IT Governance, Risk and Compliance Analyst

🕒 August 31

🇺🇸 United States – Remote

💵 $77.2k - $95.2k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🚔 Compliance

👻 Ghost score 31%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

RMI

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 1982

💼 Consulting

🏥 Healthcare

⚡ Energy

💰 Grant on 2022-03

Consulting • Healthcare • Energy

RMI is a company dedicated to transforming the global energy system to ensure a clean, prosperous, zero-carbon future. It identifies interventions and scales transformative changes in the energy system to reduce greenhouse gas emissions by at least 50% by 2030. RMI's work includes various initiatives like carbon-free buildings, electricity, and transportation, as well as international programs targeting climate finance and intelligence, urban transformation, and technology innovation. The company focuses on impactful solutions for energy security and sustainability globally.

📋 Description

• Maintain governance policies, standards, and procedures for technology, privacy, and information management • Support internal and external audits with supporting evidence and documentation • Review contracts and business initiatives for security, privacy, and compliance obligations with Legal and Procurement • Coordinate compliance initiatives including the Colorado Privacy Act, GDPR/UK GDPR, and other contractual/regulatory programs • Track remediation activities and corrective actions to closure • Conduct risk assessments for new technologies, vendors, and operational changes • Maintain the IT risk register and drive mitigation plans to closure • Perform security, privacy, and compliance reviews of third-party vendors and subprocessors, including DPAs, security questionnaires, and ongoing monitoring • Support vendor onboarding and contractual compliance with Legal, Procurement, and Information Security • Evaluate new technologies, integrations, and AI solutions against frameworks such as NIST AI RMF, ISO/IEC 42001, and the EU AI Act • Assist with research, testing, and deployment of new AI functionality • Maintain data inventories, Records of Processing Activities, classification, retention, and lifecycle documentation • Advise stakeholders on appropriate collection, use, sharing, retention, and protection of data • Manage the monthly cybersecurity awareness training program and support other training activities • Perform regular audits of user access, permissions, and IT assets • Conduct periodic compliance reviews and governance assessments of systems and processes • Partner with Infrastructure, Security, Legal, People Team, and Procurement to embed governance requirements early in technology projects

🎯 Requirements

• Bachelor's degree in a related field, or equivalent experience, in governance, compliance, risk management, privacy, information security, or business operations • 3–5 years of progressively responsible experience in governance, compliance, risk management, privacy, procurement, internal audit, information security, or related functions • Experience supporting compliance audits, vendor risk assessments, or regulatory programs, including reviewing contracts and vendor documentation • Strong analytical, organizational, communication, and cross-functional collaboration skills • Candidates must have current, independent authorization to work in the U.S. without present or future sponsorship from RMI • Preferred: Experience with GDPR/UK GDPR, international data transfers, or information governance programs • Preferred: Experience in nonprofit, consulting, research, energy, or other mission-driven organizations • Preferred: One or more certifications: CIPP/US, CIPP/E, CIPM, CIPT, CRISC, CISA

🏖️ Benefits

• Medical, dental, vision insurance • 403b retirement match with immediate vesting • Group life, AD&D, and short- and long-term disability • Optional voluntary life, AD&D and accident plans • Health savings or flexible spending accounts • Fertility and hormonal health support • Mental health and wellness support • Comprehensive leaves of absence (including generous parental leave) • Generous paid time off and sick leave • Paid sabbatical leave • Regional holidays with at least one extended break in each geography • Work from home and home technology allowances • Learning & development opportunities (LinkedIn Learning and an annual individual professional development budget) • Potential for bonuses and merit increases • Discount marketplace (gym memberships, pet insurance, etc.) • Hybrid / remote work options • Team retreats and geographic meetups • Rewards and recognition programs • Occasional in-person meetings with travel costs covered • Essential IT equipment • One-time home technology payment • Monthly work from home/commuter allowance