IT Governance, Risk and Compliance Analyst

Job description

**Please use Google Chrome or Mozilla Firefox when accessing Candidate Home.**

**_By joining the American Red Cross you will touch millions of lives every year and experience the greatness of the human spirit at its best.

Are you ready to be part of the world's largest humanitarian network?_**

**Join us—Where your Career is a Force for Good!**

**Job Description:**

**WHY CHOOSE US?**
**_Joining The American Red Cross is like nothing else – it’s as much something you feel as something you do.

You become a vital part of the world’s largest humanitarian network.

Joining a team of welcoming individuals who are exceptional, yet unassuming.

Diverse, yet uncompromising in unity.

You grow your career within a movement that matters, where success is measured in people helped, communities made whole, and individuals equipped to never stop changing lives and situations for the better._**

**_When you choose to be a force for good, you’ll have mentors who empower your growth along a purposeful career path.

You align your life’s work with an ongoing mission that’s bigger than all of us.

As you care for others, you’re cared for with competitive compensation and benefits.

You join a community that respects who you are away from work as much as what you do while at work._**

**WHAT YOU NEED TO KNOW ABOUT THE JOB:**
**As an IT GRC Analyst, you will help mature and maintain the organization’s Governance, Risk, and Compliance (GRC) program.

You will focus on control assessment by evaluating, reviewing, tracking and supporting policies and controls aligned with NIST 800-53/171, COBIT, ISO 27001, and SOC 2 frameworks.

This role works cross-functionally with IT, Information Security, Internal Audit, Legal, and Finance to assess risks, improve processes, and support audit readiness.**

**This position will be virtually located/work-from home and need to work east-coast hours, with typical workday starting at 8am.**

**WHERE YOUR CAREER IS A FORCE FOR GOOD (Key Responsibilities):**

**Governance, Risk & Compliance**
**• Support daily GRC operations, policy development, and audit readiness.**
**• Collaborate with stakeholders to strengthen internal controls and ensure compliance with federal regulations and industry standards.**
**• Promote control awareness and accountability through training and consultation.**
**• Maintain GRC tools (e.g., ServiceNow IRM) and stay current on technology trends.**

**Control Assessment**
**• Evaluate IT control effectiveness across infrastructure, applications, and cloud environments.**
**• Review documentation, identify gaps, and recommend improvements.**
**• Track and report control findings, risks, and remediation plans.**
**• Support exception and risk acceptance processes.**

**Audit Support**
**• Coordinate with internal/external auditors and business units during assessments.**
**• Provide consulting and first-level support for audit activities and findings.**
**• Assist in developing and executing remediation strategies.**

**Policy & Standards**
**• Assist in drafting, reviewing, and implementing IT policies, standards, and procedures.**
**• Analyze regulatory requirements and recommend updates to improve compliance.**

**_Scope: Individual contributor that works under limited supervision.

Apply subject matter knowledge.

Capacity to understand specific needs or requirements to apply skills/knowledge._**

**_Note: Qualified candidates must be authorized to work in the United States.

The American Red Cross does not sponsor employment visas._**

**WHAT YOU NEED TO SUCCEED (required/minimum qualifications):**
**• Bachelor’s degree in Information Technology, Cybersecurity, Information Systems, or a closely related discipline.**
**• Minimum 4 years of experience in IT audit, compliance, or Information Security.**
**• Strong understanding of control frameworks: NIST, ISO, COBIT, FedRAMP, SOC 2.**
**• Experience with control assessments, documentation review, audit coordination, and utilizing ServiceNow IRM (preferred) to manage GRC workflows, automate evidence collection, and streamline issue remediation.**
**• Skilled in drafting and reviewing IT policies, standards and procedures.**
**• Strong communication, analytical, and project management skills.**
**• Experience working cross-functionally with technical and business teams.**
**• Familiarity with SAFe Agile or similar iterative delivery frameworks.**
**• Certifications such as CISA, CRISC, CISSP, CISM are a plus.**

*** Combination of candidate’s education and general experience satisfies requirements so long as the total years equate to description’s minimum education and general experience years combined (Management experience cannot be substituted).**

**+++++++++++++++++++++++++++++**
**PAY INFORMATION:**
**The annual salary range for this position is $90K - $110K.

We do not offer an annual bonus for this role.**

**Note that American Red Cross salaries are aligned to the specific geographic location in which the work is primarily performed.

Other factors that may be used to determine your actual salary may include your specific skills, how many years of experience you have and comparison to other employees already in this role.

**We will review specific salary information at the time of phone screening based upon your location & experience.****

**This job will be posted for a minimum of five business days and extended if the applicant pool needs to be expanded.**

**BENEFITS FOR YOU:**
**As a mission-based organization, we believe our team needs great support to do great work.

Our comprehensive package includes:**
**• Medical, Dental Vision plans**
**• Health Spending Accounts & Flexible Spending Accounts**
**• PTO: Starting at 19 days a year; based on type of job and tenure**
**• Holidays: 11 paid holidays comprised of six core holidays and five floating holidays**
**• 401K with up to 6% match**
**• Paid Family Leave**
**• Employee Assistance**
**• Disability and Insurance: Short + Long Term**
**• Service Awards and recognition**

**_Apply now! Joining our team will provide you with the opportunity to_**

**_make your career a force for good!_**

_The American Red Cross is an Equal Opportunity employer.

All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law._
​

**_Qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers, San Diego Fair Chance Ordinance, the California Fair Chance Act and any other applicable state and local laws._**

AmeriCorps, the federal agency that brings people together through service, and its partners — the Peace Corps, AmeriCorps Alums, National Peace Corps Association, and the Service Year Alliance — launched Employers of National Service to connect national service alumni with opportunities in the workforce.

American Red Cross is proud to be an EONS (https://www.americorps.gov/partner/partnerships/employers-national-service) partner and share our employment opportunities with the network of organizations.

Interested in Volunteering?

Visit redcross.org/volunteertoday (https://www.redcross.org/volunteer/become-a-volunteer/urgent-need-for-volunteers.html) to learn more, including our most-needed volunteer positions.

To view the EEOC Summary of Rights, click here: Summary of Rights (https://www.eeoc.gov/sites/default/files/2022-10/EEOC_KnowYourRights_screen_reader_10_20.pdf)

Required Skill Profession

Other General