IT Risk Analysis

About the Role

IT Risk Analysis refers to the initial steps of risk management involving analyzing the value of assets to the business, identifying threats to those assets, and evaluating how vulnerable each asset is to those threats.

Employer Requirements

According to market employment data, these are the most prominent business skills required to excel in the IT Risk Analysis area and requested by employers:

• Risk Analysis
• Governance, Risk Management, And Compliance
• Risk Management
• Management
• Communication
• Auditing
• Governance
• Detail Oriented
• Cybersecurity

IT Risk Analysis roles generally require an undergraduate degree.

Career Path

Common Feeder Functional Areas: IT Compliance, Privacy Analysis, IT Auditing

Common Next Functional Areas: GRC, IT Risk Consulting, IT Audit Management, IT Risk Management, Privacy Management

Compensation

Average Annual Salary: US$110,000 (Entry–Mid-Level)

Resources for Advancement

ISACA resources are designed to help you expand your knowledge, develop relevant skills, and stay current in this functional area.

• Certification: CRISC—Certified in Risk and Information Systems Control. ISACA's Certified in Risk and Information Systems Control (CRISC) program provides expertise in managing enterprise IT risk and implementing information systems controls.
• Online Course: AI Threat Landscape: Attacks, Risk, and Security Measures. AI in general may not be new, but the explosion of generative AI has thrust the topic into headlines with regards to bias, ethical usage, intellectual property rights, privacy and use of technology just to name a few.
• Resource: ISACA IT Risk Resources. ISACA’s expert guidance gives professionals and enterprises the tools, techniques and understanding to manage IT Risk.
• Membership: ISACA Local Chapters. ISACA has over 200 chapters worldwide, offering a variety of benefits to members, including networking, education, and career development opportunities.
• Membership: Member Experience Leadership Series. Grow your leadership skills with access to expert-led events with an ISACA membership. Earn free CPE while learning to lead yourself, others, and your organization with confidence.
• Training: ISACA Conferences. From in-person, virtual to hybrid, ISACA’s conferences help you connect with professionals worldwide and expand your knowledge wherever you are.