ZipRecruiter

Log In

1

It Risk Analyst Jobs in Raleigh, NC (NOW HIRING)

NC SECU

IT GRC Analyst II

Raleigh, NC · On-site

The IT GRC Analyst II assess, tests, documents, and monitors the SECU technology ecosystem to ... Risk and controls assessments * Documenting and maintaining IT Policies / Standards * IT Risk ...

GFL Environmental

Risk Analyst

Raleigh, NC · On-site

We are looking for an energetic, sharp, and forward-thinking Risk Analyst to join our Risk ... information, or any other protected characteristic. If you are interested in applying for ...

Abrigo

IT Third-Party Risk Manager

Raleigh, NC · Remote

This position reports to the VP IT Risk & Assurance and is part of Abrigo's CISO organization. This is a remote first role primarily based in Raleigh, NC with quarterly onsite team engagements and ...

SAS

Manager, GRC-A (Information Security Risk)

Cary, NC · On-site

As a working manager, the position is actively involved in risk analysis and problem-solving while ... Partner with business, technology, and service provider stakeholders to identify, assess, monitor ...

SAS

Manager, GRC-A (Information Security Risk)

Cary, NC · Hybrid

As a working manager, the position is actively involved in risk analysis and problem-solving while ... Partner with business, technology, and service provider stakeholders to identify, assess, monitor ...

Sageworks

IT Third-Party Risk Manager

Raleigh, NC · Remote

This position reports to the VP IT Risk & Assurance and is part of Abrigo's CISO organization. This is a remote first role primarily based in Raleigh, NC with quarterly onsite team engagements and ...

Abrigo

IT Third-Party Risk Manager

Raleigh, NC · On-site

This position reports to the VP IT Risk & Assurance and is part of Abrigo's CISO organization. This is a remote first role primarily based in Raleigh, NC with quarterly onsite team engagements and ...

Abrigo

IT Third-Party Risk Manager

Raleigh, NC · Remote

This position reports to the VP IT Risk & Assurance and is part of Abrigo's CISO organization. This is a remote first role primarily based in Raleigh, NC with quarterly onsite team engagements and ...

Truist

LoD2: Technology Risk Specialist

Raleigh, NC · On-site

$95K/yr

... analysis to derive value-add insights 7. Adept with Microsoft Office products. Preferred ... Expertise in hosting platforms (on-premise and cloud, open systems, mainframe), IT operations, and ...

Integrated Resources INC

Lead IT Analyst

Raleigh, NC · On-site

Information Technology (IT), Clinical Research, Rehabilitation Therapy and Nursing. This is Direct ... Experience with risk analysis and risk management practices and tools. Knowledge of infrastructure ...

next page

Showing results 1-20

All JobsIt Risk Analyst JobsIt Risk Analyst Jobs in Raleigh, NC

It Risk Analyst information

See Raleigh, NC salary details

$14

$39

$64

How much do it risk analyst jobs pay per hour?

As of Sep 13, 2026, the average hourly pay for it risk analyst in Raleigh, NC is $39.35, according to ZipRecruiter salary data. Most workers in this role earn between $28.99 and $47.88 per hour, depending on experience, location, and employer.

What does an IT Risk Analyst do?

An IT Risk Analyst is responsible for identifying, assessing, and mitigating risks that could impact an organization's information technology systems and data. They analyze potential threats, such as cyberattacks or data breaches, and develop strategies to minimize these risks. Their role involves working closely with other IT professionals to ensure compliance with security policies and regulatory requirements, as well as preparing risk reports and recommending improvements. Ultimately, IT Risk Analysts help organizations protect sensitive information and maintain secure, reliable IT operations.

What are some common challenges IT Risk Analysts face when collaborating with other departments?

IT Risk Analysts often work closely with various departments such as IT, compliance, and operations to identify and mitigate risks. One common challenge is translating technical risk information into terms that non-technical stakeholders can understand. Additionally, balancing the need for rigorous security measures with business objectives can sometimes lead to conflicting priorities. Effective communication and building strong relationships across teams are key to overcoming these challenges and ensuring that risk controls are both practical and effective.

What are the key skills and qualifications needed to thrive as an IT Risk Analyst, and why are they important?

To thrive as an IT Risk Analyst, you need a strong understanding of risk management frameworks, cybersecurity principles, and regulatory compliance—often supported by a degree in information technology or a related field. Familiarity with tools such as risk assessment software, vulnerability scanners, and certifications like CISSP or CISA is typically required. Analytical thinking, attention to detail, and effective communication are vital soft skills that distinguish top performers in this role. These competencies are crucial for accurately identifying risks, ensuring regulatory compliance, and effectively communicating findings to stakeholders.

What is the difference between It Risk Analyst vs Cybersecurity Analyst?

AspectIt Risk AnalystCybersecurity Analyst
CertificationsISO 27001, CISSP, CISACISSP, CEH, CompTIA Security+
Work EnvironmentFinancial, healthcare, corporate sectors focusing on risk managementIT security teams, cybersecurity firms, tech companies
Employer & Industry UsageFinancial institutions, large corporations, consulting firmsTech companies, government agencies, security firms

While both roles focus on protecting information, the It Risk Analyst primarily assesses and manages overall IT risks within organizations, emphasizing compliance and risk mitigation strategies. In contrast, the Cybersecurity Analyst concentrates on defending systems from cyber threats and attacks. Both roles often collaborate but serve distinct functions in an organization's security framework.

How much do IT risk analysts get paid?

IT risk analysts typically earn a median annual salary of around $80,000 to $100,000, depending on experience, certifications, and location. Entry-level positions may start lower, while experienced analysts with certifications like CISSP or CISA can earn higher salaries. Salaries also vary based on industry and company size.

Is an IT risk analyst a hard job?

An IT risk analyst's job involves assessing and managing cybersecurity threats, which requires strong analytical skills, attention to detail, and knowledge of security tools and frameworks. The role can be challenging due to the evolving nature of cyber threats and the need for continuous learning and certification, such as CISSP or CISA. Overall, it can be demanding but is manageable with proper training and experience.

What are popular job titles related to It Risk Analyst jobs in Raleigh, NC?

For It Risk Analyst jobs in Raleigh, NC, the most frequently searched job titles are:

What job categories do people searching It Risk Analyst jobs in Raleigh, NC look for?

The top searched job categories for It Risk Analyst jobs in Raleigh, NC are:

It Risk Analyst jobs near you
Infographic showing various It Risk Analyst job openings in Raleigh, NC as of August 2026, with employment types broken down into 59% Full Time, and 41% Contract. Highlights an 100% In-person job distribution, with an average salary of $81,859 per year, or $39.4 per hour.

Principal Technology Risk Analyst - Program & Regulatory Assurance

Durham, NC • On-site

Fidelity Investments
Investment Management and Consulting Services • 10K+ employees
Learn more about Fidelity Investmentsexternal

Full-time

Re-posted 7 days ago

Fidelity Investments rating

8.7

Company rating: 8.7 out of 10

Based on 274 frontline employees who took The Breakroom Quiz

Job description


Title: Principal Technology Risk Analyst
Note: Fidelity will not provide immigration sponsorship for this position.
The Role
The Enterprise Technology Risk group is seeking a passionate, driven and experienced professional to contribute to the Technology Risk Program and Regulatory Assurance CoE team. This role is responsible for performing regulatory and program management responsibilities, including designing and maintaining technology controls to support program and regulatory requirements. This role will require networking and relationship management skills to collaborate with the Controls Testing team, and various business units and risk teams across the enterprise. You will be working on:
  • Ensuring risk and control taxonomy aligns with enterprise standards
  • Developing and monitoring technology controls for security and compliance
  • Providing technical support and acting as liaison for technology risk management
  • Managing control updates, annual mapping, and testing requirements
  • Design, document, and maintain Risk and Control Matrices (RCMs/RACMs) across business and IT processes
  • Continuously improve and standardize control documentation and governance practices
  • Overseeing control certification process
  • Partnering with Control Testing team to track progress and remediation
  • Representing ETRA in enterprise control initiatives and special projects
  • Supporting regulatory activities, risk assessments, and examinations
  • Leading and supporting SOX 404 compliance, including control documentation
  • Reviewing SOC reports, assessing CUECs, and communicating control gaps

The Team
The Technology Risk Program and Regulatory Assurance team is responsible for managing controls to support program requirements, monitoring the results of control testing to meet program requirements, and ensuring a consistent risk and control taxonomy is leveraged in accordance with enterprise best practices. Additionally, this team supports regulatory activities such as maintaining application, server, and database inventories by entity. Technology Risk is part of the broader Legal, Risk and Compliance group and partners with Corporate Audit, Enterprise Compliance, and Security to protect the interests of our customers, our employees, and Fidelity's brand. You will also work closely with the Enterprise Technology Risk teams as well as Fidelity technology and business owners, and Operational Risk teams.
The Expertise and Skills You Bring
  • 5 -7 years' experience in information technology risk, controls, or audit roles
  • Bachelor's degree in computer science, technology, or a related field of study preferred
  • Professional technology and associated risk certifications (CISSP, CISA, CRISC, CISM), Certified risk/fraud examiners (CRE, CFE), and/or Cloud Certification(s) (CCSP, CCSK, AWS) preferred
  • Experience documenting controls for large scale financial service organizations (cloud, distributed, vendor solutions, mainframe, network environments, and AI)
  • Demonstrated technical abilities in multiple areas (e.g., technology infrastructure and application controls, cyber security, access management, network and cloud, resiliency, etc.)
  • Working knowledge of Cloud security and controls and cloud technology environments (AWS/Azure, SaaS, PaaS)
  • You have a strong knowledge of information technology processes and controls, and a comprehensive understanding of risk, quality control and assurance functions
  • Your love of solving complex problems, and comfort with ambiguous situations, and your ability to help solution innovative ways to mitigate risk using your advanced analytical and critical thinking skills
  • Your ability to build and maintain collaborative working relationships with Information Technology and Business personnel to design effective controls
  • Your process orientation and understanding of operations and technology enabling you to provide support in the analysis, development, and monitoring of controls
  • Knowledge of Industry standards, regulations, frameworks and best practices, such as NIST SP 800-53, COBIT, AICPA Trust Principles, ISO27001, SWIFT, HITRUST, and SOX404 is preferred
  • ISO9001 and/or ISO27001 certification preferred, with responsibility to support and participate in ISO peer audit reviews.
  • Knowledge of Governance, Risk, and Compliance (GRC) tools, such as Archer is preferred
  • Your excellent verbal and written communication skills enabling you to prepare and present recommendations to senior management

Note: Fidelity will not provide immigration sponsorship for this position.
Fidelity's Onsite Working Model
Fidelity is transitioning to a full-time onsite working model through a phased rollout across regions and roles. Currently, some roles and locations require 100% onsite presence, while others require less. Onsite expectations are likely to evolve as the rollout continues. This transition does not apply to fully remote roles.
Certifications:
Category:
Information Technology
Please be advised that Fidelity's business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.

What Fidelity Investments employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply