1

It Risk Jobs in Tennessee (NOW HIRING)

2027 TRC Fall Internship

Nashville, TN · On-site

$14.50 - $19.25/hr

  • Medical

  • Dental

  • Vision

  • Retirement

  • PTO

The TRC team's service offerings include SOC 1 ® , SOC 2 ® , PCI, ISO, HIPAA, and many other IT risk and control frameworks. In addition, there are numerous consulting opportunities related to ...

2027 TRC Fall Internship

Nashville, TN

$14.50 - $19.25/hr

  • Medical

  • Dental

  • Vision

  • Retirement

  • PTO

The TRC team's service offerings include SOC 1, SOC 2, PCI, ISO, HIPAA, and many other IT risk and control frameworks. In addition, there are numerous consulting opportunities related to assessing IT ...

Title: Director - IT Security Employee Classification: Other Professionals Institution: Southwest ... The Director will guide security-related decisions, proactively manage risk, and promote a culture ...

Senior IT Compliance Analyst

La Vergne, TN · Hybrid

  • Medical

  • Dental

  • Vision

  • Life

  • Retirement

  • PTO

Provides strategic guidance to leadership on risk, governance, and regulatory adherence. This ... Bachelor's degree in Computer Science, Information Technology, Information Security, Business or ...

next page

Showing results 1-20

It Risk information

See Tennessee salary details

$13

$27

$67

How much do it risk jobs pay per hour?

As of Aug 18, 2026, the average hourly pay for it risk in Tennessee is $27.53, according to ZipRecruiter salary data. Most workers in this role earn between $17.69 and $35.14 per hour, depending on experience, location, and employer.

What is IT risk?

IT risk refers to the potential for losses or negative impacts to an organization resulting from the use of information technology. This includes threats such as data breaches, cyberattacks, system failures, and non-compliance with regulations. IT risk management involves identifying, assessing, and mitigating these risks to protect an organization’s information assets and ensure business continuity.

What are the key skills and qualifications needed to thrive as an IT risk professional, and why are they important?

To thrive as an IT Risk professional, you need a strong understanding of information security principles, risk management frameworks, and relevant regulations, typically supported by a degree in information technology or cybersecurity. Familiarity with risk assessment tools, GRC (Governance, Risk, and Compliance) systems, and certifications such as CISM or CISSP is highly valued. Analytical thinking, attention to detail, and effective communication are vital soft skills for identifying vulnerabilities and collaborating with stakeholders. These competencies are crucial for proactively managing threats and ensuring the organization's information assets remain secure and compliant.

What are some common challenges faced by IT risk professionals when working with cross-functional teams?

IT Risk professionals often collaborate with various departments such as IT, compliance, finance, and operations. A common challenge is effectively communicating technical risks in terms that non-technical stakeholders can understand, ensuring alignment on priorities and mitigation strategies. Navigating differing risk tolerances and balancing business needs with security requirements can also present difficulties. Building strong relationships and fostering ongoing dialogue are key to overcoming these challenges and ensuring successful risk management across the organization.

What is the difference between It Risk vs Cybersecurity Analyst?

AspectIt RiskCybersecurity Analyst
Required CredentialsCertifications like CRISC, CISSP, CISACertifications like CompTIA Security+, CISSP, CEH
Work EnvironmentRisk management teams, compliance departmentsSecurity operations centers, IT departments
Employer & Industry UsageFinancial, healthcare, and large enterprisesTech firms, finance, government agencies

It Risk professionals focus on identifying, assessing, and mitigating risks related to IT systems and compliance. Cybersecurity Analysts primarily monitor and respond to security threats and incidents. While both roles require similar certifications and work in overlapping environments, It Risk emphasizes risk management strategies, whereas Cybersecurity Analysts concentrate on security operations and threat response.

Do IT risk analysts make good money?

IT risk analysts typically earn competitive salaries that vary by experience, location, and industry. Entry-level positions may start around $60,000 annually, while experienced analysts can earn over $100,000, especially with certifications like CISSP or CISA. The role often involves working with cybersecurity tools and risk assessment frameworks.

Is risk analyst an IT job?

A risk analyst in the IT field evaluates technology-related risks, such as cybersecurity threats and system vulnerabilities, often using data analysis tools and risk management frameworks. The role typically requires knowledge of IT systems, security protocols, and relevant certifications like CISSP or CRISC.

What are the most commonly searched types of It Risk jobs in Tennessee?

The most popular types of It Risk jobs in Tennessee are:

Infographic showing various It Risk job openings in Tennessee as of August 2026, with employment types broken down into 1% As Needed, 91% Full Time, 6% Part Time, and 2% Contract. Highlights an 87% Physical, 5% Hybrid, and 8% Remote job distribution, with an average salary of $57,270 per year, or $27.5 per hour.

Director, IT Risk and Controls - Remote Position

York Risk Services

Memphis, TN • Remote

Full-time

Posted 20 days ago


Job description

By joining Sedgwick, you'll be part of something truly meaningful. It's what our 33,000 colleagues do every day for people around the world who are facing the unexpected. We invite you to grow your career with us, experience our caring culture, and enjoy work-life balance. Here, there's no limit to what you can achieve.

Newsweek Recognizes Sedgwick as America's Greatest Workplaces National Top Companies

Certified as a Great Place to Work

Fortune Best Workplaces in Financial Services & Insurance

Director, IT Risk and Controls - Remote Position

PRIMARY PURPOSE OF THE ROLE: The Director IT Risk and Controls leads Sedgwick's IT risk and control governance activities, including SOX-related technology controls, IT General Controls (ITGCs), and broader technology risk and control processes. The role provides subject matter expertise, guidance, and oversight to support a consistent and sustainable control environment while partnering with Technology, Finance, Risk, Compliance, and Audit stakeholders to identify risks, strengthen controls, and support regulatory and governance requirements.

ESSENTIAL RESPONSIBILITIES MAY INCLUDE

  • Leads the enterprise IT risk and control governance program, encompassing SOX, ITGCs, and broader technology risk and control activities, including IT risk assessments, control scoping and design, framework governance, and management reporting.
  • Directs governance operations, including risk assessments, control documentation, issue management processes, governance reporting, control inventories, repositories, and executive reporting to support effective program administration and leadership decision-making.
  • Serves as the senior subject matter expert for IT SOX compliance, ITGCs, automated controls, key reports, interfaces, end-user computing controls, third-party dependencies, and other technology controls supporting business and financial reporting objectives.
  • Owns and maintains risk and control governance documentation, including narratives, RCMs, control descriptions, policies, standards, evidence requirements, control-owner guidance, and system inventories.
  • Advises control owners and Technology leaders on risk identification, control design, segregation of duties, evidence requirements, compensating controls, and sustainable control execution.
  • Partners with the IT Compliance function by providing program context, documentation, reporting, and management input while maintaining appropriate separation from independent assurance, testing, and remediation oversight activities.
  • Monitors and reports on control effectiveness using attestations, operational metrics, continuous monitoring results, and assurance inputs; identifies trends, recurring risk themes, and matters requiring leadership attention.
  • Maintains governance visibility of control deficiencies, risk exposures, and related remediation activities for reporting and management awareness while independent oversight and validation remain the responsibility of the IT Compliance function.

SUPERVISORY RESPONSIBILITIES

  • Provides support, guidance, leadership and motivation to promote maximum performance.
  • Administers company personnel policies in all areas and follows company staffing standards and training recommendations.
  • Interviews, hires and establishes colleague performance development plans; conducts colleague performance discussions.

QUALIFICATIONS

Advanced degree in Accounting, Finance, Information Systems, Business or a related field, from an accredited college or university preferred. CISA certification strongly preferred. Additional certifications such as CPA, CRISC, CIA, CISSP, or equivalent are beneficial.

Ten (10) years of related, progressive experience in IT risk management, IT controls, IT SOX compliance, technology governance, or IT audit, including significant leadership of enterprise risk and control activities in a complex organization or equivalent combination of education and experience required. Demonstrated experience assessing technology risks; scoping systems and dependencies; and designing or advising on ITGCs, automated controls, key reports, interfaces, third-party controls, and other risk-mitigating controls highly preferred.

Skills & Knowledge

  • Advanced knowledge of SOX requirements, IT General Controls, technology risk management practices, and governance frameworks, including COSO and COBIT.
  • Proven ability to evaluate control design and effectiveness information, identify risk themes, develop well-supported governance recommendations, and communicate implications to senior management and control stakeholders
  • Ability to partner effectively with IT Compliance, Internal Audit, External Audit, Enterprise Risk, Finance, Security, and Technology teams in complex, multi-system, and/or global operating environments
    Strong command of risk assessment, control design, control execution, evidence expectations, control-effectiveness reporting, issue classification, and sustainable control ownership
  • Ability to translate complex technical risks and control-effectiveness information into clear business, operational, and financial reporting implications
  • Executive-level written and verbal communication skills, including the ability to explain and support well-reasoned risk and control positions with senior leaders and assurance stakeholders
  • Ability to influence without direct authority, establish accountability, and drive cross-functional decisions across a broad technology risk and control environment
  • Advanced analytical, problem-solving, and professional judgment skills with a high degree of integrity, objectivity, and attention to detail
  • Working knowledge of governance, risk, and compliance platforms, control-management tools, workflow automation, and continuous monitoring solutions
  • Ability to manage multiple priorities and lead a year-round IT risk and control governance program in a fast-paced environment
  • Ability to work in a team environment
  • Ability to meet or exceed Performance Competencies

WORK ENVIRONMENT

When applicable and appropriate, consideration will be given to reasonable accommodations.

Mental: Clear and conceptual thinking ability; excellent judgment, troubleshooting, problem solving, analysis, and discretion; ability to handle work-related stress; ability to handle multiple priorities simultaneously; and ability to meet deadlines

Physical: Computer keyboarding, travel as required

Auditory/Visual: Hearing, vision and talking

The statements contained in this document are intended to describe the general nature and level of work being performed by a colleague assigned to this description. They are not intended to constitute a comprehensive list of functions, duties, or local variances. Management retains the discretion to add or to change the duties of the position at any time.

#LI-TS1 #remote

Qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers, the City of Los Angeles' Fair Chance Initiative for Hiring Ordinance, the San Diego Fair Chance Ordinance, the San Francisco Fair Chance Ordinance, the California Fair Chance Act, and all other applicable laws.

Sedgwickis an Equal Opportunity Employer and a Drug-Free Workplace.

If you're excited about this role but your experience doesn't align perfectly with every qualification in the job description, consider applying for it anyway! Sedgwick is building a diverse, equitable, and inclusive workplace and recognizes that each person possesses a unique combination of skills, knowledge, and experience. You may be just the right candidate for this or other roles.