IT Governance, Risk, and Compliance Analyst

About Our Client

The organization operates in the clean energy sector, aiming to transform the global energy system to achieve a zero-carbon future. It collaborates with businesses, policymakers, communities, and other stakeholders to identify and scale interventions that reduce greenhouse gas emissions by at least 50% by 2030.

About the Opportunity

The IT Governance, Risk, and Compliance Analyst supports the organization's governance, risk, privacy, and compliance programs. This role ensures that technology systems, vendors, contracts, and business processes align with regulatory requirements and contractual obligations. It plays a key role in maturing governance and privacy programs by partnering with various internal teams.

Responsibilities

• Maintain governance policies, standards, and procedures related to technology, privacy, and information management.
• Support internal and external audits with necessary evidence and documentation.
• Review contracts and business initiatives for security, privacy, and compliance obligations, collaborating with Legal and Procurement.
• Coordinate compliance initiatives including regulations such as Colorado Privacy Act and GDPR.
• Conduct risk assessments for new technologies, vendors, and operational changes; manage IT risk register and mitigation plans.
• Perform security, privacy, and compliance reviews of third-party vendors and subcontractors.
• Support vendor onboarding and contractual compliance in partnership with Legal, Procurement, and Information Security.
• Evaluate new technologies and AI solutions for privacy and governance considerations.
• Assist with research, testing, and deployment of new AI functionalities.
• Maintain data inventories, Records of Processing Activities, classification, retention, and lifecycle documents.
• Advise stakeholders on data collection, use, sharing, retention, and protection.
• Manage cybersecurity awareness training and other training activities.
• Perform audits of user access, permissions, and IT assets.
• Conduct periodic compliance reviews and governance assessments; track corrective actions.
• Collaborate with Infrastructure, Security, Legal, People Team, and Procurement to integrate governance in technology projects.

Requirements

• Bachelor's degree or equivalent experience in governance, compliance, risk management, privacy, information security, or related fields.
• 3 to 5 years of relevant experience in governance, compliance, risk management, privacy, procurement, internal audit, or information security.
• Experience supporting compliance audits, vendor risk assessments, and regulatory programs.
• Strong analytical, organizational, communication, and collaboration skills.
• Preferred experience with GDPR/UK GDPR, international data transfers, or information governance.
• Preferred experience in nonprofit, consulting, research, energy, or mission-driven organizations.
• Preferred certifications include CIPP/US, CIPP/E, CIPM, CIPT, CRISC, CISA.