Senior Risk Management Analyst

Job Summary

Owning the enterprise risk management program, the full-time Senior Risk Management Analyst will operate and mature the program while managing the security governance portfolio and reporting directly to the VP of Security Governance, Risk, and Compliance in a remote capacity.

Key Responsibilities

• Develop and manage the enterprise risk register, ensuring alignment with business decisions and accountability for risk owners
• Produce risk assessment and governance evidence required for compliance with SOC 2, HITRUST, HIPAA, and NIST CSF frameworks
• Oversee the security awareness program and manage insurance responsibilities, including renewals and claims

Required Qualifications

• 10+ years of experience in information security, risk management, or governance, risk, and compliance (GRC)
• Proven ownership of governance, risk, and compliance programs, including policy and assessment methodology
• Experience in maintaining a multi-year risk-reduction roadmap and reporting progress
• Hands-on experience with risk and control self-assessment (RCSA) methodologies
• Demonstrated ability to author and present risk reports to executives and governing bodies