Risk and Control Analyst

Location: San Juan, Puerto Rico (SJU Airport)

Department: Information Technology

The Risk and Control Analyst supports IT governance, risk management, compliance, and change management initiatives by helping strengthen the organization's control environment. This role is responsible for supporting the technical controls program aligned with ITIL best practices , coordinating IT risk assessments, performing control testing, and ensuring IT processes and systems comply with internal policies and regulatory requirements.

Key Responsibilities

• Coordinate and execute IT control testing, documenting findings and tracking remediation efforts.
• Review and validate IT changes to ensure proper approvals, documentation, testing, and compliance with change management policies.
• Perform IT General Controls (ITGC) and application control reviews.
• Monitor risks related to IT systems, applications, user access, and operational processes.
• Support internal and external audits by gathering documentation and tracking remediation activities.
• Partner with IT, Security, and business teams to support risk assessments and compliant solution deployments.
• Maintain IT policies, procedures, and departmental documentation.
• Contribute to continuous improvement initiatives that strengthen IT governance, compliance, and operational effectiveness.

Qualifications

• Bachelor's degree in Information Technology, Information Systems, Computer Science, or a related field preferred; equivalent experience will be considered.
• 3–5 years of experience in IT Audit, Risk Management, Compliance, Change Management, Information Security, or Information Systems.
• Experience working in regulated or compliance-driven environments is preferred.

Preferred Certifications

• CISA
• CRISC
• ITIL Foundation
• CISM or other related Governance, Risk, and Compliance (GRC) certifications

Skills

• Knowledge of IT controls, ITGC, risk assessments, and compliance frameworks.
• Understanding of ITIL and IT change management best practices.
• Experience supporting audits and regulatory activities.
• Strong analytical, documentation, communication, and stakeholder management skills.
• Ability to manage multiple priorities and collaborate across technical and business teams.

Ready to take the next step in your career? Join a collaborative IT team where your expertise in risk, governance, and compliance will make a real impact.

Apply today and help shape the future of secure and resilient technology operations!