ZipRecruiter

Log In

1

It Risk Analyst Jobs in Raleigh, NC (NOW HIRING)

NC SECU

IT GRC Analyst II

Raleigh, NC

The IT GRC Analyst II assess, tests, documents, and monitors the SECU technology ecosystem to ... Risk and controls assessments * Documenting and maintaining IT Policies / Standards * IT Risk ...

GFL Environmental

Risk Analyst

Raleigh, NC · On-site

We are looking for an energetic, sharp, and forward-thinking Risk Analyst to join our Risk ... information, or any other protected characteristic. If you are interested in applying for ...

First Citizens

Senior IT Asset Mgmt Analyst

Raleigh, NC · On-site

$80 - $100/hr

... IT controls and processes. The analyst will leverage data-driven insights to uncover trends ... This role may also contribute to cross‑functional governance, risk, and compliance initiatives.

NC SECU

Model Risk Analyst

Raleigh, NC · Hybrid

Position Overview: Assist in the development, implementation, and maintenance of the Model Risk ... genetic information, disability, veteran status, or other classification protected by law.

Integrated Resources INC

Lead IT Analyst

Raleigh, NC · On-site

Information Technology (IT), Clinical Research, Rehabilitation Therapy and Nursing. This is Direct ... Experience with risk analysis and risk management practices and tools. Knowledge of infrastructure ...

Siri InfoSolutions Inc

Risk Analysis

Raleigh, NC · On-site

Job Summary - Risk Analysis (Raleigh, NC) - Identify, assess, and mitigate risks across business and technology functions; continuously monitor risk posture. - Implement and enhance enterprise risk ...

Tata Consultancy Service Limited

Risk Analysis

Raleigh, NC · On-site

$100K - $120K/yr

Risk Analysis Must Have Technical/Functional Skills • Risk identification, assessment, mitigation, and continuous monitoring across business and technology functions • Experienced in implementing ...

NV5

IT Analyst

Cary, NC · On-site

Responsibilities NV5 is seeking a full-time IT Analyst to support our Cary, NC office. This role provides frontline technical support and assistance to end users and IT operations. Key ...

NV5

IT Analyst

Cary, NC

NV5 is seeking a full-time IT Analyst to support our Cary, NC office. This role provides frontline technical support and assistance to end users and IT operations. Key responsibilities include:

NV5

IT Analyst

Cary, NC

Responsibilities NV5 is seeking a full-time IT Analyst to support our Cary, NC office. This role provides frontline technical support and assistance to end users and IT operations. Key ...

Mayne Pharma

IT Analyst

Raleigh, NC · On-site

Perform needs analysis in conjunction with laboratory or office personnel with respect to hardware and software * Ability to present and deliver IT training material * Comfortable supporting ...

next page

Showing results 1-20

All JobsIt Risk Analyst JobsIt Risk Analyst Jobs in Raleigh, NC

It Risk Analyst information

See Raleigh, NC salary details

$14

$39

$64

How much do it risk analyst jobs pay per hour?

As of Aug 22, 2026, the average hourly pay for it risk analyst in Raleigh, NC is $39.35, according to ZipRecruiter salary data. Most workers in this role earn between $28.99 and $47.88 per hour, depending on experience, location, and employer.

What does an IT Risk Analyst do?

An IT Risk Analyst is responsible for identifying, assessing, and mitigating risks that could impact an organization's information technology systems and data. They analyze potential threats, such as cyberattacks or data breaches, and develop strategies to minimize these risks. Their role involves working closely with other IT professionals to ensure compliance with security policies and regulatory requirements, as well as preparing risk reports and recommending improvements. Ultimately, IT Risk Analysts help organizations protect sensitive information and maintain secure, reliable IT operations.

What are some common challenges IT Risk Analysts face when collaborating with other departments?

IT Risk Analysts often work closely with various departments such as IT, compliance, and operations to identify and mitigate risks. One common challenge is translating technical risk information into terms that non-technical stakeholders can understand. Additionally, balancing the need for rigorous security measures with business objectives can sometimes lead to conflicting priorities. Effective communication and building strong relationships across teams are key to overcoming these challenges and ensuring that risk controls are both practical and effective.

What are the key skills and qualifications needed to thrive as an IT Risk Analyst, and why are they important?

To thrive as an IT Risk Analyst, you need a strong understanding of risk management frameworks, cybersecurity principles, and regulatory compliance—often supported by a degree in information technology or a related field. Familiarity with tools such as risk assessment software, vulnerability scanners, and certifications like CISSP or CISA is typically required. Analytical thinking, attention to detail, and effective communication are vital soft skills that distinguish top performers in this role. These competencies are crucial for accurately identifying risks, ensuring regulatory compliance, and effectively communicating findings to stakeholders.

What is the difference between It Risk Analyst vs Cybersecurity Analyst?

AspectIt Risk AnalystCybersecurity Analyst
CertificationsISO 27001, CISSP, CISACISSP, CEH, CompTIA Security+
Work EnvironmentFinancial, healthcare, corporate sectors focusing on risk managementIT security teams, cybersecurity firms, tech companies
Employer & Industry UsageFinancial institutions, large corporations, consulting firmsTech companies, government agencies, security firms

While both roles focus on protecting information, the It Risk Analyst primarily assesses and manages overall IT risks within organizations, emphasizing compliance and risk mitigation strategies. In contrast, the Cybersecurity Analyst concentrates on defending systems from cyber threats and attacks. Both roles often collaborate but serve distinct functions in an organization's security framework.

How much do IT risk analysts get paid?

IT risk analysts typically earn a median annual salary of around $80,000 to $100,000, depending on experience, certifications, and location. Entry-level positions may start lower, while experienced analysts with certifications like CISSP or CISA can earn higher salaries. Salaries also vary based on industry and company size.

Is an IT risk analyst a hard job?

An IT risk analyst's job involves assessing and managing cybersecurity threats, which requires strong analytical skills, attention to detail, and knowledge of security tools and frameworks. The role can be challenging due to the evolving nature of cyber threats and the need for continuous learning and certification, such as CISSP or CISA. Overall, it can be demanding but is manageable with proper training and experience.

What are popular job titles related to It Risk Analyst jobs in Raleigh, NC?

For It Risk Analyst jobs in Raleigh, NC, the most frequently searched job titles are:

What job categories do people searching It Risk Analyst jobs in Raleigh, NC look for?

The top searched job categories for It Risk Analyst jobs in Raleigh, NC are:

It Risk Analyst jobs near you
Infographic showing various It Risk Analyst job openings in Raleigh, NC as of August 2026, with employment types broken down into 100% Full Time. Highlights an 100% In-person job distribution, with an average salary of $81,854 per year, or $39.4 per hour.

IT GRC Analyst II

State Employees' Credit Union

Raleigh, NC • On-site

Full-time

Posted 12 days ago

State Employees' Credit Union (North Carolina) rating

8.2

Company rating: 8.2 out of 10

Based on 23 frontline employees who took The Breakroom Quiz

Job description

If you are motivated and believe in the credit union philosophy of "People Helping People," join our team!
Position Overview: The IT GRC Analyst II assess, tests, documents, and monitors the SECU technology ecosystem to ensure the IT control environment effectively mitigates risks associated with an everchanging threat landscape. The IT GRC Analyst will possess a wide range of technical and interpersonal skills to bridge the gap between technology organizations and the business. Must have a big-picture perspective, ability to execute end-to-end risk management processes, and ability to quickly establish trust and build productive relationships across multiple departments. The IT GRC Analyst will require expertise to perform technology risk assessments, provide input to and/or document IT policies, standards, and guidelines, develop, monitor, and track risk remediation plans, and aggregate and report key risk metrics to senior stakeholders.
Responsibilities:
20% Identify, document, and monitor technology risks present across both internal and external (vendor / cloud) environments
20% Quantify inherent and residual IT risk levels to enhance analytics, inform prioritizations, and for use in management reporting
20% Work with risk remediation owners to establish remediation plans with milestones and target dates, and monitor progress towards remediation, escalating as appropriate
20% Execute technology risk management processes and provide input to support continuous improvement of process and program design
10% Perform risk and controls assessments while aggregating reporting for Audit and/or Regulatory issues.
10% Partner with relevant stakeholders to establish clear and consistent IT risk reporting, metrics, KRIs, and KPIs to inform decision making
Required Relevant Experience: Minimum 5 years
Required Knowledge, Abilities, Skills:
  • Teamwork, collaboration, self-driven and effective communication skills - both written and verbal.
  • 5 years of IT Security and/or IT Risk Management experience working in a mid-to-large size company

Basic proficiency or ability to learn one or more of the following:
  • Risk and controls assessments
  • Documenting and maintaining IT Policies / Standards
  • IT Risk aggregation, reporting, KPI/KRIs
  • Issues management
  • Third party risk management

Working knowledge of various industry security standards and frameworks including: NIST, ISO 27001, ISF Standard of Good Practice (SoGP), etc.
Desired Knowledge, Abilities, Skills:
  • 5+ years working in a financial institution.
  • Knowledge of modern enterprise and security architectures, their challenges, common approaches to overcome their challenges, and their inherent security strengths and weaknesses.
  • Professional certifications such as: CISSP, CISA, CISM, GIAC, CGEIT, CRISC, OSCE, or other relevant industry certification
  • Experience working within a DevOps environment

SECU provides equal employment opportunity to all qualified persons regardless of race, color, religion, age, sex, sexual orientation, gender identity, national origin, genetic information, disability, veteran status, or other classification protected by law.
Disclaimer
State Employees' Credit Union reserves the right to fill this role at a higher/lower level based on business need.

What State Employees' Credit Union (North Carolina) employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply