Explore IT Risk Manager Jobs

IT Risk Managers help organizations identify, assess, and reduce risks tied to technology, information security, and business systems. They work across technical and business teams to strengthen controls, support compliance, and help protect critical data and services. Explore vetted IT Risk Manager opportunities on Ladders, including roles paying $100,000 or more.

What Does an IT Risk Manager Do?

Responsibilities vary by organization, but IT Risk Managers commonly assess technology and cybersecurity risks, maintain risk registers, evaluate internal controls, and recommend ways to address vulnerabilities. They may oversee audits, support incident and business continuity planning, and communicate risk exposure to executives, regulators, and other stakeholders.

Skills and Qualifications

Employers often look for experience in IT risk management, information security, audit, or governance, risk, and compliance (GRC). Familiarity with frameworks and standards such as NIST, ISO 27001, COBIT, or SOC reporting can be valuable. Strong analytical, communication, project management, and stakeholder engagement skills help professionals translate technical findings into practical business decisions. Some positions prefer relevant certifications, such as CISA, CRISC, CISSP, or CISM.

Career Opportunities and Compensation

IT Risk Managers work in industries where secure, reliable technology is essential, including financial services, healthcare, consulting, and technology. Career paths may lead to senior risk leadership, cybersecurity governance, enterprise risk, or chief information security roles. Compensation depends on experience, location, industry, and scope of responsibility; Ladders focuses on vetted professional opportunities paying $100,000 or more.

Find IT Risk Manager Roles on Ladders

Browse IT Risk Manager jobs on Ladders to discover opportunities that match your experience and career goals. Review role requirements, compare employers, and explore openings in technology risk, cybersecurity, and compliance.

600

IT Risk Manager Remote Jobs

Average Salary: $145,129

IT Risk Manager Jobs Near Me Remote IT Risk Manager Jobs

Get email alerts for Remote jobs!

...

* Ladders Estimates

Top companies hiring for remote jobs

ServiceNow World Wide Technology ECS GovCIO CACI International Baker Tilly ASM Research Gartner EPAM Systems ManTech International CDW Corporation Unisys Corporation Keeper Security Parsons USAA

Top Remote job titles

Project Manager jobs Security Engineer jobs Security Manager jobs Senior Security Engineer jobs Senior Project Manager jobs Program Manager jobs Security Operations Manager jobs Information Security Manager jobs Senior Security Analyst jobs Security Analyst jobs Incident Response Analyst jobs ServiceNow Consultant jobs Associate IT Consultant jobs Security Architect jobs IT Systems Administrator jobs

Frequently Asked Questions (FAQ)

What does an IT Risk Manager do?
An IT Risk Manager identifies and evaluates risks involving technology, information security, systems, and data. They help develop controls and mitigation plans, monitor risk exposure, and communicate findings to business leaders and other stakeholders.
What qualifications are common for IT Risk Manager jobs?
Many roles seek experience in IT risk, cybersecurity, audit, or GRC, along with knowledge of relevant frameworks and regulations. Employers may also value certifications such as CISA, CRISC, CISSP, or CISM, though requirements vary.
What skills are important for an IT Risk Manager?
Important skills include risk assessment, control evaluation, analytical thinking, clear communication, project management, and the ability to collaborate with technical teams and business leaders.
How much do IT Risk Managers earn?
Pay varies based on experience, location, industry, and responsibilities. Ladders focuses on vetted professional jobs paying $100,000 or more, and listings provide details about compensation when available.
Where can IT Risk Managers work?
IT Risk Managers work in a wide range of industries, including financial services, healthcare, consulting, government, and technology—anywhere organizations need to manage technology and information security risks.