IT Risk Management Analyst

Risk Management Specialist

The purpose of this role is to support the NAU IT team with their risk management activities as well as engaging with the Enterprise Risk Management (ERM) team to execute the risk management program. Additionally, the role is responsible for ensuring adherence to relevant policies and standards governing Risk and Control Self-Assessment across the NAU IT organization, providing ongoing education and training, facilitating risk and control identification and assessment, and reporting progress and issues. The role will work closely with various teams to provide assurance over the Risk Management framework.

Location : Council Bluffs, IA, Ramsey, MN or Fargo, ND

Work Arrangement : This role will require 3 days / week in the office. The hours for this role are 7 : 30am-4 : 15pm CST Monday through Thursday, and 7 : 30am-12pm CST on Fridays

The starting salary range for this role is between $91,500-$137,500 depending on experience.

Your New Role :

• Deliver insightful reporting on IT Risk Management activities.
• Collect risk information and metrics to support monitoring against risk appetite.
• Ensure adherence to all Risk standards within the organization.
• Perform data quality monitoring and correct issues to ensure completeness and accuracy.
• Lead the IT Risk Control and Self Assessment (RCSA) and complete in Insight.
• Complete the Risk Maturity Self-Assessment.
• Maintain controls and lead semi-annual control testing efforts
• Track IT Major Incidents and follow-up actions, including incidents flagged for Problem Management. Coordinate post-mortem reviews and lead monthly update meetings.
• Track P0 requests and review in monthly update meeting.
• Track and manage issues and incidents to ensure that evidence is submitted by the due dates set, which includes leading the monthly issue review meeting.
• Complete the quarterly Risk Appetite Statements.
• Coordinate QBE policy and minimum control standards (MCS) reviews.
• Participate in policy update meetings with QBE and socialize changes to NAU.
• Coordinate Access Revalidations including tracking results and tickets to completion.
• Participate in internal audits.
• Coordinate NAIC with US Map and agent surveys.
• NY DFS Attestation
• Monitor the UIT / Shadow IT register and provide monthly UIT updates.
• Coordinate penetration testing and track any issues created from the findings.
• Coordinate Due North scheduling.
• Prepare the DISO monthly presentation.
• Coordinate Application Attestation and report on the results.
• Complete Supplier and SAQ reviews.
• Provide training to employees on risk management responsibilities.
• Prepare Risk Management communications including IT Update newsletter articles.
• Support the 'Second Line of Defense' role by monitoring business unit risk management activities.
• Maintain a strong network with risk professionals internally and externally.
• Identify and escalate relevant trends or changes in the external environment.
• Meet deadlines for stakeholder requirements and respond to ad-hoc requests promptly.

Necessary Work Experience includes :

Preferred Work Experience includes :

Competencies / Skills : Proficiency with reporting and visualization tools (e.g., Power BI, Tableau, etc) Aptitude for understanding, administering and supporting systems Strong analytical and problem-solving skills Understanding of risk management concept and practices Excellent communication skills to work effectively with cross-functional teams and business stakeholders Capable of representing team of function in a range of internal forums Ability to identify opportunities to improve processes Ability to adapt to evolving technologies and trends in reporting

Necessary Qualifications include :

Preferred Qualifications include :

Compensation Package : The salary range for this role is provided above. This is the national range for location(s) listed. The salary offer will be decided based on the role's complexity, its location, and the candidate's professional background, including their education and experience. Beyond the base salary, regular full-time and part-time employees will also be eligible for QBE's annual discretionary bonus plan based on business and individual performance. We encourage all candidates to apply, even if their salary expectations fall outside of this range, as we are committed to finding the right fit for our team.

QBE Benefits : We offer a range of benefits to help provide holistic support for your work life, whatever your circumstances. As a QBE employee you will have access to :

Why QBE? What if you could have a positive impact at work and in the world?

At QBE, we're enabling a more resilient future for our customers, communities, environment, and for our people. We're building momentum to achieve something significant and know our people are at the center of our success.

Our industry offers interesting and varied careers where you can help people to protect what matters most. As part of the QBE team, you'll get to spend every day working with people who are passionate, talented and kind. And our international scale means we're big enough for your ambitions, yet small enough for you to make a real impact.

Join us now, so you can be part of our success and we can be part of yours!

Commitment to Diversity

QBE is committed to providing reasonable accommodation to, among others, individuals with disabilities and disabled veterans. If you need an accommodation because of a disability to search and apply for a career opportunity with QBE, please inform our Talent Acquisition team to let us know the nature of your accommodation request and your contact information.

Equal Employment Opportunity :

QBE provides equal employment opportunities to applicants and employees without regard to race; color; gender; gender identity; sexual orientation; religious practices and observances; national origin; pregnancy, childbirth, or related medical conditions; protected veteran status; or disability or any other legally protected status.

Skills : Analytical Thinking, Communication, Conflict Resolution, Critical Thinking, Data Management, Data Quality Assessments, Detail-Oriented, Enterprise Risk Management (ERM), Intentional Collaboration, Managing Performance, Operational Risks, Process Improvements, Risk Assessments, Risk Management, Stakeholder Management

Application Close Date : 12 / 10 / 2025 11 : 59 PM

How to Apply :

To submit your application, click "Apply" and follow the step by step process.

Equal Employment Opportunity :

QBE is an equal opportunity employer and is required to comply with equal employment opportunity legislation in each jurisdiction it operates.