Technology Risk Analyst

The Technology Risk Analyst helps Digital & IT operate as a well-governed, resilient, risk-aware, and effective business function, with a primary focus on strengthening organizational resilience and managing technology risk. The role works across Digital & IT and the business to strengthen organizational resilience, manage technology risk, improve governance, and help leaders understand technology dependencies and their role in reducing risk.

The primary focus is Business Continuity and Disaster Recovery, technology risk management, governance, and business education. The role also supports broader Office of the CIO priorities, including data governance, compliance, financial management, contracts, performance reporting, and continuous improvement.

The ideal candidate is highly organized, analytical, comfortable working across technical and business teams, and able to turn complex risks and requirements into practical actions and measurable improvements.

Essential Job Functions   

Technology Risk & Organizational Resilience

• Own the development, maintenance, testing, and continuous improvement of technology Business Continuity and Disaster Recovery plans.
• Partner with business and technology leaders to identify critical processes, technology dependencies, recovery requirements, and operational risks.
• Coordinate Business Impact Analyses, tabletop exercises, disaster recovery testing, and follow-up remediation.
• Maintain the technology risk register and coordinate risk identification, assessment, remediation, acceptance, and reporting.
• Identify critical technology, vendor, and process dependencies that could impact business operations.
• Help business leaders understand technology risks, preparedness expectations, and actions they can take to improve organizational resilience.

Governance, Policy & Compliance

• Develop, coordinate, and maintain Digital & IT policies, standards, procedures, and governance processes, including stakeholder review, approval, communication, implementation, and periodic review.
• Lead or support initiatives related to data classification, retention, handling, privacy, and other information-governance requirements.
• Support technology-related regulatory, legal, contractual, customer, and geographic compliance requirements.
• Coordinate technology risk exceptions and ensure accepted risks are appropriately documented, approved, reviewed, and tracked.
• Support audits, assessments, customer requirements, cyber insurance requests, and related documentation.

 Cybersecurity Risk & Awareness

• Partner closely with the Cybersecurity Manager to support cybersecurity risk management and alignment with applicable frameworks and requirements.
• Help translate cybersecurity risks into clear business impacts and practical actions.
• Support cybersecurity awareness, employee education, phishing programs, and other activities designed to reduce human-related risk.
• Assist with cybersecurity risk assessments, customer security requirements, and remediation tracking.

 IT Business Management

• Support monthly Digital & IT financial management, including budget tracking, forecast updates, actual-versus-plan analysis, vendor spend, and identification of significant variances.
• Maintain visibility to key technology contracts, renewals, obligations, and upcoming decisions.
• Support annual planning, investment prioritization, and development of business cases for technology initiatives.
• Help identify opportunities to optimize technology spending, licensing, vendors, and services.

 Performance, Governance & Operating Rhythm

• Develop and maintain Digital & IT KPIs, KRIs, scorecards, dashboards, and management reporting.
• Support recurring Digital & IT operating reviews, governance meetings, and leadership discussions.
• Track significant risks, issues, actions, and commitments through completion and provide analysis to help leadership identify trends and improvement opportunities.

 Continuous Improvement & Office of the CIO

• Lead or coordinate cross-functional initiatives related to risk, governance, resilience, compliance, and operational improvement.
• Identify and apply opportunities to use AI, automation, and digital tools to streamline Digital & IT processes, improve reporting, reduce manual effort, and increase operational effectiveness.
• Support special projects and emerging CIO priorities that require structured analysis, coordination, and follow-through.
• Work across Digital & IT, Finance, Legal, HR, business leadership, and external partners to drive initiatives to completion.

Minimum Requirements, Education & Experience (incl. KSA’s and certifications)

• Bachelor’s degree in Information Technology, Business, Risk Management, Cybersecurity, Finance, or a related field, or an equivalent combination of education and relevant experience.
• 3+ years of experience in technology, risk management, governance, business continuity, cybersecurity, business analysis, finance, or a related field.
• Strong analytical, organizational, documentation, and project coordination skills.
• Demonstrated ability to identify risks, organize complex information, and drive actions through completion.
• Strong written and verbal communication skills with the ability to work effectively with technical and non-technical audiences.
• Ability to translate technology concepts, risks, and requirements into clear business language.
• Experience coordinating cross-functional projects or initiatives.
• Strong attention to detail and ability to manage multiple priorities in a fast-paced environment.
• Strong proficiency with Excel, PowerPoint, and other reporting or analytical tools

Desirable Criteria & Qualifications

• Experience with business continuity, disaster recovery planning, Business Impact Analysis, tabletop exercises, or recovery testing.
• Familiarity with technology and cybersecurity risk frameworks such as NIST, ISO 27001, or similar standards.
• Experience with technology governance, policy development, audit, risk, or compliance activities.
• Experience with data classification, data retention, privacy, or information governance.
• Experience supporting IT financial management, budgeting, contracts, renewals, or vendor management.
• Experience developing KPIs, dashboards, management reporting, or executive-level presentations.
• Experience using AI, automation, or workflow tools to improve business or technology processes.
• Experience in manufacturing, medical device, regulated, or multi-site environments.
• Relevant certifications in risk, business continuity, cybersecurity, finance, or project management are valued.

#LI-MH1

This pay range reflects the base hourly rate or annual salary for positions within this job grade, based on our market-based pay structures. Actual compensation will depend on factors such as skills, relevant experience, education, internal equity, business needs, and local market conditions. While the full hiring range is shared for transparency, offers are rarely made at the minimum or maximum of the range.

All Employees:

Our 401k retirement savings plan with a company match contribution; onsite health clinics, discretionary holiday bonus program (based on years of service), Cretex University, 24/7 employee assistance program with access to five confidential visits with a licensed counselor at no cost, wellness program with incentives, an employee death benefit, and employee sick and safe leave are available to all Cretex employees. 

20+hours:

Cretex’s medical benefit package includes: comprehensive medical insurance with access to virtual providers; dental insurance (Little Partners Dental benefit covers services 100 percent for children 12 and younger when seen by a Health Partners in network provider); vision insurance; a pre-tax health savings account, healthcare and dependent care pre-tax reimbursement accounts; paid holidays, paid time off; and our discretionary profit sharing program are available to employees working 20+ hours/week. 

30+ hours:

Parental Leave, accident and critical illness benefits, optional employee, spouse, and child life; short and long term disability; company provided life insurance; and tuition assistance programs are available to employees working 30+ hours per week. 

(Some benefits are subject to eligibility criteria.)

Applicants will receive consideration for employment regardless of their race, color, creed, religion, national origin, sex, sexual orientation, gender identity, disability, age, veteran status, marital status, family status, status with regard to public assistance, or any other protected status as required by law.  

Our company uses E-Verify to confirm the employment and eligibility of all newly hired employees. To learn more about E-Verify, including your rights and responsibilities, please visit www.dhs.gov/E-Verify.