Sr. Staff Risk Management Analyst
New
J
JobgetherHealthcare Technology
Based in the United StatesFull-TimeStaff
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- 10+ years
- Required Skills
- ComplianceHIPAARisk Management
Requirements
- 10+ years of experience in information security, risk management, or GRC.
- Demonstrated ownership of a GRC or enterprise risk program.
- Hands-on experience conducting risk and control self-assessments (RCSA).
- Proven experience developing and maintaining a multi-year risk-reduction roadmap.
- Experience presenting risk reports to executive leadership or governing bodies.
- Ability to establish accountability and drive commitments across teams without direct authority.
- Deep understanding of security frameworks including SOC 2, HITRUST, HIPAA, and NIST CSF.
- Experience serving as the first dedicated owner of a function in an early-stage environment.
- Strong organizational, analytical, and program management skills.
- CRISC, CISA, or CISSP certification (preferred).
- Experience in healthcare or highly regulated data environments (preferred).
- Experience automating GRC activities, potentially using AI systems (preferred).
Responsibilities
- Own and mature the enterprise risk management program and enterprise-wide risk register.
- Develop and operationalize the enterprise risk appetite statement.
- Establish and operate the ERM policy and assessment methodology across the organization.
- Present risk posture, emerging risks, and mitigation progress to executives and the Enterprise Risk Committee.
- Govern security program reporting, including tracking commitments, dependencies, and strategic objective progress.
- Manage insurance responsibilities, including renewals, claims, and carrier audits.
- Automate recurring risk register, assessment intake, and reporting activities.
- Drive priority security initiatives and OKRs through completion across cross-functional teams.
View Full Description & ApplyYou'll be redirected to the employer's site
