1

It Risk Manager Jobs in California (NOW HIRING)

Managing a small team, you willwork closely with senior leaders across IT, Security Engineering, General Counsel, and firm leadership to shape how risk is understood, measured, and managed. The role ...

The Manager of IT Internal Audit (Risk & Ops) will support Figma's IT SOX compliance program and, in partnership with the Head of Internal Audit, develop the IT risk management and risk-based ...

IT Risk & Compliance Analyst

San Francisco, CA · On-site

$110.70K - $111.30K/yr

Job Title: IT Risk & Compliance Analyst Job Location: San Francisco, CA 94104 * Please local ... Manage the LogicGate Governance Library ensuring Information Security and Technology documents ...

The Manager of IT Internal Audit (Risk & Ops) will support Figma's IT SOX compliance program and, in partnership with the Head of Internal Audit, develop the IT risk management and risk-based ...

The Manager of IT Internal Audit (Risk & Ops) will support Figma's IT SOX compliance program and, in partnership with the Head of Internal Audit, develop the IT risk management and risk-based ...

IT Program Project Manager

Santa Clara, CA · Hybrid

$114.80K - $135.80K/yr

Governance Risk and Compliance GRC and IT Risk Management, Project Planning, Pursuit/ Proposal Management, Risk/Crisis Management We are seeking an accomplished IT Program Project Manager with deep ...

Work with client senior management to design, and implement new IT risk and control frameworks, sustainable solutions (including applying knowledge of governance, risk and security tools), operating ...

next page

Showing results 1-20

It Risk Manager information

See California salary details

$50.8K

$110.1K

$167.8K

How much do it risk manager jobs pay per year?

As of May 28, 2026, the average yearly pay for it risk manager in California is $110,095.00, according to ZipRecruiter salary data. Most workers in this role earn between $88,800.00 and $127,300.00 per year, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive as an IT Risk Manager, and why are they important?

To thrive as an IT Risk Manager, you need a solid understanding of risk assessment, information security, and compliance frameworks, often backed by a bachelor's degree in information technology or related fields. Familiarity with tools such as risk management software, GRC platforms, and certifications like CISSP, CISM, or CRISC is typically required. Strong analytical thinking, communication skills, and the ability to influence stakeholders are crucial soft skills in this role. These skills ensure effective identification, mitigation, and communication of IT risks, supporting organizational resilience and compliance.

What are some common challenges faced by IT Risk Managers when implementing risk mitigation strategies across different departments?

IT Risk Managers often encounter challenges such as varying levels of risk awareness among departments, resistance to new controls or procedures, and balancing business objectives with security requirements. Successful risk mitigation requires clear communication, stakeholder buy-in, and tailored training to ensure all teams understand the importance of compliance. Building strong relationships and fostering a culture of shared responsibility are key to overcoming these hurdles and ensuring effective risk management across the organization.

What does an IT Risk Manager do?

An IT Risk Manager is responsible for identifying, assessing, and mitigating risks that could impact an organization's information technology systems and data. They develop and implement risk management strategies, policies, and procedures to protect against cybersecurity threats, data breaches, and compliance violations. IT Risk Managers also work closely with other departments to ensure security best practices are followed and often lead risk assessments, audits, and incident response planning.

What is the difference between It Risk Manager vs Cybersecurity Analyst?

AspectIt Risk ManagerCybersecurity Analyst
CertificationsCRISC, CISSP, CISMCISSP, Security+, CEH
Work EnvironmentOversees risk management strategies across IT systemsMonitors and responds to security threats and incidents
Industry UsageUsed in organizations with complex IT infrastructuresCommon in security-focused roles across industries

The It Risk Manager focuses on identifying and managing IT risks at an organizational level, ensuring compliance and risk mitigation strategies. In contrast, a Cybersecurity Analyst primarily monitors security threats and responds to incidents. While both roles require similar certifications and work within the IT security domain, the It Risk Manager has a broader scope related to risk management policies, whereas the Cybersecurity Analyst concentrates on threat detection and response.

What cities in California are hiring for It Risk Manager jobs? Cities in California with the most It Risk Manager job openings:
Infographic showing various It Risk Manager job openings in California as of May 2026, with employment types broken down into 1% As Needed, 81% Full Time, 17% Part Time, and 1% Contract. Highlights an 96% Physical, 2% Hybrid, and 2% Remote job distribution, with an average salary of $110,095 per year, or $52.9 per hour.

Manager, IT Risk Operations

Wilson Sonsini Goodrich and Rosati

Palo Alto, CA • On-site

$147.05K - $198.95K/yr

Full-time

Posted 18 days ago


Job description

Wilson Sonsini is the premier legal advisor to technology, life sciences, and other growth enterprises worldwide. We represent companies at every stage of development, from entrepreneurial start-ups to multibillion-dollar global corporations, as well as the venture firms, private equity firms, and investment banks that finance and advise them. The firm has approximately 1,100 attorneys in 17 offices: 13 in the U.S., two in China, and two in Europe. Our broad spectrum of practices and entrepreneurial spirit allow exceptional opportunities for professional achievement and career growth.
Essential Duties and Responsibilities:
This high-impact position in the Governance, Risk & Compliance function sits at the center of the firm's technology, security, and operational ecosystem. Managing a small team, you will work closely with senior leaders across IT, Security Engineering, General Counsel, and firm leadership to shape how risk is understood, measured, and managed.
The role can be 100% remote or hybrid-in person if located near a physical office.
Strengthen IT Governance & Controls
  • Lead the development of executive-level reporting on IT risk, compliance posture, and operational performance
  • Build and evolve KPI/KRI dashboards that provide real-time visibility into risk trends and control effectiveness
  • Translate complex IT and security data into meaningful insights for decision making
  • Ensure adherence to IT policies, standards, and leading frameworks (e.g., NIST, ISO 27001)
  • Own and evolve the firm's IT risk register and Risk & Control Self-Assessment (RCSA) program
  • Identify emerging and systemic risks across IT, security, privacy, and operational processes

Incident Governance & Investigations
  • Partner with General Counsel, Security, and IT to lead internal investigations

Own ITSM Governance & ServiceNow Analytics
  • Oversee governance and reporting across the IT Service Management (ITSM) ecosystem
  • Analyze incident, change, and problem management data to identify trends and improvement opportunities
  • Drive workflow optimization and automation within ServiceNow

Vendor Risk Management
  • Review and advise on vendor agreements
  • Enhance vendor risk processes, including risk tiering, assessments, and monitoring
  • Identify opportunities to streamline processes, enhance reporting, and improve governance
  • Introduce data-driven approaches to risk management and operational oversight
  • Perform related duties as assigned or directed by supervisor
  • Maintain compliance with all firm policies and procedures

Education and/or Work Experience Requirements:
  • Bachelor's degree preferred
  • Seven years of experience in IT risk, security compliance, technology audit, or IT governance preferred
  • Experience operating in complex, regulated environments (e.g., law firms, financial services, consulting) preferred
  • Proven ability to lead reporting, analytics, and governance initiatives
  • Familiarity with ServiceNow and ITSM reporting including understanding of incident, change, and problem management lifecycles
  • Experience with security and collaboration platforms such as Microsoft 365, Purview and email security tools
  • Working knowledge of frameworks such as the NIST Cybersecurity Framework, ISO/IEC 27001 and SOC 2
  • Strong understanding of control design, risk registers, RCSA programs, and audit response
  • Basic understanding of privacy regulations
  • CISA, CISSP, CRISC, CTPRM and/or ITIL preferred
The primary location for this job posting is in Palo Alto, but other locations may be listed. The actual base pay offered will depend upon a variety of factors, including but not limited to the selected candidate's qualifications, years of relevant experience, level of education, professional certifications and licenses, and work location. The anticipated pay range for this position is as follows:
Palo Alto, New York, San Francisco: $163,200 - $220,800 per year.Austin, Boston, Boulder, Century City, Los Angeles, Salt Lake City, San Diego, Seattle: $147,050 - $198,950 per year.
The compensation for this position may include a discretionary year-end merit bonus based on performance. We offer a highly competitive salary and benefits package.
Benefits information can be found here. Equal Opportunity Employer (EOE).