ZipRecruiter

Log In

1

It Governance Risk Jobs in Chicago, IL (NOW HIRING)

1872 Consulting

Data Governance Analyst

Bartlett, IL · On-site

Requirements * 2+ years of experience in a Data Governance, Information Governance or other relevant IT Governance/Risk/Compliance (GRC) type of role * Associate degree, but preferably a Bachelor ...

1872 Consulting

Data Governance Analyst

Chicago, IL · On-site

Requirements * 2+ years of experience in a Data Governance, Information Governance or other relevant IT Governance/Risk/Compliance (GRC) type of role * Associate degree, but preferably a Bachelor ...

1872 Consulting

Data Governance Analyst

Bartlett, IL · On-site

Requirements * 2+ years of experience in a Data Governance, Information Governance or other relevant IT Governance/Risk/Compliance (GRC) type of role * Associate degree, but preferably a Bachelor ...

1872 Consulting

Data Governance Analyst

Chicago, IL · On-site

Requirements * 2+ years of experience in a Data Governance, Information Governance or other relevant IT Governance/Risk/Compliance (GRC) type of role * Associate degree, but preferably a Bachelor ...

Softchoice

Manager, Governance Risk Reporting

Chicago, IL · On-site

$110K - $138K/yr

We are a software-focused IT solutions and services provider that equips organizations to be agile ... As Manager, Governance, Risk & Reporting within Managed Services, you will be the organizational ...

247Hire

IT Risk and Compliance Analyst

Chicago, IL · On-site

$96K - $97K/yr

- add details here The Senior IT Risk and Compliance Analyst will aid in supporting the Information Technology department's adherence to the Bank's Governance, Risk & Compliance (GRC) framework ...

247Hire

IT Risk and Compliance Analyst

Chicago, IL · On-site

$96K - $97K/yr

- add details here The Senior IT Risk and Compliance Analyst will aid in supporting the Information Technology department's adherence to the Bank's Governance, Risk & Compliance (GRC) framework ...

247Hire

IT Risk and Compliance Analyst

Chicago, IL · On-site

$90 - $130/hr

- add details here The Senior IT Risk and Compliance Analyst will aid in supporting the Information Technology department's adherence to the Bank's Governance, Risk & Compliance (GRC) framework ...

Jobright.ai

Cybersecurity Risk Manager

Chicago, IL · On-site

$120 - $180/hr

Cloud Computing Enterprise Software Information Technology Collaboration Responsibilities Take ownership for, mature our Risk Management governance/process, and leverage the broader teams for ...

next page

Showing results 1-20

All JobsIt Governance Risk JobsIt Governance Risk Jobs in Chicago, IL

It Governance Risk information

What is IT governance risk?

IT Governance Risk refers to the potential threats and vulnerabilities that can affect an organization's information technology systems, processes, and data. It involves identifying, assessing, and managing risks related to IT operations, compliance, security, and strategic alignment with business objectives. Effective IT governance risk management helps organizations ensure regulatory compliance, protect sensitive information, and support business continuity. Professionals in this field develop policies, procedures, and controls to mitigate risks and enable informed decision-making.

How does an IT governance risk professional typically collaborate with other departments within an organization?

IT Governance Risk professionals frequently work cross-functionally, partnering with departments such as IT, legal, compliance, and business units to ensure that risk management practices align with organizational objectives and regulatory requirements. This collaboration often involves facilitating risk assessments, developing and implementing policies, and providing guidance on risk mitigation strategies. Clear communication and strong relationship-building skills are key, as the role requires translating technical risks into business impacts and gaining buy-in from stakeholders across the company.

What are the key skills and qualifications needed to thrive as an IT governance, risk, and compliance (GRC) professional, and why are they important?

To thrive as an IT GRC professional, you need a solid understanding of information security principles, risk management frameworks, and relevant regulatory standards, often supported by a degree in IT or cybersecurity and certifications like CISA or CISSP. Familiarity with GRC tools such as RSA Archer, ServiceNow GRC, and risk assessment methodologies is typically required. Strong analytical thinking, attention to detail, and effective communication skills help you interpret complex regulations and collaborate with stakeholders. These competencies ensure effective risk mitigation, regulatory compliance, and alignment between IT and business objectives.

What is the difference between It Governance Risk vs It Security Analyst?

AspectIt Governance RiskIt Security Analyst
CertificationsCISA, CRISCCISSP, Security+
Work EnvironmentPolicy development, risk assessment, complianceMonitoring security systems, incident response
Industry UsageGovernance, risk management, compliance teamsSecurity operations teams, IT departments

It Governance Risk focuses on establishing policies, managing IT risks, and ensuring compliance across the organization. In contrast, an It Security Analyst primarily monitors security systems, investigates incidents, and implements security measures. While both roles require understanding of IT frameworks and certifications like CISA or CISSP, their core responsibilities differ: governance versus security operations.

Is IT governance risk and compliance a good career?

IT Governance Risk and Compliance is a growing field that involves managing an organization’s IT policies, security, and regulatory requirements. It requires knowledge of frameworks like ISO 27001 or COBIT and often benefits from certifications such as CISA or CISSP. The role offers opportunities in various industries with a focus on risk management, security, and compliance strategies.

What are the roles of IT governance risk?

IT governance risk involves identifying, assessing, and managing risks related to information technology to ensure alignment with organizational goals and compliance requirements. IT governance risk professionals develop policies, implement controls, and monitor systems to mitigate threats such as data breaches, cyberattacks, and operational failures, often using frameworks like COBIT or ISO 27001. Strong risk management helps organizations maintain security, improve decision-making, and ensure regulatory compliance.

What are popular job titles related to It Governance Risk jobs in Chicago, IL?

For It Governance Risk jobs in Chicago, IL, the most frequently searched job titles are:

What job categories do people searching It Governance Risk jobs in Chicago, IL look for?

The top searched job categories for It Governance Risk jobs in Chicago, IL are:

It Governance Risk jobs near you
Infographic showing various It Governance Risk job openings in Chicago, IL as of August 2026, with employment types broken down into 1% As Needed, 87% Full Time, 10% Part Time, and 2% Contract. Highlights an 88% Physical, 4% Hybrid, and 8% Remote job distribution.

Senior Risk and Compliance Analyst

Constellation Brands

Chicago, IL • On-site

$96K - $148K/yr

Full-time

Medical, Dental, Vision, Retirement, PTO

Re-posted yesterday

Constellation Brands rating

7.9

Company rating: 7.9 out of 10

Based on 12 frontline employees who took The Breakroom Quiz

99th of 444 rated food and drinks producers

Job description

Job Description

Position Summary:

The Senior Risk and Compliance Analyst is a key member of the IT Governance, Risk, and Compliance (GRC) team, responsible for supporting and advancing the organization's IT risk, compliance, and third-party risk management(TPRM)programs. This role partners with stakeholders across IT, Information Security, Procurement, Legal, OT, and the business to assess technology and vendor-related risks, strengthen governance practices, and support risk-informed decision-making.

The Analyst will help lead and mature the IT Third-Party Risk Management (TPRM) program by supporting vendor risk assessments, due diligence, ongoing monitoring, remediation tracking, and continuous improvement efforts. This role also contributes to risk intake, reporting, metrics, and automation initiatives that improve visibility, consistency, and efficiency across the broader GRC program.

Responsibilities:

  • Act as anadvisor for IT GRC, providing guidance to IT and business stakeholders while advancing strategic GRC initiatives.

  • Lead and enhancethe IT third-party risk management program, encompassing vendor risk assessments, onboarding procedures, ongoing monitoring, and remediation of identified risks.

  • Collaborate with Information Security, IT,Procurement, Legaland business teams to evaluate third-party vendors, applications, and services enterprise-wide.

  • Review third-party security documentation, including SOC reports, ISO certifications, security questionnaires, policies, and other relevant evidence to assess control maturity and residual risk.

  • Partner with the Security Operations Center (SOC) to monitor emerging threats, industry developments, and incident response insights, leveraging findings to assess and refine the risk profiles of critical vendors and technology supply chain partners.

  • Supportthe end-to-end risk intake workflow,help tomaintain the IT risk registerprocess, and ensure timely escalationof technology risks.

  • Collaborate withthe IT Compliance Managers to supportrisk assessments for internal initiatives,third-party relationships, and critical business processes.

  • Contribute to the development ofsecurity metrics and dashboards, leveraging automated and manual processes to produce relevant KRIs/KPIs that measure and communicate risk exposure and program effectiveness.

  • Maintain current knowledge of industry best practices and monitor the legal and regulatory environment for developments that may require changes to policies and practices.

  • Drive automation efforts within the GRC and third-party risk programs by identifying manual or repetitive tasks and implementing technology solutions, or workflow tools to improve efficiency, consistency, and reporting.

  • Continuously seek opportunities to optimize and modernize GRC operations through technical innovation and automation.

Required Qualifications:

  • 4or moreyears of experience in Information Security, Risk Management, Audit, IT Governance, IT Compliance, orrelateddiscipline.

  • Proven ability to lead and mature an IT Third-Party Risk Management (TPRM) program, including governance, risk assessments, and continuous improvement initiatives.

  • Strong understanding of third-party risk management practices across the vendor lifecycle, including due diligence, onboarding, ongoing monitoring, remediation, and offboarding.

  • Broad, generalist understanding of information security risk and compliance-comfortable operating across risk, audit, policy, and third-party risk areas.

  • Working knowledge of industry frameworks and regulatory requirements, including NIST, ISO, CIS, PCI-DSS, SOX, GDPR, CCPA, and HIPAA.

  • High degree of ownership, self-direction, and demonstrated thought leadership.

  • Ability to analyze manual processes and implement technical solutions to enhance efficiency and accuracy.

PreferredQualifications:

  • Bachelor's degree in business administration, compliance, information systems, privacy, orrelatedfield; equivalent work or education-related experience considered.

  • One or more relevant certifications: CRISC, CISSP, CISA, CISM, CGEIT, GCCC, GSEC, GISP.

  • Proven ability to interact with key stakeholders and align priorities based on risk.

  • Familiarity with GRC platforms (e.g.,LogicGate, Optro, OneTrust,Workiva).

  • Strong written and verbal communication skills; able to present complex risk and compliance topics to both technical and non-technical audiences.

  • Proficient in Microsoft Excel, Word, and PowerPoint.

ADA Physical/Mental/Workplace Requirements:

  • Occasional lifting up to 25 lbs

  • Sitting, working at desk/personal computer for extended periods of time

  • Primary work environment is professional corporate office

  • Ability to travel commercially and internationally.

#LI-JV1

Location

Rochester, New York

Additional Locations

Chicago, Illinois, San Antonio, Texas

Job Type

Full time

Job Area

Information Technology

The salary range for this role is:

$96,700.00 - $148,100.00

This is the lowest to highest salary we in good faith believe we would pay for this role at the time of this posting. Our compensation is based on cost of labor. For remote locations or positions open to multiple locations, the pay range may reflect several US geographic markets, including the lowest geographic market minimum to the highest geographic market maximum. We may ultimately pay more or less than the posted range, and the range may be modified in the future. An employee's pay position within the salary range will be based on several factors including, but not limited to, the prevailing minimum wage for the location, relevant education, qualifications, certifications, experience, skills, seniority, geographic location, performance, shift, travel requirements, sales or revenue-based metrics, any collective bargaining agreements, and business or organizational needs. At Constellation Brands, it is not typical for an individual to be hired at the high end of the range for their role, and compensation decisions are dependent upon the facts and circumstances of each position and candidate. We offer comprehensive package of benefits including paid time off, medical/dental/vision insurance, 401(k), and any other benefits to eligible employees.

Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, or any other form of compensation that are allocable to a particular employee remains in the Company's sole discretion unless and until paid and may be modified at the Company's sole discretion, consistent with the law.

Equal Opportunity

Constellation Brands is committed to a continuing program of equal employment opportunity. All persons have equal employment opportunities with Constellation Brands, regardless of their sex, race, color, age, religion, creed, sexual orientation, national origin or citizenship, ancestry, physical or mental disability, medical condition (cancer or genetic characteristics), marital status, gender (including gender identity or gender expression), familial status, military or veteran status, genetic information, pregnancy, childbirth, breastfeeding, or related conditions (or any other group or category within the framework of the applicable discrimination laws and regulations).

What Constellation Brands employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply