Sr. Risk Management Analyst –( Service Now IRM and TPRM experience Needed )

Tech Mirrors; Washington (District of Columbia); On-site; USD 90,000 - 130,000; Full time

Job summary

Tech Mirrors is seeking a Senior Risk Management Analyst to support and train associates on operational risk programs, ensuring identification and mitigation of risks, and monitoring remediation efforts across the organization.

You will govern third party risk assessments, track issues in the risk register, and collaborate with business owners to strengthen controls, data protection, privacy, and compliance with applicable standards.

Qualifications

• Hands on ServiceNow IRM and TPRM experience.

Responsibilities

• Provide advisory support in the completion of divisional risk assessments, govern and support third party risk assessments and control self-assessments to ensure adequacy of controls.
• Partner with business owners to identify issues and contribute to centralized risk inventory and mitigation strategies across the enterprise.
• Support maintenance of the centralized repository for third party relationships and ensure compliance with TPRM framework and data protection controls.
• Collaborate to define frameworks and data elements, maintain industry-standard frameworks (e.g., NIST, HITRUST), and help develop training materials.
• Develop enterprise reporting and dashboards for monitoring process-level risks, controls, and compliance activities.

Skills

ServiceNow IRM

TPRM

Job description

Must Have Skills:

• Hands on Service Now IRM and TPRM experience

Purpose:

The Senior Risk Management Analyst is responsible for supporting, facilitating, and training associates on operational risk programs designed to ensure the identification and mitigation of risks; management of controls and safeguards to minimize the impact of potential and existing risks affecting the organization; compliance with laws, regulations, standards, policies/procedures, and organization frameworks; and monitoring and effectuation of remediation of issues identified.

Essential Functions:

• 25% Provide advisory support in the completion of divisional risk assessments. Govern and support associates in the completion of third party risk assessments and control self-assessments to ensure the adequacy of controls in place to safeguard the organization, including tracking, monitoring, and managing issues identified. Maintain documentation for re-performance ability, including leveraging the Governance Risk and Compliance (Must have hands on Service Now IRM and TPRM Experience) tool and repository (e.g., Compliance 360). Contribute to the repository of best practices and tools/accelerators related to third party risk assessments, operational risk assessments, and control self-assessments.
• 25% Partner with business owners across the enterprise to serve as the subject matter expert in the identification of issues and concerns, provide the appropriate level of support, and proactively identify risk management, control efficiency and effectiveness, and process improvement opportunities to improve the enterprise risk culture. Track and monitor evolving risks and threats maintained within the centralized risk register, including third party risks, and collaborate with business owners to track risk and threat mitigation strategies. Collaborate with business owners to identify and contribute to a centralized inventory of processes, controls, process-level risks, and areas for improvement to ensure efficiency in the control and process environment across the enterprise.
• 20% Support maintenance of the centralized repository for third party relationships including accountable business owners, inherent risk, and tier for each respective third party relationship. Provide support to ensure compliance with the Third Party Risk Management (TPRM) framework and standards to ensure that controls in place surrounding data protection, privacy, and access (among other areas) are compliant with corporate standards and risk appetite. Support completion of due diligence on third party controls in place both corporately and with the third party, in collaboration with subject matter resources across all relevant risk domains to determine residual risk of third party relationships.
• 20% Collaborate with internal teams and key subject matter resources across all relevant risk domains to define and establish frameworks (e.g., Compliance, Risk Assessment, Risk Governance) and definitions for key data elements. Maintain frameworks to meet industry standards (e.g., NIST, HITRUST). Contribute to the development of enterprise-wide training and awareness materials that educate associates and leadership on best practices, pervasive operational risk management issues, risk management tools and processes, and lessons learned.
• 10% Provide support to ensure compliance with the established Common Compliance Framework (CCF). Contribute to the development of enterprise reporting and dashboards for monitoring and analysis of process-level risks, controls, issues, risk management, and compliance activities.

Qualifications

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.