1

It Risk And Compliance Jobs in Indiana (NOW HIRING)

IT Internal Audit Senior

Indianapolis, IN · On-site

$89.90K - $118K/yr

The IT Internal Audit Senior executes IT General Controls (ITGC) and IT Application Controls (ITAC) testing as part of the company's SOX compliance program, while also planning and executing risk ...

VP Risk & Compliance Solutions

Columbus, IN

$117.30K - $157.40K/yr

The VP Risk Compliance Solutions is responsible for ensuring that the Credit Union maintains a ... Serves as management liaison for ERC and ensures timely, accurate sharing of information and board ...

Corporate Office (Fort Wayne IN) JOB SUMMARY Assist in executing governance, risk, and compliance activities, including internal IT audits, policy reviews, and collaboration with IT Management to ...

Corporate Office (Fort Wayne IN) JOB SUMMARY Assist in executing governance, risk, and compliance activities, including internal IT audits, policy reviews, and collaboration with IT Management to ...

Answer information security and compliance onboarding questionnaires * Helping the Senior Government, Risk & Compliance Analyst maintain our HITRUST certification * Helping the Senior Government ...

Director IT Finance Location: Fort Wayne, IN Level: Salaried Division / Department: IT Reports to ... Risk management and compliance * Continuous service improvement * Serve as executive point of ...

Director IT Finance Location: Fort Wayne, IN Level: Salaried Division / Department: IT Reports to ... Risk management and compliance * Continuous service improvement * Serve as executive point of ...

next page

Showing results 1-20

It Risk And Compliance information

What are the key skills and qualifications needed to thrive as an IT Risk and Compliance professional, and why are they important?

To thrive as an IT Risk and Compliance professional, you need a solid understanding of IT governance, risk management frameworks, regulatory requirements, and a relevant degree such as in information technology, cybersecurity, or a related field. Familiarity with tools like GRC (Governance, Risk, and Compliance) platforms, as well as certifications such as CISA, CRISC, or CISSP, is typically required. Strong analytical thinking, attention to detail, and effective communication help professionals excel in navigating complex regulations and collaborating with cross-functional teams. These skills and qualifications are crucial for ensuring organizational compliance, mitigating security risks, and maintaining trust with stakeholders.

How does an IT Risk and Compliance professional typically collaborate with other departments to ensure regulatory adherence?

IT Risk and Compliance professionals regularly work with teams across the organization—such as IT, legal, audit, and business operations—to identify risks, interpret regulations, and implement compliance controls. They facilitate training, conduct assessments, and coordinate responses to audits or incidents, ensuring that everyone understands their responsibilities. Effective communication and strong relationship-building skills are essential, as much of the role involves translating technical requirements into actionable steps for non-technical staff. This cross-functional collaboration helps maintain a culture of compliance and minimizes organizational risk.

What is IT Risk and Compliance?

IT Risk and Compliance refers to the process of identifying, assessing, and managing risks associated with an organization's information technology systems, while ensuring that these systems adhere to relevant laws, regulations, and internal policies. Professionals in this field work to protect sensitive data, prevent security breaches, and ensure that the organization's IT practices are compliant with industry standards such as GDPR, HIPAA, or SOX. They often conduct risk assessments, implement controls, monitor compliance, and respond to audits. The goal is to minimize potential threats to IT infrastructure and maintain the trust of customers and stakeholders.

What is the difference between It Risk And Compliance vs Cybersecurity Analyst?

AspectIt Risk And ComplianceCybersecurity Analyst
CertificationsISO 27001, CISSP, CISACISSP, CompTIA Security+
Work EnvironmentPolicy development, risk assessments, compliance auditsMonitoring security threats, incident response, vulnerability testing
Employer & Industry UsageFinancial, healthcare, government sectorsTech companies, financial institutions, government agencies

While both roles focus on protecting information, It Risk And Compliance emphasizes establishing policies, ensuring regulatory adherence, and managing overall risk frameworks. Cybersecurity Analysts primarily focus on identifying and mitigating security threats through technical measures. Understanding these differences helps organizations assign the right responsibilities and professionals for their security needs.

What cities in Indiana are hiring for It Risk And Compliance jobs? Cities in Indiana with the most It Risk And Compliance job openings:
IT Risk Lead

Full-time

Medical, Dental, Vision, Retirement

Posted 14 days ago


Job description

Is it a Bank? A cooperative? A leader in affordable housing? We are all those things and more!
Our core mission at FHLBank Indianapolis is to provide reliable and readily available liquidity to our member institutions to support housing finance and community development. Simply put, we're a bank for banks, credit unions, community development financial institutions and insurers across Indiana and Michigan. We also assist in meeting the economic and housing needs of communities and families through grants and subsidized advances that support affordable housing and economic development.
But enough about us, let's talk about you.
Are you looking for a company that views their employees as their greatest asset?
A company that's dedicated to making a difference in the community? So much so they pay their employees to volunteer?
Do you want to join a talented workforce that prioritizes equal opportunity within an inclusive culture, and promotes learning and development, unique skills/ideas, and employee engagement?
If you've said yes to these questions, then we might be a match!
Here is what we offer:
  • Flexible hybrid workforce model: Onsite three days a week and two days remote. We also offer remote flex days!
  • Fantastic, competitive pay and total rewards
  • Industry-high 401(k) match: up to 6% PLUS...an additional 4% contribution!
  • Tuition reimbursement assistance: To help you continue to develop personally and professionally.
  • Student loan repayment assistance: That's right, we will help you repay outstanding student loans!
  • Awesome Benefits Package: Medical, dental, vision benefits and even pet (you read that right) insurance!
  • Generous time off: Vacation, paid federal holidays, birthday month floating holiday, volunteer day and summer hours program
  • "Dress for your day" dress code: You choose the appropriate work attire based on what your day looks like.

Statistics show that it is less likely for some candidates to submit their application if they don't meet all the criteria within the job description. If this is you, we encourage you to give yourself a chance and submit your application anyway, as you may be the perfect match for this role!
Purpose:
The IT Risk Lead is responsible for measuring, monitoring, and evaluating the risk and control environment ensuring technology solutions are in alignment with the Bank's risk appetite. This role will have a comprehensive understanding of the Bank's technology operating environment to proactively identify risks, controls, issues, and changes in the risk profile of the underlying systems.
The following statements are intended to describe the general nature and level of work being performed by individuals in the role. They are not intended to be an exhaustive list of all responsibilities or abilities required. The Bank reserves the right to alter or amend this description at any time.
Specific Responsibilities:
  • Lead assessments based on the IT risk management framework and applicable industry best practices.
  • Lead identification of technology control or process deficiencies based on established IT and Information Security standards.
  • Lead IT and Information Security Risk and Control Self-Assessments to identify, assess and evaluate technology operational risk.
  • Engage IT and Information Security stakeholders to support risk mitigation and effectiveness of technology controls.
  • Review action plans to ensure appropriate mitigation and alignment with risk appetite.
  • Review evidence for remediation plans to ensure appropriate risk mitigation.
  • Monitor risk indicators and enterprise IT and Information Security metrics to assess overall technology risk profile.
  • Review risk events to assess breakdown in controls, processes, and mitigation strategies.
  • Assist in conducting Artificial Intelligence (AI) risk assessments in alignment with the NIST AI Risk Management Framework.
  • Research IT and Information Security emerging risk trends to implement best practices to support the program.
  • Coordinate implementation of process improvement changes to optimize the program.
  • Monitor action plans to ensure completion of mitigation strategies within established target due date timelines.
  • Collaborate with other enterprise risk management functions to support risk mitigation.
  • Participate in various enterprise working groups to support continuous risk engagement.
  • Assist in the preparation of IT and Information Security risk reports for the Risk Committee, and Risk Oversight Committee of the Board of Directors.
  • Other risk management duties as assigned.

Competencies:
Business
  • Systems/Technology Complexity
  • Banking Industry Knowledge

General
  • Decision Making/Judgment
  • Dependability

People
  • Relationship Development
  • Interpersonal Skills

Position Requirements:
  • Bachelor's degree with a minimum six (6) years' relevant IT risk, information security, compliance, or IT audit experience in a financial services environment.
  • Master's degree in technology, finance, or business is preferred.
  • Certifications such as CISSP, CCSP, CISM, and/or CRISC are an added advantage.
  • Experience with risk assessment, interpretation, analytical and collaboration skills.
  • Big 4 or technology consulting experience is an added advantage.
  • Experience with Azure cloud security, risk, and compliance, including knowledge of security design constructs, principles, and blueprints for application architectures.
  • Active industry certifications related to cloud security, i.e., Azure Fundamentals, Azure Security Technologies etc., are an added advantage.
  • Proficient verbal and written communication skills, including the ability to effectively lead discussions and meetings.
  • Ability to handle a variety of projects simultaneously.
  • Technical skills experience required: control assessment, IT risk management, monitoring metrics and reporting, technical problem resolution, and project management.
  • Working knowledge within the following IT risk domains or technologies is an added advantage: Database, Application, Network Security, and Cloud Security, Identity and Access Management, Change Management, Threat, and Vulnerability Management.
  • Must not have been convicted on any civil or criminal charge that would suggest a risk to Bank security.
  • Ability to work full-time.
  • Ability to uphold and model the Bank's Guiding Principles.

Hiring Range: $113,000 - $133,000
Hiring ranges reflect the base salary that the Bank reasonably expects to pay for a given role and is not inclusive of annual incentive award opportunities, retirement benefits or the value of other health and welfare or other ancillary benefits. We consider many factors when determining base salaries such as individual background and experience, the competitive environment, education, particular skill set(s), and industry and institutional knowledge.
FHLBank Indianapolis is an Equal Opportunity Employer.