IT Governance Analyst

Job Description Assits in the development, maintenance, and ongoing improvement of the IT risk management, IT controls framework, training, and associated processes, including documentation. Assists the audit process within IT and the process for tracking open audit findings, test exceptions, and systemic issues. Supports internal and/or external audit as needed during audit engagements. What You’ll Do Assists with the identification and assessment of risks associated with third-party vendors, suppliers, business partners, and outsourced service providers, with a strong focus on technology, cybersecurity, data privacy, and regulatory risks Provides support to business owners and project teams to increase awareness and understanding of risks and controls and assist in the development, assessment and monitoring of mitigation plans for IT-related risks, to ensure they are managed to an acceptable level. Identifies, evaluates and escalates issues that conflict with BCBSNC’s risk tolerance Consults on projects and other initiatives to ensure third party risks are considered and addressed appropriately Assess the effectiveness of vendor control environments through review of audit reports, certifications, questionnaires, security assessments, and other risk artifacts. Recommend improvements to strengthen risk management practices and reduce exposure. Develop metrics, dashboards, and reporting materials that provide management and executive leadership with visibility into third-party risk exposure, emerging risks, remediation activities, and program effectiveness. Deliver training, awareness sessions, and stakeholder guidance to promote a strong culture of third-party risk management and ensure consistent application of TPRM requirements across the organization What You Bring Bachelor's degree or advanced degree (where required) 3+ years of experience in related field In lieu of degree, 5+ years of experience in related field Bonus Points Experience conducting IT audits and supporting SOX (Sarbanes-Oxley) compliance audits Professional certifications such as HITRUST, NIST, SOC 2, and ISO standards preferred Industry-recognized certifications in IT audit, risk management, governance, or compliance, including CISA, CRISC, and CRMA, are a plus What You’ll Get The opportunity to work at the cutting edge of health care delivery with a team that’s deeply invested in the community Work-life balance, flexibility, and the autonomy to do great work Medical, dental, and vision coverage along with numerous health and wellness programs Parental leave and support plus adoption and surrogacy assistance Career development programs and tuition reimbursement for continued education 401k match including an annual company contribution Learn more Where You’ll Work Our Hybrid Flex approach is built on presence with a purpose – giving you flexibility to work remotely with intentional in-person connection – that supports a workplace that’s flexible, connected, and future focused. In a Hybrid-Flex role, you’ll work in the office at least two days a week for collaboration and connection. In a Remote Flex role, you’ll work virtually, with a few in-office visits each year for meaningful moments that matter. Whether your role is Hybrid Flex or Remote Flex depends on the nature of the work and distance from our Durham headquarters. We welcome candidates from outside the local area and in any states listed on this job posting. Onsite expectations will be discussed during the interview process. Salary Range At Blue Cross NC, we take great pride in a fair and equitable compensation package that reflects market-price and our starting salaries are typically planned near the middle of the range listed. Compensation decisions are driven by factors including experience and training, specialized skill sets, licensure and certifications and other business and organizational needs. Our base salary is part of a robust Total Rewards package that includes an Annual Incentive Bonus*, 401(k) with employer match, Paid Time Off (PTO), and competitive health benefits and wellness programs. *Based on annual corporate goal achievement and individual performance. $81,068.00 - $129,708.00 Skills _____________________________________________________________________ JOB ALERT FRAUD: We have become aware of scams from individuals, organizations, and internet sites claiming to represent Blue Cross and Blue Shield of North Carolina in recruitment activities in return for disclosing financial information. Our hiring process does not include text-based conversations or interviews and never requires payment or fees from job applicants. All our career opportunities are published on If you have already provided your personal information that you suspect is fraudulent activity, please report it to your local authorities. Any fraudulent activity should be reported to: View email address on click.appcast.io.