Job Description

Job Title: Risk Management Analyst (RMA)
Duration: 12+ Months
Location: Olympia, WA (Hybrid)

Job Summary:
We are seeking an experienced Risk Management Analyst (RMA) to identify, assess, and manage risks related to the operations of the organization. The RMA will provide support to the Risk Management and Compliance Teams to ensure compliance with laws, regulations, policies, procedures, and standards. The ideal candidate will have extensive experience in risk management, auditing, and regulatory compliance, with a focus on information technology and cyber/physical security controls.

Responsibilities:

• Identify and assess risks inherent to operations, providing strategic recommendations for efficient risk management.
• Support the Risk Management and Compliance teams to ensure compliance with relevant laws, regulations, policies, and standards.
• Conduct audits and risk assessments of regulatory compliance, data privacy, business and financial operations, IT systems, and security controls.
• Administer Governance, Risk, and Compliance (GRC) frameworks and software to enhance risk management practices.
• Develop, revise, and implement Enterprise Risk Management (ERM) plans, policies, and procedures.
• Provide consultations and training on risk management, audits, and compliance topics.
• Analyze independent audit reports to identify and track findings, anomalies, or issues, and communicate these to key stakeholders.
• Evaluate IT general computing controls to assess regulatory compliance and risk levels.
• Prepare and present deliverables to meet regulatory requirements.

Qualifications:

• Associate’s degree in Risk Management, Management Information Systems (MIS), Cybersecurity, or a related field.
• A minimum of 10 years of professional experience in IT auditing, risk management analysis, conducting audits/risk assessments in areas such as regulatory compliance, data privacy, business operations, and cybersecurity controls.
• Experience in implementing and utilizing Governance, Risk, and Compliance (GRC) frameworks and software.
• Proven ability to create, revise, and enforce ERM plans, policies, and procedures.
• Experience in preparing and submitting deliverables to meet regulatory standards.
• Knowledge of risk management, auditing, and compliance consultation practices.
• Demonstrated experience in analyzing and evaluating IT general computing controls for regulatory compliance.

Certifications & Experience:

• Certifications such as CIA, COSO-ERM, CISA, CISM, or CISSP are mandatory.
• Experience in audit/risk management within a Health Exchange or its partners is preferred.
• Expertise in MARS-e, IRS 1075, and NIST 800-53 regulatory audit/risk management standards.
• Prior experience working with Big Four audit firms is highly preferred.

Software & Services Expertise:

• ZenGRC
• Jira
• Confluence
• SolarWinds

Job Tags

Similar Jobs