ZipRecruiter

Log In

1

Information Technology Risk Manager Jobs in California

Wsgr

Manager, IT Risk Operations

Palo Alto, CA · On-site

$147K - $198K/yr

Managing a small team, you willwork closely with senior leaders across IT, Security Engineering, General Counsel, and firm leadership to shape how risk is understood, measured, and managed. The role ...

Viasat, Inc.

Senior Analyst, IT Risk & GRC

Carlsbad, CA · On-site

Reporting to the Global IT SOX Risk Management Leader, you'll drive strategic SOX readiness projects and provide risk advisory expertise across many process areas to ensure compliance with SOX while ...

Viasat, Inc.

Senior Analyst, IT Risk & GRC

Carlsbad, CA · On-site +1

Reporting to the Global IT SOX Risk Management Leader, you'll drive strategic SOX readiness projects and provide risk advisory expertise across many process areas to ensure compliance with SOX while ...

KPMG

Manager, IT Internal Audit

San Francisco, CA · On-site

Work with client senior management to design, and implement new IT risk and control frameworks, sustainable solutions (including applying knowledge of governance, risk and security tools), operating ...

Intuit

Lead, IT SOX Risk Advisory

Mountain View, CA · On-site

SRCO is a management-led function purpose-built to deliver a modern, sustainable, and risk-focused ... We are seeking an IT SOX Lead Risk Advisor who thrives at the intersection of risk management ...

Intuit

Lead, IT SOX Risk Advisory

San Diego, CA · On-site

SRCO is a management-led function purpose-built to deliver a modern, sustainable, and risk-focused ... We are seeking an IT SOX Lead Risk Advisor who thrives at the intersection of risk management ...

Intuit

Lead, IT SOX Risk Advisory

Mountain View, CA · On-site

SRCO is a management-led function purpose-built to deliver a modern, sustainable, and risk-focused ... We are seeking an IT SOX Lead Risk Advisor who thrives at the intersection of risk management ...

next page

Showing results 1-20

All JobsInformation Technology Risk JobsInformation Technology Risk Manager JobsInformation Technology Risk Manager Jobs in California

Information Technology Risk Manager information

What is the difference between Information Technology Risk Manager vs Cybersecurity Analyst?

AspectInformation Technology Risk ManagerCybersecurity Analyst
CertificationsCISA, CISSP, CRISCCISSP, CEH, Security+
Work EnvironmentRisk assessment, policy development, complianceMonitoring security threats, incident response, vulnerability analysis
Industry UsageFinancial, healthcare, large enterprisesIT security firms, corporate IT departments

While both roles focus on protecting information assets, the Information Technology Risk Manager primarily assesses and manages overall IT risks and compliance, whereas the Cybersecurity Analyst concentrates on identifying and mitigating security threats and vulnerabilities. The Risk Manager develops policies and strategies, while the Analyst implements security measures and responds to incidents.

What cities in California are hiring for Information Technology Risk Manager jobs?

Cities in California with the most Information Technology Risk Manager job openings:

Manager, IT Risk Operations

Palo Alto, CA • On-site

Wilson Sonsini Goodrich & Rosati, Professional Corporation
Law Firms • 1 - 5K employees
Learn more about Wilson Sonsini Goodrich & Rosati, Professional Corporationexternal

$147K - $220K/yr

Other

Posted 9 days ago

Key responsibilities

  • Lead the firm's IT risk, security, and operational governance activities.

  • Develop executive-level reporting and dashboards on IT risk, compliance, and operational performance.

  • Partner with teams to investigate incidents, analyze data, and optimize workflows within ServiceNow.

Job description

Wilson Sonsini is the premier legal advisor to technology, life sciences, and growth enterprises worldwide. We represent companies at every stage of development, from entrepreneurial start-ups to multibillion‑dollar global corporations.

Job Summary

The Governance, Risk & Compliance Manager will lead the firm’s IT risk, security, and operational governance. The role is highly collaborative, working closely with senior IT, Security Engineering, General Counsel, and firm leadership. It can be 100% remote or hybrid near a physical office.

Key Responsibilities
  • Strengthen IT Governance & Controls: develop executive‑level reporting on IT risk, compliance posture, and operational performance.
  • Build and evolve KPI/KRI dashboards that provide real‑time visibility into risk trends and control effectiveness.
  • Translate complex IT and security data into meaningful insights for decision‑making.
  • Ensure adherence to IT policies, standards, and leading frameworks (e.g., NIST, ISO 27001).
  • Own and evolve the firm’s IT risk register and Risk & Control Self‑Assessment (RCSA) program.
  • Identify emerging and systemic risks across IT, security, privacy, and operational processes.
  • Incident Governance & Investigations: partner with General Counsel, Security, and IT to lead internal investigations.
  • Own ITSM Governance & ServiceNow Analytics: oversee governance and reporting across the IT Service Management ecosystem.
  • Analyze incident, change, and problem management data to identify trends and improvement opportunities.
  • Drive workflow optimization and automation within ServiceNow.
  • Vendor Risk Management: review and advise on vendor agreements; enhance vendor risk processes including risk tiering, assessments, and monitoring.
  • Introduce data‑driven approaches to risk management and operational oversight.
  • Perform related duties as assigned or directed by supervisor and maintain compliance with all firm policies and procedures.
Qualifications
  • Bachelor’s degree preferred.
  • Seven years of experience in IT risk, security compliance, technology audit, or IT governance preferred.
  • Experience operating in complex, regulated environments (e.g., law firms, financial services, consulting) preferred.
  • Proven ability to lead reporting, analytics, and governance initiatives.
  • Familiarity with ServiceNow and ITSM reporting, including understanding of incident, change, and problem management lifecycles.
  • Experience with security and collaboration platforms such as Microsoft 365, Purview, and email security tools.
  • Working knowledge of frameworks such as the NIST Cybersecurity Framework, ISO/IEC 27001, and SOC 2.
  • Strong understanding of control design, risk registers, RCSA programs, and audit response.
  • Basic understanding of privacy regulations.
  • Preferred certifications: CISA, CISSP, CRISC, CTPRM, and/or ITIL.
Compensation and Benefits

Compensation includes a base salary that varies by location, with discretionary year‑end merit bonus potential. Base pay ranges from $147,050 to $220,800 per year depending on geographic region. Benefits information is provided separately upon request.

Other Information

Primary location: Palo Alto, CA (other locations may be considered). The role may be performed remotely or in a hybrid model if the candidate resides near an office.

Equal Opportunity Employer (EOE).

#J-18808-Ljbffr

Apply