Information Technology Risk Manager

Job Title: IT Risk Management Senior Analyst

Location: Northville, Michigan

Pay Range: $65-$72/hr

ABOUT THE ROLE

The IT Risk Management Senior Analyst will help design, implement, and mature our enterprise cybersecurity and technology risk program. This role is ideal for a risk professional who has built risk programs—not just operated them—and who can translate complex technical risks into clear, prioritized, and measurable risk decisions for leaders.

You will lead the development of our risk tolerance and thresholds, establish and manage a central risk register, and build a repeatable risk management lifecycle and supporting processes. You will partner across Cybersecurity, Physical Security, IT, Privacy, and business teams to ensure risks are identified, assessed, tracked, mitigated, and reported with consistency and transparency.

KEY RESPONSIBILITIES

Risk Governance

• Define and operationalize risk tolerance and risk thresholds in partnership with leadership and stakeholders.
• Develop and maintain a risk taxonomy, risk scoring methodology, and risk rating guidance to support consistent assessments.
• Create and mature the risk management lifecycle including decision criteria, artifacts, roles, and accountability.

Risk Register Management

• Establish a scalable security/technology risk register.
• Implement workflows for intake, review, approval, and periodic reassessment.
• Ensure risks are measurable, comparable, and traceable through evidence and documentation.

Risk Assessment & Treatment

• Partner closely with the IT Compliance team to document risk treatment plans: mitigation, acceptance, transfer, or avoidance; ensure alignment with risk thresholds.
• Develop and manage the process for risk acceptance and exception handling, including decision criteria, approvals, and expiration/renewal.

Reporting, Metrics & Executive Communication

• Build risk reporting and dashboards that clearly communicate:
• Risk posture against thresholds
• Top risks and trends