1

It Risk Jobs in Massachusetts (NOW HIRING)

Senior IT Audit Manager

Waltham, MA · On-site

$130 - $175/hr

... risk, and ensure timely execution of remediation efforts while enabling strategic technology ... Own and lead the ITGC and IT internal audit program, including planning, coordination, execution ...

The IT Internal Auditor supports the execution of the Company's Internal Audit plan, with ... governance and risk management practices, and helps enhance the overall control environment.

The IT Internal Auditor supports the execution of the Company's Internal Audit plan, with ... governance and risk management practices, and helps enhance the overall control environment.

$130K - $175K/yr

This role will strengthen the company's control environment, reduce compliance and operational risk ... Own and lead the ITGC and IT internal audit program, including planning, coordination, execution ...

Senior IT Audit Manager

Waltham, MA · On-site

$130K - $175K/yr

This role will strengthen the company's control environment, reduce compliance and operational risk ... Develop and maintain scalable IT compliance processes, templates, metrics, dashboards, and ...

Senior IT Audit Manager

Waltham, MA · On-site

$130K - $175K/yr

This role will strengthen the company's control environment, reduce compliance and operational risk ... Develop and maintain scalable IT compliance processes, templates, metrics, dashboards, and ...

Develop and maintain the enterprise IT risk assessment framework and technology audit universe, ensuring coverage of critical risks across infrastructure, cloud platforms, ERP systems, cybersecurity ...

Senior Principal, Internal Audit, IT

Bedford, MA · On-site

$88K - $110K/yr

Develop and maintain the enterprise IT risk assessment framework and technology audit universe, ensuring coverage of critical risks across infrastructure, cloud platforms, ERP systems, cybersecurity ...

Senior IT Audit Specialist

Rockland, MA

$100K - $131K/yr

Lead and execute risk-based audits covering IT Governance, Cybersecurity, Information Security, Technology Operations, Cloud Computing, Infrastructure, Data Management, Digital Banking, and Emerging ...

Lead and execute risk-based audits covering IT Governance, Cybersecurity, Information Security, Technology Operations, Cloud Computing, Infrastructure, Data Management, Digital Banking, and Emerging ...

New

Senior IT Audit Specialist

Rockland, MA · On-site

$100K - $131K/yr

Lead and execute risk-based audits covering IT Governance, Cybersecurity, Information Security, Technology Operations, Cloud Computing, Infrastructure, Data Management, Digital Banking, and Emerging ...

Senior IT Audit Specialist

Rockland, MA

$100K - $131K/yr

Lead and execute risk-based audits covering IT Governance, Cybersecurity, Information Security, Technology Operations, Cloud Computing, Infrastructure, Data Management, Digital Banking, and Emerging ...

Limited SOX focus; primarily project + risk-based IT audits * Strong bonus program + annual equity ... CISA required 5+ years of IT Audit, Technology Risk, Cybersecurity, or Advisory experience Big 4 ...

Showing results 21-40

It Risk information

See Massachusetts salary details

$15

$33

$80

How much do it risk jobs pay per hour?

As of Aug 19, 2026, the average hourly pay for it risk in Massachusetts is $33.13, according to ZipRecruiter salary data. Most workers in this role earn between $21.25 and $42.26 per hour, depending on experience, location, and employer.

What is IT risk?

IT risk refers to the potential for losses or negative impacts to an organization resulting from the use of information technology. This includes threats such as data breaches, cyberattacks, system failures, and non-compliance with regulations. IT risk management involves identifying, assessing, and mitigating these risks to protect an organization’s information assets and ensure business continuity.

What are the key skills and qualifications needed to thrive as an IT risk professional, and why are they important?

To thrive as an IT Risk professional, you need a strong understanding of information security principles, risk management frameworks, and relevant regulations, typically supported by a degree in information technology or cybersecurity. Familiarity with risk assessment tools, GRC (Governance, Risk, and Compliance) systems, and certifications such as CISM or CISSP is highly valued. Analytical thinking, attention to detail, and effective communication are vital soft skills for identifying vulnerabilities and collaborating with stakeholders. These competencies are crucial for proactively managing threats and ensuring the organization's information assets remain secure and compliant.

What are some common challenges faced by IT risk professionals when working with cross-functional teams?

IT Risk professionals often collaborate with various departments such as IT, compliance, finance, and operations. A common challenge is effectively communicating technical risks in terms that non-technical stakeholders can understand, ensuring alignment on priorities and mitigation strategies. Navigating differing risk tolerances and balancing business needs with security requirements can also present difficulties. Building strong relationships and fostering ongoing dialogue are key to overcoming these challenges and ensuring successful risk management across the organization.

What is the difference between It Risk vs Cybersecurity Analyst?

AspectIt RiskCybersecurity Analyst
Required CredentialsCertifications like CRISC, CISSP, CISACertifications like CompTIA Security+, CISSP, CEH
Work EnvironmentRisk management teams, compliance departmentsSecurity operations centers, IT departments
Employer & Industry UsageFinancial, healthcare, and large enterprisesTech firms, finance, government agencies

It Risk professionals focus on identifying, assessing, and mitigating risks related to IT systems and compliance. Cybersecurity Analysts primarily monitor and respond to security threats and incidents. While both roles require similar certifications and work in overlapping environments, It Risk emphasizes risk management strategies, whereas Cybersecurity Analysts concentrate on security operations and threat response.

Do IT risk analysts make good money?

IT risk analysts typically earn competitive salaries that vary by experience, location, and industry. Entry-level positions may start around $60,000 annually, while experienced analysts can earn over $100,000, especially with certifications like CISSP or CISA. The role often involves working with cybersecurity tools and risk assessment frameworks.

Is risk analyst an IT job?

A risk analyst in the IT field evaluates technology-related risks, such as cybersecurity threats and system vulnerabilities, often using data analysis tools and risk management frameworks. The role typically requires knowledge of IT systems, security protocols, and relevant certifications like CISSP or CRISC.

What are the most commonly searched types of It Risk jobs in Massachusetts?

The most popular types of It Risk jobs in Massachusetts are:

Infographic showing various It Risk job openings in Massachusetts as of August 2026, with employment types broken down into 1% As Needed, 91% Full Time, 6% Part Time, and 2% Contract. Highlights an 87% Physical, 5% Hybrid, and 8% Remote job distribution, with an average salary of $68,913 per year, or $33.1 per hour.

Senior IT Audit Manager

Repligen Corp

Waltham, MA • On-site

$130 - $175/hr

Other

Medical, Dental, Vision, Retirement, PTO

Re-posted 12 days ago


Repligen rating

7.6

Company rating: 7.6 out of 10

Based on 13 frontline employees who took The Breakroom Quiz


Job description

Role Overview

This role will strengthen the company's control environment, reduce compliance and operational risk, and ensure timely execution of remediation efforts while enabling strategic technology investments to be implemented with appropriate governance. As the organization grows toward its long‑term revenue objectives, this position provides critical capacity to support scalable, sustainable, and audit‑ready IT operations.

Responsibilities
  • Own and lead the ITGC and IT internal audit program, including planning, coordination, execution support, documentation quality, issue management, and executive‑level status reporting.
  • Serve as a senior advisor to IT and business control owners on SOX ITGCs, automated controls, key reports, IT‑dependent controls, governance expectations, and sustainable control design.
  • Collaborate with the ITGC Manager to manage end‑to‑end audit lifecycle activities with external auditors and internal stakeholders, including walkthroughs, evidence readiness, testing coordination, deficiency evaluation, and timely issue resolution.
  • Lead the assessment of IT control risks across enterprise applications, infrastructure, cybersecurity, access management, change management, operations, and emerging technology initiatives.
  • Oversee remediation of IT‑related audit findings and corrective actions, ensuring action plans address root cause, are appropriately documented, and are validated for operating effectiveness.
  • Partner with IT leadership, project teams, and process owners to embed control requirements into new system implementations, enhancements, SDLC activities, and process transformation initiatives.
  • Develop and maintain scalable IT compliance processes, templates, metrics, dashboards, and governance routines to improve program maturity, efficiency, consistency, and accountability.
  • Partner with the ITGC Manager on continuous improvement efforts to reduce audit friction, strengthen evidence quality, improve control owner readiness, and enhance the overall IT risk and compliance operating model.
  • Manage internal corrective actions assigned to IT, coordinating with subject‑matter experts to identify and push forward remediation plans.
  • Provide coaching, direction, and quality review for team members, consultants, or control owners supporting ITGC, SOX, and internal audit activities.
Qualifications
  • Bachelor’s degree in Information Systems, Accounting, Finance, Computer Science, or a related field.
  • Minimum of 8 years of progressive experience in external audit, internal audit, IT compliance, IT risk management, or SOX advisory, with significant focus on IT General Controls and enterprise application controls.
  • Demonstrated experience leading audit programs, managing cross‑functional stakeholders, and presenting risk and compliance matters to senior leaders.
  • Strong understanding of ITGC domains, including access management, change management, computer operations, interface controls, automated controls, key reports, and SDLC governance.
  • Experience supporting enterprise environments such as SAP, Workday, ServiceNow, and related business applications preferred.
  • People leadership, indirect leadership, or consultant management experience preferred; ability to coach control owners and influence without authority required.
  • Excellent written and verbal communication skills, with the ability to translate complex IT risk and control topics into clear, actionable guidance for business and technology leaders.
Compensation and Benefits

The estimated salary range for this role, based in the United States of America is $130,000-$175,000. Compensation decisions are dependent on several factors, including, but not limited to, an individual's qualifications, location, internal equity, and alignment with market data. Additionally, employees are eligible to participate in one of our variable cash programs (bonus or commission) and may receive equity as part of the compensation package. We offer a wide range of benefits such as paid time off, health/dental/vision, retirement benefits, and flexible spending accounts. All compensation and benefits information will be confirmed in writing at the time of offer.

#J-18808-Ljbffr

What Repligen employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom