ZipRecruiter

Log In

1

Technology Risk Manager Jobs in Iowa (NOW HIRING)

CIVCO Medical Solutions

Director, IT

Coralville, IA · On-site

Manage departmental budgets, capital planning, forecasting, and technology investment prioritization. Business Continuity, Risk & Incident Leadership * Govern IT business continuity, disaster ...

Ubertal Inc

IT Vendor Manager

Des Moines, IA · On-site

$92K - $113K/yr

Position Title: IT Vendor Manager Location: Des Moines, IA Engagement Type: Contract Work Mode ... Minimum 3 years tracking SLAs, KPIs, and risk metrics and driving corrective actions for ...

Pella Corporation

Sr. Manager, Internal Audit

Pella, IA · On-site

$91K - $125K/yr

This role emphasizes operational, technology, and strategic risk, not just financial controls. It ... Enterprise Risk Management (ERM) * Lead and evolve the ERM program to ensure the organization ...

Stellar Industries Inc

IT Director

Garner, IA · On-site

... readiness and risk management. Partner with security leadership to embed enterprise security ... Lead IT infrastructure integration efforts for mergers and acquisitions. Own I&O financial ...

next page

Showing results 1-20

All JobsTechnology Risk Manager JobsTechnology Risk Manager Jobs in Iowa

Technology Risk Manager information

See Iowa salary details

$48.4K

$104.8K

$159.7K

How much do technology risk manager jobs pay per year?

As of Jun 18, 2026, the average yearly pay for technology risk manager in Iowa is $104,781.00, according to ZipRecruiter salary data. Most workers in this role earn between $84,500.00 and $121,200.00 per year, depending on experience, location, and employer.

What is the difference between Technology Risk Manager vs Cybersecurity Analyst?

AspectTechnology Risk ManagerCybersecurity Analyst
CertificationsCRISC, CISSP, CISACISSP, CEH, Security+
Work EnvironmentRisk assessment, policy development, complianceMonitoring security threats, incident response, vulnerability analysis
Industry UsageFinancial, healthcare, technology firmsIT security teams, government agencies, corporations

The Technology Risk Manager focuses on identifying and mitigating overall technology risks and ensuring compliance, while the Cybersecurity Analyst concentrates on protecting systems from security threats and responding to incidents. Both roles require similar certifications and often work within the same industries, but their core responsibilities differ in scope and focus.

What are some common challenges Technology Risk Managers face when working across different departments?

Technology Risk Managers often encounter challenges in aligning risk management strategies with the priorities of various business units. Departments may have differing levels of risk tolerance, technical understanding, and resource availability, which can make establishing consistent policies and controls difficult. Success in the role relies on strong communication and negotiation skills, as well as the ability to educate stakeholders about the importance of risk mitigation while balancing business objectives. Building collaborative relationships and maintaining flexibility are key to overcoming these cross-departmental challenges.

What are the key skills and qualifications needed to thrive as a Technology Risk Manager, and why are they important?

To thrive as a Technology Risk Manager, you need expertise in risk assessment, cybersecurity principles, and regulatory compliance, often supported by a degree in information security or related fields. Familiarity with risk management frameworks (such as NIST or ISO 27001), GRC (governance, risk, and compliance) tools, and certifications like CISM or CISSP are typically required. Strong analytical thinking, communication, and stakeholder management skills help you translate technical risks into business terms and coordinate mitigation efforts. These abilities are critical to proactively identifying threats and ensuring organizational resilience against evolving technology risks.

What are Technology Risk Managers?

Technology Risk Managers are professionals responsible for identifying, assessing, and mitigating risks associated with information technology systems and processes within an organization. They ensure that IT operations comply with regulations and best practices while safeguarding data and technology assets from threats such as cyberattacks, data breaches, and system failures. Their work involves developing risk management strategies, conducting risk assessments, and collaborating with other departments to ensure the organization's technology infrastructure is secure and resilient.
Technology Risk Manager jobs near you
Infographic showing various Technology Risk Manager job openings in Iowa as of June 2026, with employment types broken down into 1% As Needed, 90% Full Time, 5% Part Time, 1% Temporary, and 3% Contract. Highlights an 92% Physical, 2% Hybrid, and 6% Remote job distribution, with an average salary of $104,781 per year, or $50.4 per hour.
Power and Utilities OT Operational Technology-Manager

Power and Utilities OT Operational Technology-Manager

Deloitte

Davenport, IA

Other

Posted 24 days ago

Deloitte rating

8.1

Company rating: 8.1 out of 10

Based on 86 frontline employees who took The Breakroom Quiz

58th of 138 rated financial services

Job description

Power and Utilities OT (Operational Technology) - Manager

Position Summary

Are you interested in working in a dynamic environment that offers opportunities for professional growth and new responsibilities?  If so, Deloitte & Touche LLP could be the place for you. Traditional security programs have often been unsuccessful in unifying the need to both secure and support technology innovation required by the business. Join Deloitte's Cyber team and become a member of the largest group of cybersecurity professionals worldwide.

Recruiting for this role ends on 12/21/2026

Work you'll do

Responsibilities:

  • Identify and evaluate complex business and technology risks
  • Develop remediation methods to mitigate risks
  • Demonstrate problem solving, critical thinking and logical structuring skills
  • Assist in the selection and tailoring of approaches, methods and tools to support service offering or industry projects
  • Actively participate in decision making with engagement management and seek to understand the broader impact of current decisions
  • Facilitate use of technology-based tools or methodologies to review, design and/or implement products and services
  • Identify opportunities to improve engagement profitability and manage engagement economics
  • Demonstrate ability to with identify and address client needs: building solid relationships with clients; developing an awareness of Firm services; communicating with the client in an organized and knowledgeable manner; delivering clear requests for information; demonstrating flexibility in prioritizing and completing tasks; and communicating potential conflicts to the manager
  • Demonstrate a general knowledge of market trends, competitor activities, Deloitte Advisory products and service lines

Required Skills:

  • 7+ years of demonstrate advanced understanding and experience governing and implementing power and utility regulations and standards including:
    • North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP)
    • NERC Operations and Planning (O&P)
    • Federal Energy Regulatory Commission
    • Transportation Security Administration (TSA) Cybersecurity
    • IEC 62443 standard - Securing Industrial Automation and Control Systems (IACS)
    • Nuclear Energy Institute (NEI) - NEI 08-09, 10 CFR 73.54
  • 7+ years of demonstrate advanced understanding and cyber risk management in at least two of the following areas:
    • SCADA with experience in securing ICS (Industrial Control Systems) security
    • Internet of Things (IOT) architecture and security
    • OT (Operational Technology) security
    • NERC CIP-015 - Internal Network Security Monitoring (INMS)
    • Embedded systems security
    • OT network segmentation (zones/conduits), jump hosts, secure remote access
    • Passive OT discovery/asset inventory, OT IDS, SIEM integration/use cases
    • Incident response in OT (containment with availability/safety constraints)
    • Vendor/OEM risk management, SBOM/patch constraints, compensating controls
    • Security experience in the field environment within the Power, Utilities & Renewables, Oil & Gas, or Industrial Products & Construction industry sectors
  • 7+ years of demonstrate advanced understanding of business processes and cyber risk management in an OT / SCADA environment in two or more areas such as:
    • Cyber security
    • Secure Supply Chain
    • Security Analytics
    • Security Operations Centers
    • Vulnerability and Threat Management
    • Data Security
    • Secure Dev Ops
    • Business continuity management
    • Familiarity with industry standards and regulatory requirements around cyber risk management (e.g., ISO 27001, IEC 62443, NIST CSF)
  • Limited sponsorship opportunities may be available

Additional Requirements:

  • Ability to travel up to 50%, on average, based on the work you do and the clients and industries/sectors you serve
  • Locations include: Houston, Dallas, Cleveland, Detroit, St. Louis, Pittsburgh, Boston, Charlotte, Atlanta, Miami, Memphis, Denver, Phoenix, Salt Lake City, Los Angeles, San Diego, San Franciso, Seattle.  Must be within a reasonable commute and willing to work part-time in the Deloitte and/or client offices.

Preferred:

  • Minimum of 4 years working in an OT environment (e.g. OT security, ICS security, IOT security, SCADA, etc.)
  • Minimum 4 years designing security for infrastructure, network and application architectures
  • Experience in the Power Utilities & Renewables, Oil & Gas, or Industrial Products & Construction sector
  • Demonstrated experience working with cloud platforms (AWS, Azure)
  • 5+ years implementing security solutions
  • BA/BS in cyber security, information security, engineering, computer science, information technology, information management, information sciences, business administration, or related field preferred
  • CISSP, CISM, or CISA certification a plus
  • Excellent verbal and written communication
Information for applicants with a need for accommodation: https://www2.deloitte.com/us/en/pages/careers/articles/join-deloitte-assistance-for-disabled-applicants.html

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $134,500 to $265,100.

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.

#CyberES26


Qualifications:

Power and Utilities OT (Operational Technology) - Manager

Position Summary

Are you interested in working in a dynamic environment that offers opportunities for professional growth and new responsibilities?  If so, Deloitte & Touche LLP could be the place for you. Traditional security programs have often been unsuccessful in unifying the need to both secure and support technology innovation required by the business. Join Deloitte's Cyber team and become a member of the largest group of cybersecurity professionals worldwide.

Recruiting for this role ends on 12/21/2026

Work you'll do

Responsibilities:

  • Identify and evaluate complex business and technology risks
  • Develop remediation methods to mitigate risks
  • Demonstrate problem solving, critical thinking and logical structuring skills
  • Assist in the selection and tailoring of approaches, methods and tools to support service offering or industry projects
  • Actively participate in decision making with engagement management and seek to understand the broader impact of current decisions
  • Facilitate use of technology-based tools or methodologies to review, design and/or implement products and services
  • Identify opportunities to improve engagement profitability and manage engagement economics
  • Demonstrate ability to with identify and address client needs: building solid relationships with clients; developing an awareness of Firm services; communicating with the client in an organized and knowledgeable manner; delivering clear requests for information; demonstrating flexibility in prioritizing and completing tasks; and communicating potential conflicts to the manager
  • Demonstrate a general knowledge of market trends, competitor activities, Deloitte Advisory products and service lines

Required Skills:

  • 7+ years of demonstrate advanced understanding and experience governing and implementing power and utility regulations and standards including:
    • North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP)
    • NERC Operations and Planning (O&P)
    • Federal Energy Regulatory Commission
    • Transportation Security Administration (TSA) Cybersecurity
    • IEC 62443 standard - Securing Industrial Automation and Control Systems (IACS)
    • Nuclear Energy Institute (NEI) - NEI 08-09, 10 CFR 73.54
  • 7+ years of demonstrate advanced understanding and cyber risk management in at least two of the following areas:
    • SCADA with experience in securing ICS (Industrial Control Systems) security
    • Internet of Things (IOT) architecture and security
    • OT (Operational Technology) security
    • NERC CIP-015 - Internal Network Security Monitoring (INMS)
    • Embedded systems security
    • OT network segmentation (zones/conduits), jump hosts, secure remote access
    • Passive OT discovery/asset inventory, OT IDS, SIEM integration/use cases
    • Incident response in OT (containment with availability/safety constraints)
    • Vendor/OEM risk management, SBOM/patch constraints, compensating controls
    • Security experience in the field environment within the Power, Utilities & Renewables, Oil & Gas, or Industrial Products & Construction industry sectors
  • 7+ years of demonstrate advanced understanding of business processes and cyber risk management in an OT / SCADA environment in two or more areas such as:
    • Cyber security
    • Secure Supply Chain
    • Security Analytics
    • Security Operations Centers
    • Vulnerability and Threat Management
    • Data Security
    • Secure Dev Ops
    • Business continuity management
    • Familiarity with industry standards and regulatory requirements around cyber risk management (e.g., ISO 27001, IEC 62443, NIST CSF)
  • Limited sponsorship opportunities may be available

Additional Requirements:

  • Ability to travel up to 50%, on average, based on the work you do and the clients and industries/sectors you serve
  • Locations include: Houston, Dallas, Cleveland, Detroit, St. Louis, Pittsburgh, Boston, Charlotte, Atlanta, Miami, Memphis, Denver, Phoenix, Salt Lake City, Los Angeles, San Diego, San Franciso, Seattle.  Must be within a reasonable commute and willing to work part-time in the Deloitte and/or client offices.

Preferred:

  • Minimum of 4 years working in an OT environment (e.g. OT security, ICS security, IOT security, SCADA, etc.)
  • Minimum 4 years designing security for infrastructure, network and application architectures
  • Experience in the Power Utilities & Renewables, Oil & Gas, or Industrial Products & Construction sector
  • Demonstrated experience working with cloud platforms (AWS, Azure)
  • 5+ years implementing security solutions
  • BA/BS in cyber security, information security, engineering, computer science, information technology, information management, information sciences, business administration, or related field preferred
  • CISSP, CISM, or CISA certification a plus
  • Excellent verbal and written communication
Information for applicants with a need for accommodation: https://www2.deloitte.com/us/en/pages/careers/articles/join-deloitte-assistance-for-disabled-applicants.html

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $134,500 to $265,100.

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.

#CyberES26


Education:Bachelor's DegreeEmployment Type:

What Deloitte employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply