1

It Risk Manager Jobs in Oregon (NOW HIRING)

OR · On-site

As the Senior Manager, Technology Risk you will lead the second-line technology and information security risk oversight program for Upstart Bank. You will establish the bank's 2LOD technology risk ...

... ation Security Governance Work Shift: Day Work Days: MON-FRI Scheduled Hours: 8:30 AM-5 PM Scheduled Daily Hours: 8 HOURS Pay Range: $96,000.00-$120,000.00 The Security Risk Management Analyst will ...

IT Director

Bend, OR · On-site

$102K - $107K/yr

Risk Management: Identifying, assessing, and mitigating risks associated with IT projects. * Stakeholder Communication: Keeping stakeholders informed about project progress, challenges, and outcomes.

IT Manager

Portland, OR · Remote

$70K - $116K/yr

Experience supporting enterprise IT systems, including Microsoft environments. * Track record of ... CorVel Careers | Opportunities in Risk Management In general, our opportunities will be posted for ...

IT Manager

Portland, OR · Remote

$70K - $116K/yr

Experience supporting enterprise IT systems, including Microsoft environments. * Track record of ... CorVel Careers | Opportunities in Risk Management In general, our opportunities will be posted for ...

IT Manager

Portland, OR · On-site

$70K - $116K/yr

Experience supporting enterprise IT systems, including Microsoft environments. * Track record of ... CorVel Careers | Opportunities in Risk Management In general, our opportunities will be posted for ...

OR · On-site

$93K - $123K/yr

Risk Management and Process Improvement: * Perform periodic risk assessments related to IT ... Identify opportunities to automate IT controls and improve process efficiency. * Testing and ...

IT Manager

Wilsonville, OR

$98K - $120K/yr

Conduct ongoing risk assessments, vulnerability mitigation, and infrastructure lifecycle planning ... * 5+ years of IT team leadership or management experience * Proven experience securing and ...

next page

Showing results 1-20

It Risk Manager information

See Oregon salary details

$54.5K

$117.9K

$179.7K

How much do it risk manager jobs pay per year?

As of Jun 21, 2026, the average yearly pay for it risk manager in Oregon is $117,947.00, according to ZipRecruiter salary data. Most workers in this role earn between $95,200.00 and $136,400.00 per year, depending on experience, location, and employer.

What are some common challenges faced by IT Risk Managers when implementing risk mitigation strategies across different departments?

IT Risk Managers often encounter challenges such as varying levels of risk awareness among departments, resistance to new controls or procedures, and balancing business objectives with security requirements. Successful risk mitigation requires clear communication, stakeholder buy-in, and tailored training to ensure all teams understand the importance of compliance. Building strong relationships and fostering a culture of shared responsibility are key to overcoming these hurdles and ensuring effective risk management across the organization.

Do risk managers make good money?

Risk managers typically earn competitive salaries that vary based on experience, industry, and location. According to industry data, median annual pay ranges from $80,000 to over $130,000, with higher earnings possible for those with certifications like FRM or CRM and extensive experience. They often work in corporate environments, analyzing and mitigating financial, operational, or cybersecurity risks.

What are the key skills and qualifications needed to thrive as an IT Risk Manager, and why are they important?

To thrive as an IT Risk Manager, you need a solid understanding of risk assessment, information security, and compliance frameworks, often backed by a bachelor's degree in information technology or related fields. Familiarity with tools such as risk management software, GRC platforms, and certifications like CISSP, CISM, or CRISC is typically required. Strong analytical thinking, communication skills, and the ability to influence stakeholders are crucial soft skills in this role. These skills ensure effective identification, mitigation, and communication of IT risks, supporting organizational resilience and compliance.

What does an IT Risk Manager do?

An IT Risk Manager is responsible for identifying, assessing, and mitigating risks that could impact an organization's information technology systems and data. They develop and implement risk management strategies, policies, and procedures to protect against cybersecurity threats, data breaches, and compliance violations. IT Risk Managers also work closely with other departments to ensure security best practices are followed and often lead risk assessments, audits, and incident response planning.

What is the difference between It Risk Manager vs Cybersecurity Analyst?

AspectIt Risk ManagerCybersecurity Analyst
CertificationsCRISC, CISSP, CISMCISSP, Security+, CEH
Work EnvironmentOversees risk management strategies across IT systemsMonitors and responds to security threats and incidents
Industry UsageUsed in organizations with complex IT infrastructuresCommon in security-focused roles across industries

The It Risk Manager focuses on identifying and managing IT risks at an organizational level, ensuring compliance and risk mitigation strategies. In contrast, a Cybersecurity Analyst primarily monitors security threats and responds to incidents. While both roles require similar certifications and work within the IT security domain, the It Risk Manager has a broader scope related to risk management policies, whereas the Cybersecurity Analyst concentrates on threat detection and response.

How much does a risk manager get paid?

Risk managers typically earn a median annual salary of around $100,000, with salaries ranging from approximately $70,000 to over $150,000 depending on experience, industry, and location. Professionals often hold certifications like CRM or FRM and work in finance, insurance, or corporate sectors.

Are risk managers in high demand?

Risk managers are in high demand across various industries due to increasing concerns about cybersecurity, compliance, and operational risks. Employers seek professionals with skills in risk assessment, mitigation strategies, and certifications like FRM or CRM, making it a growing field with strong job prospects.

What is the role of IT risk manager?

An IT risk manager is responsible for identifying, assessing, and mitigating information technology risks within an organization. They develop security policies, implement controls, and ensure compliance with industry standards to protect digital assets and infrastructure. Strong knowledge of cybersecurity, risk management frameworks, and relevant certifications like CISSP or CISM are often required.
What cities in Oregon are hiring for It Risk Manager jobs? Cities in Oregon with the most It Risk Manager job openings:
Infographic showing various It Risk Manager job openings in Oregon as of June 2026, with employment types broken down into 85% Full Time, 7% Part Time, 7% Contract, and 1% Nights. Highlights an 92% Physical, 2% Hybrid, and 6% Remote job distribution, with an average salary of $117,947 per year, or $56.7 per hour.
IT Risk and Compliance Analyst

IT Risk and Compliance Analyst

Noblesoft Technologies

Portland, OR • On-site

$99K - $100K/yr

Contractor

Posted 15 days ago


Job description

Job Description:

We are seeking a highly motivated and detail-oriented IT Risk and Compliance Analyst to join our team. The ideal candidate will be responsible for ensuring that IT risk management processes are embedded in the enterprise, enabling optimal risk assessments returns. This role involves supporting IT risk governance internal and external assessments and audits and working on problems of diverse scope where analysis of data requires evaluation.

Job Duration: Minimum six months with option to renew.

Key Responsibilities:

• Provide Consulting for IT Risk Management, Compliance & Metrics

• Monitor & Report on IT Controls Compliance - monitor first line of defense.

• Facilitate Assessments and Audits – represent customer’s Info Sec Program for regulators and customers.

• Contribute to the Establishment & Maintenance of Primary Common Controls that align with business, regulatory and information security goals.

• Provide independent oversight of the risk management activities of the Service Owners.

• Perform independent validation to evaluate the adequacy and effectiveness of key controls.

Qualifications:

• Bachelor's degree in Information Technology, Risk Management, or a related field.

• Minimum of 5 years of experience in IT risk management and compliance.

• Strong understanding of IT risk governance principles and practices.

• Experience with cybersecurity regulation requirements and industry standards.

• Excellent analytical and problem-solving skills.

• Strong communication and interpersonal skills.

• Project Leadership

Preferred Qualifications:

• Experience with on prem and cloud platforms.

• Knowledge of SOC 1, SOC 2, ISO 27001:2022, and HIPAA regulations.

• CISA certification.

• CRISC certification.