ZipRecruiter

Log In

1

It Risk Assurance Analyst Jobs (NOW HIRING)

Rockland Trust

Senior IT Risk Analyst

Plymouth, MA · Hybrid

Senior IT Risk Analyst (First Line of Defense) Rockland Trust is seeking a Senior IT Risk Analyst to advance the Bank's First Line of Defense IT Risk Management Program. This is a hybrid role, 3 days ...

Rockland Trust

Senior IT Risk Analyst

Plymouth, MA · Hybrid

Senior IT Risk Analyst (First Line of Defense) Rockland Trust is seeking a Senior IT Risk Analyst to advance the Bank's First Line of Defense IT Risk Management Program. This is a hybrid role, 3 days ...

Rockland Trust

Senior IT Risk Analyst

Plymouth, MA · On-site

Senior IT Risk Analyst (First Line of Defense) Rockland Trust is seeking a Senior IT Risk Analyst to advance the Bank's First Line of Defense IT Risk Management Program. This is a hybrid role, 3 days ...

Cross River

AVP, IT Assurance & Governance

Fort Lee, NJ · On-site

$150K - $170K/yr

ISACA CISA or ISC2 CISSP * 5+ years of experience in Information Security, IT Security, IT Audit, IT GRC, IT Compliance,IT Assurance, IT Risk, IT Business Analysis, or Business Continuity * Strong ...

Socket.dev

AVP, IT Assurance & Governance

Fort Lee, NJ · On-site

$150 - $200/hr

ISACA CISA or ISC2 CISSP * 5+ years of experience in Information Security, IT Security, IT Audit, IT GRC, IT Compliance,IT Assurance, IT Risk, IT Business Analysis, or Business Continuity * Strong ...

Tandym Tech

IT Risk & Controls Analyst

Vienna, VA · On-site

A financial services organization in Virginia is seeking an IT Risk & Controls Analyst to join their team in Vienna. About the Opportunity: * Schedule: Monday to Friday * Hours: Standard business

Trioptus

IT Quality Assurance Analyst

Montpelier, VT · On-site

IT Quality Assurance Analyst Job Type: Contract Duration: 12 months (with potential extension) Work Location: Remote Work Hours: Standard business hours (EST) Job Overview We are seeking an ...

Cymertek

Information Assurance Analyst

Aurora, CO · On-site

Information Assurance Analyst LOCATION Aurora, CO 80014 CLEARANCE TS/SCI Full Poly (Please note ... Risk Management Analyst, Compliance Analyst, IT Security Analyst, Security Operations Analyst ...

Cymertek

Information Assurance Analyst

San Antonio, TX · On-site

Information Assurance Analyst LOCATION San Antonio, TX 78208 CLEARANCE TS/SCI Full Poly (Please ... Risk Management Analyst, Compliance Analyst, IT Security Analyst, Security Operations Analyst ...

Watts

IT Risk & Compliance Analyst

Andover, MA · On-site +1

$95K - $95K/yr

Scope of Position The IT Risk & Compliance Analyst, as part of the Information Security organization, is responsible for supporting the execution of Watts' IT compliance, audit readiness ...

Cymertek

Information Assurance Analyst

Tysons, VA · On-site

Information Assurance Analyst LOCATION Tysons, VA 22182 CLEARANCE TS/SCI Full Poly (Please note ... Risk Management Analyst, Compliance Analyst, IT Security Analyst, Security Operations Analyst ...

previous page

Showing results 41-60

All JobsTechnology JobsNetworking JobsCyber Security Administrator JobsIT Risk Assurance Analyst Jobs

It Risk Assurance Analyst information

See salary details

$15

$40

$65

How much do it risk assurance analyst jobs pay per hour?

As of Sep 9, 2026, the average hourly pay for it risk assurance analyst in the United States is $40.49, according to ZipRecruiter salary data. Most workers in this role earn between $29.81 and $49.28 per hour, depending on experience, location, and employer.

What is an IT Risk Assurance Analyst?

IT Risk Assurance Analysts are professionals who identify, assess, and help mitigate risks related to information technology systems within an organization. They evaluate IT processes, controls, and systems to ensure compliance with internal policies and external regulations. Their work helps protect sensitive data, maintain system integrity, and support organizational goals by recommending improvements to reduce risk. Often, they collaborate with IT, audit, and business teams to ensure that IT risks are effectively managed.

How does an IT Risk Assurance Analyst typically interact with other departments within an organization?

As an IT Risk Assurance Analyst, collaboration with various departments is a key part of the role. Analysts regularly work with IT, audit, compliance, and business units to identify, assess, and mitigate risks. They often facilitate meetings to discuss control gaps and remediation strategies, ensuring that risk management aligns with business objectives. Building relationships and communicating technical findings in a clear, actionable way to non-technical stakeholders is crucial for success in this position.

What are the key skills and qualifications needed to thrive as an IT Risk Assurance Analyst, and why are they important?

To thrive as an IT Risk Assurance Analyst, you need a solid background in information technology, risk management, and auditing principles, often supported by a degree in IT, cybersecurity, or a related field. Familiarity with tools like GRC (Governance, Risk, and Compliance) platforms, audit management software, and relevant certifications such as CISA or CRISC is common. Strong analytical thinking, attention to detail, and effective communication are essential soft skills for identifying risks and conveying findings to stakeholders. These skills ensure that organizations maintain robust risk controls, achieve compliance, and safeguard their information assets.

What is the difference between It Risk Assurance Analyst vs Cybersecurity Analyst?

AspectIt Risk Assurance AnalystCybersecurity Analyst
CertificationsISO 27001, CISA, CISSP (preferred)CISSP, CEH, CompTIA Security+
Work EnvironmentAudit firms, consulting companies, financial institutionsIT security teams, corporate IT departments
Primary FocusAssessing IT risks, compliance, controlsDetecting and preventing security threats
Industry UsageFinancial, healthcare, governmentTechnology, finance, retail

The It Risk Assurance Analyst primarily focuses on evaluating IT controls, compliance, and risk management processes, often working in audit or consulting environments. In contrast, a Cybersecurity Analyst concentrates on protecting systems from security threats and responding to incidents. While both roles require similar certifications and work in related industries, their core responsibilities differ, with the former emphasizing risk assessment and the latter emphasizing threat prevention and response.

What cities are hiring for It Risk Assurance Analyst jobs?

Cities with the most It Risk Assurance Analyst job openings:

What states have the most It Risk Assurance Analyst jobs?

States with the most job openings for It Risk Assurance Analyst jobs include:

What are popular job titles related to It Risk Assurance Analyst jobs?

For It Risk Assurance Analyst jobs, the most frequently searched job titles are:

Principal Technology Risk Analyst - Program & Regulatory Assurance

Merrimack, NH • On-site

Fidelity Investments
Investment Management and Consulting Services • 10K+ employees
Learn more about Fidelity Investmentsexternal

Full-time

Re-posted 6 days ago

Fidelity Investments rating

8.7

Company rating: 8.7 out of 10

Based on 273 frontline employees who took The Breakroom Quiz

16th of 154 rated financial services

Job description


Title: Principal Technology Risk Analyst
Note: Fidelity will not provide immigration sponsorship for this position.
The Role
The Enterprise Technology Risk group is seeking a passionate, driven and experienced professional to contribute to the Technology Risk Program and Regulatory Assurance CoE team. This role is responsible for performing regulatory and program management responsibilities, including designing and maintaining technology controls to support program and regulatory requirements. This role will require networking and relationship management skills to collaborate with the Controls Testing team, and various business units and risk teams across the enterprise. You will be working on:
  • Ensuring risk and control taxonomy aligns with enterprise standards
  • Developing and monitoring technology controls for security and compliance
  • Providing technical support and acting as liaison for technology risk management
  • Managing control updates, annual mapping, and testing requirements
  • Design, document, and maintain Risk and Control Matrices (RCMs/RACMs) across business and IT processes
  • Continuously improve and standardize control documentation and governance practices
  • Overseeing control certification process
  • Partnering with Control Testing team to track progress and remediation
  • Representing ETRA in enterprise control initiatives and special projects
  • Supporting regulatory activities, risk assessments, and examinations
  • Leading and supporting SOX 404 compliance, including control documentation
  • Reviewing SOC reports, assessing CUECs, and communicating control gaps

The Team
The Technology Risk Program and Regulatory Assurance team is responsible for managing controls to support program requirements, monitoring the results of control testing to meet program requirements, and ensuring a consistent risk and control taxonomy is leveraged in accordance with enterprise best practices. Additionally, this team supports regulatory activities such as maintaining application, server, and database inventories by entity. Technology Risk is part of the broader Legal, Risk and Compliance group and partners with Corporate Audit, Enterprise Compliance, and Security to protect the interests of our customers, our employees, and Fidelity's brand. You will also work closely with the Enterprise Technology Risk teams as well as Fidelity technology and business owners, and Operational Risk teams.
The Expertise and Skills You Bring
  • 5 -7 years' experience in information technology risk, controls, or audit roles
  • Bachelor's degree in computer science, technology, or a related field of study preferred
  • Professional technology and associated risk certifications (CISSP, CISA, CRISC, CISM), Certified risk/fraud examiners (CRE, CFE), and/or Cloud Certification(s) (CCSP, CCSK, AWS) preferred
  • Experience documenting controls for large scale financial service organizations (cloud, distributed, vendor solutions, mainframe, network environments, and AI)
  • Demonstrated technical abilities in multiple areas (e.g., technology infrastructure and application controls, cyber security, access management, network and cloud, resiliency, etc.)
  • Working knowledge of Cloud security and controls and cloud technology environments (AWS/Azure, SaaS, PaaS)
  • You have a strong knowledge of information technology processes and controls, and a comprehensive understanding of risk, quality control and assurance functions
  • Your love of solving complex problems, and comfort with ambiguous situations, and your ability to help solution innovative ways to mitigate risk using your advanced analytical and critical thinking skills
  • Your ability to build and maintain collaborative working relationships with Information Technology and Business personnel to design effective controls
  • Your process orientation and understanding of operations and technology enabling you to provide support in the analysis, development, and monitoring of controls
  • Knowledge of Industry standards, regulations, frameworks and best practices, such as NIST SP 800-53, COBIT, AICPA Trust Principles, ISO27001, SWIFT, HITRUST, and SOX404 is preferred
  • ISO9001 and/or ISO27001 certification preferred, with responsibility to support and participate in ISO peer audit reviews.
  • Knowledge of Governance, Risk, and Compliance (GRC) tools, such as Archer is preferred
  • Your excellent verbal and written communication skills enabling you to prepare and present recommendations to senior management

Note: Fidelity will not provide immigration sponsorship for this position.
Fidelity's Onsite Working Model
Fidelity is transitioning to a full-time onsite working model through a phased rollout across regions and roles. Currently, some roles and locations require 100% onsite presence, while others require less. Onsite expectations are likely to evolve as the rollout continues. This transition does not apply to fully remote roles.
Certifications:
Category:
Information Technology
Please be advised that Fidelity's business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.

What Fidelity Investments employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply