Sr Risk Management Analyst

System One; Washington (District of Columbia); Hybrid; USD 87,000 - 90,000; Part time

Benefits offered by this job

Health and welfare benefits

401(k) plan

Job summary

System One seeks a Sr Risk Management Analyst to provide advisory support for divisional risk assessments and third-party risk management. You will govern control self-assessments, maintain documentation, and collaborate with business owners to identify risk and process improvements.

Hybrid - onsite and remote in Washington, DC, with a strong emphasis on governance, documentation, and enterprise risk culture. 5+ years in risk management and hands-on ServiceNow IRM/TPRM experience required.

Qualifications

• Minimum 5 years of experience in risk management, third-party risk management, audit, compliance, security governance, or legal services.
• Hands-on experience with ServiceNow IRM and TPRM platforms.
• Bachelor's Degree in a relevant field or equivalent work experience plus 4 years of relevant experience.

Responsibilities

• Provide advisory support in divisional risk assessments and govern third-party risk assessments and control self-assessments.
• Maintain documentation for re-performance ability and leverage risk management tools.
• Partner with business owners to identify risk and compliance improvements and support enterprise risk culture.
• Track evolving risks and threats in the centralized risk register and develop mitigation strategies.
• Support the Third-Party Risk Management framework to ensure data protection, privacy, and access controls.

Skills

Risk management

Third-party risk management

Compliance

Communication

Problem solving

Education

Bachelor's degree or equivalent

Tools

ServiceNow IRM

TPRM platforms

Job description

Job Title: Sr Risk Management Analyst
Location: Washington, DC
Type: Contract
Compensation: $63.77 per hour
Work Model: Hybrid - onsite and remote

Responsibilities

• Provide advisory support in the completion of divisional risk assessments. Govern and support associates in the completion of third-party risk assessments and control self-assessments to ensure the adequacy of controls in place to safeguard the organization, including tracking, monitoring, and managing issues identified. Maintain documentation for re-performance ability, including leveraging the Governance Risk and Compliance (Must have hands-on Service Now IRM and TPRM Experience) tool and repository (e.g., Compliance 360).
• Contribute to the repository of best practices and tools/accelerators related to third-party risk assessments, operational risk assessments, and control self-assessments.
• Partner with business owners across the enterprise to serve as the subject matter expert in identifying issues and concerns, providing support, and proactively identifying risk management, control efficiency and effectiveness, and process improvement opportunities to enhance the enterprise risk culture.
• Track and monitor evolving risks and threats maintained within the centralized risk register, including third-party risks, and collaborate with business owners to develop and track risk and threat mitigation strategies.
• Support the maintenance of the centralized repository for third-party relationships, including accountable business owners, inherent risk, and tier for each third-party relationship. Provide support to ensure compliance with the Third-Party Risk Management (TPRM) framework and standards to ensure controls surrounding data protection, privacy, and access are compliant with corporate standards and risk appetite.
• Support the completion of due diligence on third-party controls in place both corporately and with the third party, in collaboration with relevant risk domain resources to determine residual risk.
• Collaborate with internal teams and key risk domain subject matter experts to define and establish frameworks and definitions for key data elements, maintaining frameworks to industry standards (e.g., NIST, HITRUST).
• Contribute to the development of enterprise-wide training and awareness materials on best practices, operational risk issues, risk management tools, and lessons learned.
• Provide support to ensure compliance with the established Common Compliance Framework (CCF).
• Contribute to the development of enterprise reporting and dashboards for monitoring process-level risks, controls, issues, and compliance activities.

Requirements

• Minimum 5 years of experience in risk management, third-party risk management, audit, compliance, security governance, or legal services.
• Bachelor's Degree in a relevant field (BA, BBA, BS) or equivalent work experience plus an additional 4 years of relevant experience.
• Experience in performing independent assessments including compliance & legal reviews, contract reviews, testing controls, and developing & reviewing assessment reports.
• Hands-on experience with ServiceNow IRM and TPRM platforms.
• Strong problem-solving skills with the ability to work independently and collaboratively.
• Excellent oral and written communication skills.
• General project management skills relevant to assessment functions.
• Proven judgment, tact, initiative, accuracy, trustworthiness, and integrity.

System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.

#M-
#LI-
Ref: #851-Rockville-S1