Risk Management Analyst (Expert)

Risk Management Analyst (RMA) Resources identify, assess, and manage risks inherent to the operations of the organization and follow organizational strategies to manage risk efficiently and effectively. The RMA provides support to the Risk Management and Compliance Teams to ensure the organization is compliant with laws, regulations, policies, procedures, and standards.

EXPERIENCE (MANDATORY):

• Internal/external IT auditing, and/or risk management analysis conducting audits/risk assessments of regulatory compliance, business and financial operations, data privacy, information technology, and cyber/physical security controls.
• Governance, Risk, and Compliance (GRC) framework and software utilization and administration.
• Creating, revising, and following Enterprise Risk Management (ERM) plans, policies, procedures, and standards.
• Risk management, audit, and compliance consultations and training.
• Independent audit report analysis to identify, report, and track related findings, anomalies, or problems to key stakeholders.
• Evaluation of information technology general computing controls to determine level of regulatory compliance.
• Preparation, presentation, and submission of deliverables to meet regulatory requirements.

QUALIFICATIONS (DESIRED):

• Audit/risk management experience in a Health Exchange or its partners.
• MARS-e, IRS 1075 and NIST 800-53 regulatory audit/risk management experience.
• Expert-level experience implementing, administering, and using GRC software tools.
• Prior Big-Four audit firm work experience.
• Professional certifications such as CIA, COSO-ERM, CISA, CISM, CISSP.

SOFTWARE AND SERVICES EXPEREINCE (DESIRED):

• ZenGRC
• Jira
• Confluence
  
• SolarWinds

EDUCATION (MANDATORY)

• An Associate’s degree in Risk Management, Management Information Systems (MIS), Cybersecurity, or a related field.
• At least 10 years of professional experience as an internal/external IT auditor, risk management analyst conducting audits/risk assessments of regulatory compliance, business and financial, data privacy, information technology, and cyber/physical security controls.
• Formal education in Risk Management, Management Information Systems (MIS), Cybersecurity, or a related field can be substituted for the following years of experience:
  • Bachelor’s Degree – 1 year
  • Master’s Degree - 2 years

LOCATION (REMOTE)

• Most work is done remotely. However, certain Work Orders may require the Resource to work on-site at 810 Jefferson Street SE, Olympia WA.
  

Compensation$52.88 - $67.31