IT Governance, Risk, and Compliance Analyst

1. About Our Client:

The organization operates in the clean energy sector, aiming to transform the global energy system to achieve a zero-carbon future. It collaborates with businesses, policymakers, communities, and other stakeholders to identify and scale interventions that reduce greenhouse gas emissions by at least 50% by 2030.

2. About the Opportunity:

The IT Governance, Risk, and Compliance Analyst supports the organization's governance, risk, privacy, and compliance programs. This role ensures that technology systems, vendors, contracts, and business processes align with regulatory requirements and contractual obligations. It plays a key role in maturing governance and privacy programs by partnering with various internal teams.

3. Responsibilities:

• Maintain governance policies, standards, and procedures related to technology, privacy, and information management.
• Support internal and external audits with necessary evidence and documentation.
• Review contracts and business initiatives for security, privacy, and compliance obligations, collaborating with Legal and Procurement.
• Coordinate compliance initiatives including regulations such as Colorado Privacy Act and GDPR.
• Conduct risk assessments for new technologies, vendors, and operational changes; manage IT risk register and mitigation plans.
• Perform security, privacy, and compliance reviews of third-party vendors and subcontractors.
• Support vendor onboarding and contractual compliance in partnership with Legal, Procurement, and Information Security.
• Evaluate new technologies and AI solutions for privacy and governance considerations.
• Assist with research, testing, and deployment of new AI functionalities.
• Maintain data inventories, Records of Processing Activities, classification, retention, and lifecycle documents.
• Advise stakeholders on data collection, use, sharing, retention, and protection.
• Manage cybersecurity awareness training and other training activities.
• Perform audits of user access, permissions, and IT assets.
• Conduct periodic compliance reviews and governance assessments; track corrective actions.
• Collaborate with Infrastructure, Security, Legal, People Team, and Procurement to integrate governance in technology projects.

4. Requirements:

• Bachelor's degree or equivalent experience in governance, compliance, risk management, privacy, information security, or related fields.
• 3 to 5 years of relevant experience in governance, compliance, risk management, privacy, procurement, internal audit, or information security.
• Experience supporting compliance audits, vendor risk assessments, and regulatory programs.
• Strong analytical, organizational, communication, and collaboration skills.
• Preferred experience with GDPR/UK GDPR, international data transfers, or information governance.
• Preferred experience in nonprofit, consulting, research, energy, or mission-driven organizations.
• Preferred certifications include CIPP/US, CIPP/E, CIPM, CIPT, CRISC, CISA.

5. Pay Range and Compensation Package:

The pay range and compensation package for this role will be determined based on the candidate’s experience, skills, and other relevant factors.

Equal Opportunity Statement:

Equal Opportunity Statement: Our client is an equal opportunity employer. They celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, or national origin.

Note:

RemoteHunter is not the Employer of Record (EOR) for this role. Our purpose in this opportunity is to connect exceptional candidates with leading employers. We help job seekers worldwide discover roles that match their goals and guide them to complete their full application directly through the hiring company’s career page or ATS.