EY
IT Risk Analyst
EY · New York, NY
Compensation
$62k–$80kper year
On-siteFull-timeGovernance Risk & Compliance
📋Plain English
What is GRC?
You review policies, check systems, and write reports. The least technical path into cybersecurity.
This role is for you if you're organized, love checklists, and communicate clearly.
📋About the Role
Identify, assess, and document IT risks. Develop risk treatment plans, track control effectiveness, and report risk posture to leadership. Strong writing skills are essential.
Risk AssessmentControl TestingGRCNIST CSF
Your roadmap to get this job
Most people finish in 10–18 weeks from zero.
▸CompTIA Security+
▸Read NIST Framework
▸Learn risk assessment
▸Study SOC 2 / ISO 27001
▸Write practice assessments
▸Create sample deliverables
▸Highlight transferable skills
▸Apply to GRC roles
▸Use writing strengths
Want the full GRC career guide?
Salary data, day-in-life, personality match, full roadmap.