: Remote but must be an hour from Columbus, Dallas, Charlotte, Atlanta, Akron, Chicago, Minneapolis, Detroit

This position will support the Information Technology and Cyber Security organizations in matters related to audit, compliance, and the remediation of risk. The role requires working directly with technical risk, technology, and security teams to drive tasks to completion on agreed schedules. This position is responsible for driving the delivery of remediation initiatives and working with cross-functional teams to ensure successful resolution of risk issues.

• Lead and manage risk remediation projects from initiation through completion.
• Collaborate with business units, IT, Risk, and Internal Audit teams to drive risk evaluation and remediation processes.
• Build partnerships with key technology partners and IT areas.
• Evaluate and understand findings to help ensure proper planning of priorities and resources.
• Analyze risk findings, prioritize remediation efforts, and track progress against established metrics.
• Facilitate communication across teams to meet project requirements and deliverables.
• Work with subject matter experts to create and maintain remediation strategies, tasks, and documentation.
• Ensure alignment of remediation activities with organizational policies and regulatory requirements.
• Identify process improvements to enhance risk management and remediation effectiveness.
• Support audits, assessments, and regulatory reviews by providing evidence of remediation activities.
• Maintain knowledge of relevant regulations, frameworks, and emerging risks.
• Prepare and deliver status reports and presentations to management.

Education: Bachelor’s degree in Risk Management, Business Administration, Information Security, or a related field.

Experience: 3+ years in risk management, remediation, or related fields, preferably within a large organization or consulting environment.

• Ability to analyze complex risk issues, synthesize data, and develop actionable remediation strategies.
• Proven track record of managing multiple projects and meeting deadlines.
• Verbal and written communication skills with the ability to present complex information to technical and non-technical audiences.
• Demonstrated ability to work effectively in cross-functional teams and build working relationships.
• Familiarity with risk assessment tools, GRC platforms, and IT security concepts.
• Understanding of key regulations and industry standards (e.g., SOX, GDPR, FFIEC, ISO 27001, NIST CSF, NIST RMF).

• Experience using Azure Dev Ops or similar agile toolsets.
• Experience with technical writing.
• Experience with risk remediation in financial services, healthcare, or highly regulated industries.
• Knowledge of control testing and associated tests.
• Knowledge in Information Technology, Cybersecurity, Infrastructure, Cloud, Architecture, and Application Delivery.
• Professional certifications in risk management or cybersecurity (e.g., CISSP, CISM, CISA, CySA+, Security+, CRISC).

Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including Clearly Rateds Best of Staffing® in Talent Satisfaction in the United States and Great Place to Work® in the United Kingdom and Mexico.

Everforth Apex Benefits Overview:
Everforth Apex offers a range of supplemental benefits, including…