1

It Risk And Compliance Analyst Jobs in Oregon (NOW HIRING)

Risk Officer

OR · On-site +1

The Risk Officer will supervise a Risk Analyst, partner with leaders across the organization, and ... compliance and IT training. * Maintain an understanding of Bank policies, procedures, and ...

Meticulous attention to detail is required to troubleshoot and investigate information, resolve ... high-technology, electronics, capital equipment, precision manufacturing, aerospace, or other ...

Meticulous attention to detail is required to troubleshoot and investigate information, resolve ... high-technology, electronics, capital equipment, precision manufacturing, aerospace, or other ...

Scope is calibrated to actual risk exposure, root cause analysis is rigorous, and conclusions are ... compliance. * Risk and control frameworks are applied with sound judgment, and findings are ...

Senior IT Auditor

Hillsboro, OR · On-site +1

$102K - $134K/yr

Compliance, Legal, Banking Regulatory, Information Technology, Information Security, Data Analytics, Digital Banking. Enterprise Risk Management, Credit risk, Market risk, Operational risk, Model ...

IT Business Analyst Location: Remote (Preferred to be based in California, Oregon, Washington, or Nevada) Ready to make a difference? ICF is seeking an IT Business Analyst to work within a growing ...

Showing results 21-40

It Risk And Compliance Analyst information

See Oregon salary details

$16

$42

$69

How much do it risk and compliance analyst jobs pay per hour?

As of Sep 3, 2026, the average hourly pay for it risk and compliance analyst in Oregon is $42.80, according to ZipRecruiter salary data. Most workers in this role earn between $31.54 and $52.12 per hour, depending on experience, location, and employer.

What is an IT Risk and Compliance Analyst?

IT Risk and Compliance Analysts are professionals who identify, assess, and manage risks related to information technology systems within an organization. They ensure that IT processes and systems comply with internal policies and external regulations, such as GDPR or SOX. Their responsibilities include conducting risk assessments, developing mitigation strategies, monitoring compliance, and reporting on the effectiveness of controls. By doing so, they help protect the organization from cyber threats, data breaches, and regulatory penalties.

What are the key skills and qualifications needed to thrive as an IT Risk and Compliance Analyst?

To thrive as an IT Risk and Compliance Analyst, you need a solid understanding of risk management frameworks, regulatory compliance standards (such as SOX, HIPAA, or GDPR), and a bachelor's degree in information technology or a related field. Familiarity with risk assessment tools, GRC (Governance, Risk, and Compliance) platforms, and relevant certifications like CRISC or CISA is typically required. Strong analytical thinking, attention to detail, and effective communication skills help analysts interpret regulations and collaborate across departments. These skills ensure organizations proactively manage risks, maintain regulatory compliance, and protect sensitive information.

What are some common challenges an IT Risk and Compliance Analyst faces when balancing regulatory requirements with business objectives?

One common challenge IT Risk and Compliance Analysts face is ensuring that regulatory requirements are fully met without hindering business operations or innovation. Balancing security protocols and compliance standards—such as GDPR, SOX, or HIPAA—with the need for efficient workflows can be complex. Analysts must collaborate closely with IT, legal, and business units to interpret regulations pragmatically, design effective controls, and communicate the importance of compliance while minimizing disruption. This often requires strong negotiation, communication, and analytical skills to find solutions that satisfy both compliance mandates and business goals.

What is the difference between It Risk And Compliance Analyst vs It Security Analyst?

AspectIt Risk And Compliance AnalystIt Security Analyst
CertificationsISO 27001, CISSP, CISACISSP, CompTIA Security+
Work EnvironmentRisk assessments, policy development, compliance auditsNetwork monitoring, incident response, security infrastructure
Industry UsageFinancial, healthcare, government sectorsTech, finance, healthcare sectors

The It Risk And Compliance Analyst focuses on ensuring organizational adherence to regulations and managing risk frameworks, while the It Security Analyst primarily handles security measures, threat detection, and incident response. Both roles require similar certifications and often work within the same industries, but their core responsibilities differ: one emphasizes compliance and risk management, the other emphasizes security operations.

What does an IT risk and compliance analyst do?

An IT risk and compliance analyst evaluates and manages an organization's technology-related risks to ensure adherence to regulatory standards and internal policies. They identify vulnerabilities, implement controls, and monitor compliance using tools like risk assessment frameworks and audit procedures to protect information systems.

What job categories do people searching It Risk And Compliance Analyst jobs in Oregon look for?

The top searched job categories for It Risk And Compliance Analyst jobs in Oregon are:

Infographic showing various It Risk And Compliance Analyst job openings in Oregon as of August 2026, with employment types broken down into 1% As Needed, 84% Full Time, 11% Part Time, and 4% Contract. Highlights an 93% Physical, 3% Hybrid, and 4% Remote job distribution, with an average salary of $89,034 per year, or $42.8 per hour.

$80K - $165K/yr

Full-time

Medical, Dental, Vision, Life, Retirement, PTO

Re-posted 3 hours ago


Job description

About the Role:
Responsible for leading Cybersecurity and IT governance, risk, and compliance efforts, including the establishment and maintenance of IT operating model and facilitating the development of technology policies and standards.
  • Maintain governance documentation detailing how information should be secured including the maintenance and development of internal process/procedure documentation including but are not limited to technology and cybersecurity policies and standards.
  • Perform formal risk analysis and self-assessments for technology processes, leveraging industry frameworks/standards like NIST CSF, FFIEC, CIS, ITIL, and COBIT to build a unique program for Columbia Bank.
  • Develop new and analyze existing internal technology and security controls, to ensure compliance with documented and approved standards and frameworks. Ensure that information systems within environment comply with company policies, standards, and procedures.
  • Drive and provide advisory and subject-matter expertise to technology teams and business units for cybersecurity compliance readiness.
  • Responsible for tracking and monitoring gaps in the cybersecurity program. Maintain cybersecurity gap analysis documents; gather necessary information from technology and lines of business to identify areas to improve banking practices.
  • Manage end-to-end issue management activities, including intake, validation, prioritization, assignment, remediation tracking, and closure of GRC-related issues in ServiceNow, ensuring timely resolution, appropriate evidence, and alignment with audit, risk, and regulatory expectations.
  • Coordinate SOX IT Audit activities, serving as the primary liaison between audit (internal/external) and technology stakeholders to manage request intake, scope clarification, evidence collection, review, submission, issue tracking, status reporting to leadership and timely resolution in support of audit deadlines and control effectiveness.
  • Lead the process to identify new assets, perform the risk evaluation process to determine the risk ranking.
  • Facilitate and liaise with technology leaders, key corporate risk groups (including Internal Audit, External Audit, Corporate Compliance, Enterprise Risk Management, Legal) to ensure TAG is aligned with these groups and meeting obligations.
  • Demonstrates compliance with all bank regulations for assigned job function and applies to designated job responsibilities - knowledge may be gained through coursework and on-the-job training. Keeps up to date on regulation changes.
  • Follows all Bank policies and procedures, compliance regulations, and completes all required annual or job-specific training.
  • Maintain a working knowledge of Bank's written policies and procedures regarding Bank Secrecy Act, Regulation CC, Regulation E, Bank Security and other regulations as applicable to this job description.
  • May be asked to coach, mentor, or train others and teach coursework as subject matter expert.
  • Actively learns, demonstrates, and fosters the Columbia corporate culture in all actions and words.
  • Takes personal initiative and is a positive example for others to emulate.
  • Embraces our vision to become "Business Bank of Choice"
  • May perform other duties as assigned.

About You:
  • Bachelor's Degree in computer science or equivalent (preferred)
  • 7-10 years - of experience in or a combination of information security, IT audit, or information technology operations. (Required)
  • ServiceNow IRM/GRC experience to design/optimize workflow, reporting and implementing new features
  • Knowledge of risk management processes including internal audit and information security management. Experience evaluating controls relative to information security frameworks such as ISO 27002, NIST 800 series, or financial services regulatory frameworks such as the FFIEC IT booklets and Cybersecurity Assessment Tool (CAT).
  • Knowledge of systems and network concepts including: access, authorization, configuration, and design.
  • Demonstrated understanding of information security concepts including: encryption, access controls, network security, security operations, security architect, threat modeling and design.
  • Knowledge of applicable regulatory requirements including PCI DSS, GLBA and HIPAA.
  • Ability to operate in a cross-functional environment, build, and foster relationships with other departments and stakeholders.
  • Ability to anticipate and respond to changing priorities and operate effectively in a dynamic demand-based environment, requiring extreme flexibility and responsiveness.

Travel Requirements
  • Occasional

The pay range for this role is $80,051.00 - $165,000.00.
The pay rate for the selected candidate is dependent upon a variety of non-discriminatory factors including, but not limited to, job-related knowledge, skills, and experience, education, and geographic location. The role may be eligible for performance-based incentive compensation, and those details will be provided during the recruitment process.
Primary Location: Ability to work fully onsite at posted location(s).
9285 NE Tanasbourne Drive Hillsboro OR 97124
Our Benefits:
We are proud to offer a competitive total rewards package including base wages and comprehensive benefits.
We offer eligible associates comprehensive healthcare coverage (medical, dental, and vision plans), a 401(k)-retirement savings plan with employer match for qualifying associate contributions, an employee assistance program, life insurance, disability insurance, tuition assistance, mental health resources, identity theft protection, legal support, auto and home insurance, pet insurance, access to an online discount marketplace, and paid vacation, sick days, volunteer days, and holidays. Benefit eligibility begins the first day of the month following the date of hire for associates who are regularly scheduled to work at least thirty hours weekly.
Our Commitment to Diversity:
Columbia Bank is an equal opportunity and affirmative action employer committed to employing, engaging, and developing a diverse workforce. All qualified applicants will receive consideration for employment without regard to race, color, national origin, religion, sex, age, sexual orientation, gender identity, gender expression, protected veteran status, disability, or any other applicable protected status or characteristics. If you require an accommodation to complete the application or interview(s), please let us know by email: careers@columbiabank.com.
To Staffing and Recruiting Agencies:
Our posted job opportunities are only intended for individuals seeking employment at Columbia Bank. Columbia Bank does not accept unsolicited resumes or applications from agencies and Columbia Bank will not be responsible for any fees related to unsolicited resume submissions. Staffing and recruiting agencies are not authorized to submit profiles, applications, or resumes to this site or to any Columbia Bank employee and any such submissions will be considered unsolicited unless requested directly by a member of the Talent Acquisition team.