IT Governance Analyst

Blue Cross NC

. Assist in developing, maintaining, and improving IT risk management, IT controls framework, training, and associated documentation .

Posted 10/26/2026full-timeDurham • North Carolina • United StatesMid-LevelSenior💰 $81,068 - $129,708 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in IT Risk Management, including the development and maintenance of risk frameworks, controls, and documentation. Proficient in supporting audits and providing risk consulting for IT and security initiatives.

Highest-signal resume keywords

IT Risk ManagementAudit SupportRisk AssessmentControl AssessmentCrisis Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk ManagementControl Framework DevelopmentRisk Mitigation PlanningIncident ManagementRecovery TestingControl AssessmentDocumentation MaintenanceRisk ConsultingCybersecurity KnowledgeBusiness Continuity Planning

Soft Skills

CollaborationCommunicationTraining DevelopmentProblem SolvingStakeholder Engagement

Industry Keywords

IT ControlsRegulatory ComplianceRisk ToleranceAudit FindingsRisk Awareness

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Assist in developing, maintaining, and improving IT risk management, IT controls framework, training, and associated documentation
Assist the IT audit process and track open audit findings, test exceptions, and systemic issues
Support internal and external audits during audit engagements
Identify and assess organizational risks, especially IT, security, and key business initiatives
Partner with business owners and project teams to build risk and controls awareness
Support development, assessment, and monitoring of IT risk mitigation plans
Identify, evaluate, and escalate risks outside established risk tolerance
Provide risk consulting and guidance for projects and initiatives
Evaluate control environments and strengthen controls or develop mitigation action plans
Maintain risk documentation in accordance with company policies, industry standards, and regulatory requirements
Develop guidance, processes, and training for IT and security risk management awareness

Requirements

What you’ll need

Bachelor's degree or advanced degree (where required), or 5+ years of experience in a related field in lieu of degree
3+ years of experience in a related field
Experience supporting critical incident or crisis management, including cybersecurity-related incidents (bonus)
Knowledge of recovery testing, reporting, and control assessment (bonus)
Experience partnering with technology and business teams on recovery preparedness and continuity planning (bonus)

Benefits

Comp & perks

Work-life balance, flexibility, and autonomy
Medical, dental, and vision coverage
Health and wellness programs
Parental leave and support
Adoption and surrogacy assistance
Career development programs
Tuition reimbursement for continued education
401k match including an annual company contribution
Annual Incentive Bonus
Paid Time Off (PTO)