IT Risk Analyst

IDR is seeking an IT Risk Analyst to join one of our top clients for a hybrid opportunity in the greater Nashville TN area. This role involves supporting the organizations technology compliance program, focusing on cybersecurity regulations and industry standards within a dynamic retail environment.

Position Overview for the IT Risk Analyst :

• Support and execute technology compliance programs, including CCPA/CPRA, PCI DSS, and emerging cybersecurity requirements.
• Coordinate compliance assessments, evaluate control effectiveness, and maintain audit evidence.
• Collaborate with cross-functional teams to interpret and translate regulatory requirements into practical controls.
• Manage and track remediation activities, ensuring timely resolution of compliance gaps.
• Maintain audit-ready documentation and assist with ongoing regulatory reviews.

Requirements for the IT Risk Analyst :

• 6+ years of IT Governance, Risk, and Compliance experience in technology, retail, or similar environments.
• Hands-on experience managing IT risk management programs using frameworks like NIST, CCPA, FAIR, ISO, or others.
• Proven expertise with PCI, SOX, IT General Controls, change management, and data privacy regulations.
• Strong analytical and problem-solving skills with project management experience.
• Professional certifications such as CISSP, CISA, CRISC, CISM, or SANS GIAC are desirable.

What's in it for you?

• Competitive compensation package
• Full Benefits; Medical, Vision, Dental, and more!
• Opportunity to get in with an industry leading organization.

Why IDR?

• 25+ Years of Proven Industry Experience in 4 major markets
• Employee Stock Ownership Program
• Dedicated Engagement Manager who is committed to you and your success.
• Medical, Dental, Vision, and Life Insurance
• ClearlyRated's Best of Staffing® Client and Talent Award winner 12 years in a row.

#li-hybrid  All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. IDR is subject to certain governmental recordkeeping and reporting requirements for the administration of civil rights laws and regulations. In order to comply with these laws, we invite employees to voluntarily self-identify their race or ethnicity, gender, and veteran status (if applicable). Submission of this information is voluntary and refusal to provide it will not subject you to any adverse treatment. The information obtained will be kept confidential and may only be used in accordance with the provisions of applicable laws, executive orders, and regulations, including those that require the information to be summarized and reported to the federal government for civil rights enforcement. You may access this form here.