Information Technology Risk Manager Jobs
Information Technology Risk Manager jobs are open across financial services, healthcare, government, and technology, at every level from analyst to director, with specializations in cybersecurity risk, GRC frameworks, and enterprise risk management. Find a role that fits below and apply directly.
Find JobsOverview
Showing 5 of 14+ Information Technology Risk Manager jobs
Information Technology Risk and Compliance Officer
Allegheny County Department of Human Services (DHS)
Pittsburgh, PA
Overview
At the Allegheny County Department of Human Services (DHS), we wake up every day driven by one mission: to improve the lives of our community’s most vulnerable residents. More than 200,000 people rely on the services we operate, influence, and fund — from mental health and addiction treatment to housing support and child and older adult protective services.
For more than two decades, DHS has been recognized nationally for pushing the boundaries of how data, analytics, and technology can strengthen public services. And we’re just getting started. We know there’s still tremendous opportunity to use data in smarter, more responsible ways to support the people we serve.
That’s where you come in. We’re looking for a Risk and Compliance Officer who is excited by the challenge of safeguarding critical data systems and helping shape how a forward‑thinking public agency manages risk in a rapidly evolving landscape.
If hired for this position, you would be an employee of our partner agency, Community Family Advocates working onsite at Allegheny County DHS.
What You’ll Do
Core Compliance Responsibilities
- Build and lead compliance programs that keep DHS aligned with laws, regulations, and best practices
- Create, refine, and enforce internal policies that support responsible data use
- Monitor adherence to internal controls and regulatory standards
- Conduct audits to uncover gaps and identify opportunities for improvement
- Stay ahead of regulatory developments and industry trends
- Prepare clear, actionable compliance reports for leadership and regulators
Risk Management Responsibilities
- Identify and assess risks across DHS’s data environment
- Conduct regular risk assessments and recommend smart, practical mitigation strategies
- Maintain and evolve our risk management frameworks
- Work closely with data, technology, and program teams to implement controls that reduce risk and strengthen operations
Training and Advisory
- Empower staff by providing training on compliance requirements and best practices
- Serve as a trusted advisor on compliance matters and escalate concerns when needed
What You Bring
- 2 years of experience in risk and compliance management required
- Experience working in regulatory frameworks and risk management principles required
- Excellent analytical, communication, and decision‑making abilities
- Advanced degrees or certifications like CCEP or CRCMP are preferred
- Confidence working independently and exercising sound judgment
Why DHS?
DHS is diverse, but we strive to be even more inclusive. This includes equity in hiring and advancement, as well as in unleashing the creativity and ideas of staff at every level of DHS. It has strong, assertive leaders. We do not hire yes-people.
You can make a big impact here. We stand out as one of the best human services organizations in the country. But we need problem-solvers, innovators, and terrific leaders to make sure we are smart in how we use our funding so that we reach the people who most need our help to make their lives better.
“DHS strives to be the kind of place where a diverse mix of talented people want to come to grow and do their best work.”
- From the organization’s statement on Equity and Inclusion
AN EQUAL OPPORTUNITY EMPLOYER -M/F/V/D
Information Technology Risk and Compliance Officer
Allegheny County Department of Human Services (DHS)
Pittsburgh, PA
Overview
At the Allegheny County Department of Human Services (DHS), we wake up every day driven by one mission: to improve the lives of our community’s most vulnerable residents. More than 200,000 people rely on the services we operate, influence, and fund — from mental health and addiction treatment to housing support and child and older adult protective services.
For more than two decades, DHS has been recognized nationally for pushing the boundaries of how data, analytics, and technology can strengthen public services. And we’re just getting started. We know there’s still tremendous opportunity to use data in smarter, more responsible ways to support the people we serve.
That’s where you come in. We’re looking for a Risk and Compliance Officer who is excited by the challenge of safeguarding critical data systems and helping shape how a forward‑thinking public agency manages risk in a rapidly evolving landscape.
If hired for this position, you would be an employee of our partner agency, Community Family Advocates working onsite at Allegheny County DHS.
What You’ll Do
Core Compliance Responsibilities
- Build and lead compliance programs that keep DHS aligned with laws, regulations, and best practices
- Create, refine, and enforce internal policies that support responsible data use
- Monitor adherence to internal controls and regulatory standards
- Conduct audits to uncover gaps and identify opportunities for improvement
- Stay ahead of regulatory developments and industry trends
- Prepare clear, actionable compliance reports for leadership and regulators
Risk Management Responsibilities
- Identify and assess risks across DHS’s data environment
- Conduct regular risk assessments and recommend smart, practical mitigation strategies
- Maintain and evolve our risk management frameworks
- Work closely with data, technology, and program teams to implement controls that reduce risk and strengthen operations
Training and Advisory
- Empower staff by providing training on compliance requirements and best practices
- Serve as a trusted advisor on compliance matters and escalate concerns when needed
What You Bring
- 2 years of experience in risk and compliance management required
- Experience working in regulatory frameworks and risk management principles required
- Excellent analytical, communication, and decision‑making abilities
- Advanced degrees or certifications like CCEP or CRCMP are preferred
- Confidence working independently and exercising sound judgment
Why DHS?
DHS is diverse, but we strive to be even more inclusive. This includes equity in hiring and advancement, as well as in unleashing the creativity and ideas of staff at every level of DHS. It has strong, assertive leaders. We do not hire yes-people.
You can make a big impact here. We stand out as one of the best human services organizations in the country. But we need problem-solvers, innovators, and terrific leaders to make sure we are smart in how we use our funding so that we reach the people who most need our help to make their lives better.
“DHS strives to be the kind of place where a diverse mix of talented people want to come to grow and do their best work.”
- From the organization’s statement on Equity and Inclusion
AN EQUAL OPPORTUNITY EMPLOYER -M/F/V/D
See All 14 Information Technology Risk Manager Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsInformation Technology Risk Manager Job Market
Who's Hiring
Top Industries Hiring
- Banking & Financial Services
What Employers Look For
The qualifications that appear most often in information technology risk manager jobs.
- Five or more years of experience in IT risk, cybersecurity, or information security roles
- Proficiency with GRC frameworks including NIST CSF, ISO 27001, and COBIT
- Experience conducting risk assessments, control testing, and audit readiness reviews
- CRISC, CISM, CISSP, or equivalent professional certification strongly preferred
- Familiarity with regulatory requirements such as SOX, HIPAA, PCI DSS, or FISMA
- Bachelor's degree in information systems, computer science, cybersecurity, or a related field
Tips for Your Information Technology Risk Manager Job Search
Align your resume to GRC frameworks
Hiring managers for information technology risk manager roles scan for specific frameworks like NIST, ISO 27001, and COBIT. Name the frameworks you've applied, not just the ones you've studied, and tie each to a concrete risk reduction or audit outcome.
Get a CRISC or CISM before applying
Many information technology risk manager postings list CRISC or CISM as a preferred credential. Earning one before you apply puts your resume in a smaller pool and signals you can operate at the governance level the role demands, not just the technical layer.
Apply early to roles that fit
Migrate Mate lists information technology risk manager openings from across the United States in one place, so you can find roles that match and apply directly to each listing.
Target postings by regulatory environment
Filter openings by industry so you apply where your compliance exposure matches. An information technology risk manager who has worked under HIPAA or PCI DSS is a different hire than one with SOX or FISMA experience, and mismatched applications rarely advance.
Prepare a risk-scenario interview answer
Interviewers for information technology risk manager positions routinely present a breach scenario or a third-party vendor risk situation and ask you to walk through your response process. Prepare two or three structured walkthroughs before your first round so you're not constructing the framework on the spot.
Negotiate scope alongside compensation
When you receive an offer, clarify which risk domains fall under your authority, whether you have a seat at the executive table, and how risk appetite decisions are made. These structural factors determine whether the role is a step forward or a lateral move dressed up as a promotion.
Information Technology Risk Manager Jobs: Frequently Asked Questions
Which companies are hiring the most information technology risk managers?
Natixis, Northwest Bank, and IDBNY are hiring the most information technology risk managers right now, with openings concentrated in New York, Ohio, and Pennsylvania, based on current listings on Migrate Mate as of November 2026. Financial services firms, government contractors, and large healthcare systems consistently represent the heaviest hiring volume for this role.
How many information technology risk manager jobs are remote?
About 67% of information technology risk manager openings are fully remote or hybrid as of November 2026, reflecting strong employer flexibility for experienced candidates. GRC advisory and third-party risk functions tend to be the most remote-accessible sub-areas, while roles tied to on-premises infrastructure audits or regulated government environments more often require in-office presence.
How do you become an information technology risk manager?
Start by building hands-on experience in IT audit, cybersecurity operations, or compliance analysis, since most employers expect you to have assessed real risks before moving into a manager role. Earn a recognized credential such as CRISC or CISM, deepen your knowledge of a specific regulatory environment relevant to your target industry, and progressively take on risk assessment ownership rather than supporting work.
How do you get hired as an information technology risk manager with little experience?
Break in through adjacent roles in IT audit, security operations, or compliance coordination, where you can build documented experience running risk assessments and control reviews. Earning a CRISC or entry-level security certification before applying signals commitment to the discipline. Targeting smaller organizations or government agencies, which often have less competitive candidate pools, can open doors that enterprise employers won't.
What does the information technology risk manager interview process look like?
Most processes run three to four rounds. The first is a recruiter screen covering background and seniority fit, followed by a technical panel where you walk through risk assessment methodology, framework knowledge, and a scenario response. A final round typically involves a hiring manager or CISO conversation focused on risk appetite, stakeholder communication, and how you've influenced executive decisions. Some employers include a written case study or risk memo exercise.
Where can I find and apply to information technology risk manager jobs?
You can find and apply to information technology risk manager jobs on Migrate Mate, which lists current openings from employers across the United States. Find roles that match your experience level, industry background, and preferred location, then apply directly to each listing.
See All 14 Information Technology Risk Manager Jobs
Find roles that match your experience and apply in just a few clicks.
Find Jobs