IT Risk and Compliance Analyst

We are looking for an IT Risk and Compliance Analyst to support governance, risk, and compliance initiatives for a services organization in Philadelphia, Pennsylvania. This Long-term Contract position will focus on strengthening IT oversight practices, improving control maturity, and helping the business address regulatory and cybersecurity risk exposure. The role works closely with stakeholders across the organization to assess risks, support compliance efforts, and provide clear reporting that drives informed decision-making.

Responsibilities:

• Partner with cross-functional teams to build, refine, and maintain IT governance policies, standards, and operating frameworks that support business goals.
• Perform risk evaluations across technology and business functions, identify potential control weaknesses, and help develop practical mitigation plans.
• Track key risk indicators, highlight developing concerns, and elevate significant issues to leadership when timely action is needed.
• Contribute to third-party cybersecurity risk oversight by helping assess vendors and supporting processes that reduce external technology risk.
• Assist with compliance reviews and audit activities to confirm adherence to internal controls, regulatory expectations, and IT policy requirements.
• Examine compliance findings, determine underlying causes of issues, and recommend corrective actions that improve control effectiveness.
• Prepare summaries, dashboards, and presentations that communicate governance, risk, and compliance activity to management and other stakeholders.
• Establish and improve monitoring methods that measure compliance with IT controls, policies, and applicable requirements over time.
• Create consistent documentation standards for IT processes and control-related records so materials remain accurate, complete, and easy to access.
• Provide additional support on security and risk-related initiatives as assigned.
• Demonstrated experience developing and applying IT governance, risk, and compliance frameworks within complex technology environments.
• Hands-on background supporting audits, assessments, and regulatory compliance efforts tied to IT operations.
• Strong knowledge of cybersecurity governance, risk management practices, and compliance principles.
• Ability to explain technical risk and control concepts clearly to non-technical stakeholders and business leaders.
• Proven success designing internal controls, improving processes, and addressing control gaps through practical remediation strategies.
• Strong organizational and project coordination skills with the ability to manage multiple priorities and meet deadlines.
• High attention to detail with the ability to produce accurate documentation and maintain standardized records for IT processes and controls.
• Familiarity with governance, risk, and compliance platforms or related software tools is preferred.