American Red Cross
IT Governance, Risk and Compliance Analyst
American Red Cross, Oklahoma City, Oklahoma, United States
IT Governance, Risk and Compliance Analyst
Join to apply for the IT Governance, Risk and Compliance Analyst role at American Red Cross.
By joining the American Red Cross, you will touch millions of lives each year and experience the greatness of the human spirit at its best. Are you ready to be part of the world’s largest humanitarian network?
What You Need To Know About The Job As an IT GRC Analyst, you will help mature and maintain the organization’s Governance, Risk, and Compliance (GRC) program. You will evaluate policies and controls aligned with NIST 800‑53/171, COBIT, ISO 27001, and SOC 2 frameworks. The role works cross‑functionally with IT, Information Security, Internal Audit, Legal, and Finance to assess risks, improve processes, and support audit readiness.
Location: Work from home, east‑coast hours starting at 8 am.
Governance, Risk & Compliance
Support daily GRC operations, policy development, and audit readiness.
Collaborate with stakeholders to strengthen internal controls and ensure compliance with federal regulations and industry standards.
Promote control awareness and accountability through training and consultation.
Maintain GRC tools (e.g., ServiceNow IRM) and stay current on technology trends.
Control Assessment
Evaluate IT control effectiveness across infrastructure, applications, and cloud environments.
Review documentation, identify gaps, and recommend improvements.
Track and report control findings, risks, and remediation plans.
Support exception and risk acceptance processes.
Audit Support
Coordinate with internal and external auditors and business units during assessments.
Provide consulting and first‑level support for audit activities and findings.
Assist in developing and executing remediation strategies.
Policy & Standards
Assist in drafting, reviewing, and implementing IT policies, standards, and procedures.
Analyze regulatory requirements and recommend updates to improve compliance.
Scope: Individual contributor that works under limited supervision. Applies subject‑matter knowledge. Capable of understanding specific needs or requirements to apply skills and knowledge.
Note: Qualified candidates must be authorized to work in the United States. The American Red Cross does not sponsor employment visas.
Required / Minimum Qualifications
Bachelor’s degree in Information Technology, Cybersecurity, Information Systems, or a closely related discipline.
Minimum 4 years of experience in IT audit, compliance, or Information Security.
Strong understanding of control frameworks: NIST, ISO, COBIT, FedRAMP, SOC 2.
Experience with control assessments, documentation review, audit coordination, and utilizing ServiceNow IRM (preferred).
Skilled in drafting and reviewing IT policies, standards and procedures.
Strong communication, analytical, and project management skills.
Experience working cross‑functionally with technical and business teams.
Familiarity with SAFe Agile or similar iterative delivery frameworks.
Certifications such as CISA, CRISC, CISSP, CISM are a plus.
Combination of candidate’s education and general experience satisfies requirements so long as the total years equate to description’s minimum education and general experience years combined.
Pay Information The annual salary range for this position is $90 K – $110 K. No annual bonus is offered for this role.
Benefits
Medical, Dental, Vision plans
Health Spending Accounts & Flexible Spending Accounts
PTO: Starting at 19 days a year; based on type of job and tenure
Holidays: 11 paid holidays, including six core holidays and five floating holidays
401K with up to 6% match
Paid Family Leave
Employee Assistance
Disability and Insurance: Short and Long Term
Service Awards and recognition
Apply now! Joining our team will provide you with the opportunity to make your career a force for good!
The American Red Cross is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law.
Qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers, San Diego Fair Chance Ordinance, the California Fair Chance Act and any other applicable state and local laws.
#J-18808-Ljbffr
By joining the American Red Cross, you will touch millions of lives each year and experience the greatness of the human spirit at its best. Are you ready to be part of the world’s largest humanitarian network?
What You Need To Know About The Job As an IT GRC Analyst, you will help mature and maintain the organization’s Governance, Risk, and Compliance (GRC) program. You will evaluate policies and controls aligned with NIST 800‑53/171, COBIT, ISO 27001, and SOC 2 frameworks. The role works cross‑functionally with IT, Information Security, Internal Audit, Legal, and Finance to assess risks, improve processes, and support audit readiness.
Location: Work from home, east‑coast hours starting at 8 am.
Governance, Risk & Compliance
Support daily GRC operations, policy development, and audit readiness.
Collaborate with stakeholders to strengthen internal controls and ensure compliance with federal regulations and industry standards.
Promote control awareness and accountability through training and consultation.
Maintain GRC tools (e.g., ServiceNow IRM) and stay current on technology trends.
Control Assessment
Evaluate IT control effectiveness across infrastructure, applications, and cloud environments.
Review documentation, identify gaps, and recommend improvements.
Track and report control findings, risks, and remediation plans.
Support exception and risk acceptance processes.
Audit Support
Coordinate with internal and external auditors and business units during assessments.
Provide consulting and first‑level support for audit activities and findings.
Assist in developing and executing remediation strategies.
Policy & Standards
Assist in drafting, reviewing, and implementing IT policies, standards, and procedures.
Analyze regulatory requirements and recommend updates to improve compliance.
Scope: Individual contributor that works under limited supervision. Applies subject‑matter knowledge. Capable of understanding specific needs or requirements to apply skills and knowledge.
Note: Qualified candidates must be authorized to work in the United States. The American Red Cross does not sponsor employment visas.
Required / Minimum Qualifications
Bachelor’s degree in Information Technology, Cybersecurity, Information Systems, or a closely related discipline.
Minimum 4 years of experience in IT audit, compliance, or Information Security.
Strong understanding of control frameworks: NIST, ISO, COBIT, FedRAMP, SOC 2.
Experience with control assessments, documentation review, audit coordination, and utilizing ServiceNow IRM (preferred).
Skilled in drafting and reviewing IT policies, standards and procedures.
Strong communication, analytical, and project management skills.
Experience working cross‑functionally with technical and business teams.
Familiarity with SAFe Agile or similar iterative delivery frameworks.
Certifications such as CISA, CRISC, CISSP, CISM are a plus.
Combination of candidate’s education and general experience satisfies requirements so long as the total years equate to description’s minimum education and general experience years combined.
Pay Information The annual salary range for this position is $90 K – $110 K. No annual bonus is offered for this role.
Benefits
Medical, Dental, Vision plans
Health Spending Accounts & Flexible Spending Accounts
PTO: Starting at 19 days a year; based on type of job and tenure
Holidays: 11 paid holidays, including six core holidays and five floating holidays
401K with up to 6% match
Paid Family Leave
Employee Assistance
Disability and Insurance: Short and Long Term
Service Awards and recognition
Apply now! Joining our team will provide you with the opportunity to make your career a force for good!
The American Red Cross is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law.
Qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers, San Diego Fair Chance Ordinance, the California Fair Chance Act and any other applicable state and local laws.
#J-18808-Ljbffr