1

It Governance Risk Jobs (NOW HIRING)

IT Governance Manager

Atlanta, GA ยท On-site

$94K - $112K/yr

Title: IT Governance Manager Location: Atlanta, GA Key Responsibilities Governance & Compliance ... Support documentation of funding justifications, risk assessments, and policy compliance as part of ...

The position is primarily focused on IT risk management but also plays a key part in assisting the Director of Business Continuity with all aspects of the IT Governance, Risk and Compliance (GRC ...

Facilitate cross-functional collaboration (IT, Engineering, Legal, HR) to address security risks. * Advise IT and IS leadership on risk impacts and governance priorities. * Assist with the design and ...

The IT Governance, Risk, and Compliance (GRC) Lead Analyst serves as a subject matter expert responsible for leading the design, implementation, maturity, and continuous improvement of the ...

Showing results 21-40

IT Governance Risk information

What are the key skills and qualifications needed to thrive as an IT governance, risk, and compliance (GRC) professional, and why are they important?

To thrive as an IT GRC professional, you need a solid understanding of information security principles, risk management frameworks, and relevant regulatory standards, often supported by a degree in IT or cybersecurity and certifications like CISA or CISSP. Familiarity with GRC tools such as RSA Archer, ServiceNow GRC, and risk assessment methodologies is typically required. Strong analytical thinking, attention to detail, and effective communication skills help you interpret complex regulations and collaborate with stakeholders. These competencies ensure effective risk mitigation, regulatory compliance, and alignment between IT and business objectives.

What is IT governance risk?

IT Governance Risk refers to the potential threats and vulnerabilities that can affect an organization's information technology systems, processes, and data. It involves identifying, assessing, and managing risks related to IT operations, compliance, security, and strategic alignment with business objectives. Effective IT governance risk management helps organizations ensure regulatory compliance, protect sensitive information, and support business continuity. Professionals in this field develop policies, procedures, and controls to mitigate risks and enable informed decision-making.

What is the difference between It Governance Risk vs It Security Analyst?

AspectIt Governance RiskIt Security Analyst
CertificationsCISA, CRISCCISSP, Security+
Work EnvironmentPolicy development, risk assessment, complianceMonitoring security systems, incident response
Industry UsageGovernance, risk management, compliance teamsSecurity operations teams, IT departments

It Governance Risk focuses on establishing policies, managing IT risks, and ensuring compliance across the organization. In contrast, an It Security Analyst primarily monitors security systems, investigates incidents, and implements security measures. While both roles require understanding of IT frameworks and certifications like CISA or CISSP, their core responsibilities differ: governance versus security operations.

Is IT governance risk and compliance a good career?

IT Governance Risk and Compliance is a growing field that involves managing organizational IT policies, regulatory requirements, and risk mitigation strategies. Professionals in this area often require knowledge of frameworks like ISO 27001 or COBIT and may pursue certifications such as CISA or CISSP. It offers opportunities in various industries with a focus on security, compliance, and risk management roles.

What are the 5 types of IT governance?

The five types of IT governance are strategic, structural, operational, compliance, and risk governance. These categories help organizations align IT strategies with business goals, ensure effective management, and mitigate risks. IT governance frameworks like COBIT and ISO/IEC 38500 provide guidance for implementing these types effectively.

How does an IT governance risk professional typically collaborate with other departments within an organization?

IT Governance Risk professionals frequently work cross-functionally, partnering with departments such as IT, legal, compliance, and business units to ensure that risk management practices align with organizational objectives and regulatory requirements. This collaboration often involves facilitating risk assessments, developing and implementing policies, and providing guidance on risk mitigation strategies. Clear communication and strong relationship-building skills are key, as the role requires translating technical risks into business impacts and gaining buy-in from stakeholders across the company.

What are the roles of IT governance risk?

IT governance risk involves identifying, assessing, and managing risks related to information technology to ensure alignment with organizational goals and compliance requirements. IT governance risk professionals develop policies, implement controls, and monitor systems to mitigate threats such as data breaches, cyberattacks, and operational failures. They often work with frameworks like COBIT or ISO 27001 and may hold certifications such as CISA or CRISC.
More about IT Governance Risk jobs
What cities are hiring for It Governance Risk jobs? Cities with the most It Governance Risk job openings:
Infographic showing various It Governance Risk job openings in the United States as of August 2026, with employment types broken down into 1% As Needed, 88% Full Time, 8% Part Time, and 3% Contract. Highlights an 88% Physical, 4% Hybrid, and 8% Remote job distribution.

IT Governance Manager

Apex Informatics

Atlanta, GA โ€ข On-site

$94K - $112K/yr

Other

Re-posted 15 days ago


Job description

Title: IT Governance Manager
Location: Atlanta, GA
Job Description:
Key Responsibilities
Governance & Compliance Facilitation
  • Assist with the development, review, and maintenance of IT policy and procedure documentation, ensuring compliance with regulatory requirements and enterprise standards.
  • Support IT governance activities and provide committee support by preparing meeting materials, documenting meeting minutes, and tracking action items.
  • Collect, analyze, and report on IT quality metrics to inform decision-making and support continuous improvement efforts.
  • Prepare clear, concise, and accurate written communications, summaries, and reports related to IT governance, quality metrics, and policy activities.
  • Facilitate communication and training related to IT policy requirements, reporting resources, and compliance protocols.
  • Assist with the escalation and documentation of suspected policy violations in accordance with established GDOT IT procedures.
  • Ensure all project requests comply with internal IT governance frameworks, enterprise architecture standards, and applicable technology policies.
  • Prepare projects for formal review by internal governance boards or steering committees as required by project scale or impact.
  • Support documentation of funding justifications, risk assessments, and policy compliance as part of the intake package.

Continuous Improvement
  • Identify opportunities to improve the project intake and evaluation process.
  • Assist in developing guidelines, templates, and training materials to support business users in submitting high-quality project requests.
  • Draft new policies, procedures, guidance, and/or regulations for management approval within assigned time frames.

Project Intake & Review
  • Review project submissions to assess completeness, technical feasibility, and alignment with IT strategy. Analyzes information to determine nature and extent of customer requirements and concerns.
  • Collaborate with enterprise architects and technical leads to validate technology choices and integration implications.
  • Demonstrates leadership skills through effective interpersonal skills, verbal/non-verbal communication and active participation in departmental or organizational committees/workgroups.

Stakeholder Communication & Facilitation
  • Facilitate meetings with stakeholders to refine project scopes, clarify requirements, and outline expected IT involvement.
  • Serve as a liaison between business units and IT to align expectations and communicate process timelines and outcomes.
  • Serve as the primary IT contact for reviewing project requests and technology proposals submitted by agency stakeholders.
  • Assess technical feasibility, strategic alignment, and clarity of scope for incoming IT project requests.
  • Engage IT architects, engineers, cybersecurity teams, and operations to validate solution integrity and compatibility with enterprise systems.
  • Develops, maintains, and fosters effective working relationships across multiple departments.
  • Acts as liaison between multiple parties to identify solutions to problems.
  • Communicate updates to department leadership regarding project timelines, changes, and/or additional requirements when needed.

Required Qualifications
  • Demonstrated proficiency in research, information analysis to make recommendations
  • Ability to determine functional needs and system requirements
  • Ability to devise solutions based on analysis and critical thinking
  • relevant analytical abilities
  • Demonstrated ability to work effectively with functional and technical teams
  • Ability to coordinate between multiple workgroups
  • Knowledge of agency laws, regulations, policies and procedures
  • Demonstrated ability to analyze documents accurately to determine compliance based on applicable statutes and regulations
  • Excellent organizational, time management, and attention to detail skills
  • Ability to prioritize, organize, and manage tasks to meet internal and external deadlines using independent judgment
  • Ability to secure and protect sensitive documents and/or records
  • Ability to work effectively with minimal supervision
  • Associate's degree in Operations Management, Information Technology, Business Administration, Communications, or related field
  • 3-5+ years of experience in Governance, Risk and Compliance (GRC)
  • Solid understanding of IT governance, software development lifecycles (SDLC), and regulatory compliance (e.g., data privacy, cybersecurity standards)
  • Demonstrated strong leadership skills
  • Exceptional communication, both orally and in writing
  • Demonstrated experience identifying and solving problems and applying innovative solutions
  • Minimum of 3 years work experience in the above capacity