IT Governance, Risk, and Compliance Analyst

Job Description: RMI is transforming the global energy system to secure a clean, prosperous, zero-carbon future for all. We work with businesses, policymakers, communities and other organizations to identify and scale interventions that will cut greenhouse gas emissions at least 50% by 2030. This role supports the organization's governance, risk, privacy, and compliance program, ensuring technology systems, vendors, contracts, and business processes align with regulatory requirements and contractual obligations. It partners closely with Legal, Information Security, IT, People Team, and Procurement to identify compliance considerations early and mature the organization's governance and privacy programs. Responsibilities Governance, Policy & Audit Support Maintain governance policies, standards, and procedures for technology, privacy, and information management; support internal and external audits with supporting evidence and documentation. Review contracts and business initiatives for security, privacy, and compliance obligations, partnering with Legal and Procurement. Coordinate compliance initiatives (Colorado Privacy Act, GDPR/UK GDPR, and other contractual/regulatory programs), tracking remediation activities to closure. Risk & Vendor Management Conduct risk assessments for new technologies, vendors, and operational changes; maintain the IT risk register and drive mitigation plans to closure. Perform security, privacy, and compliance reviews of third-party vendors