Strategic Privacy & Third-Party Risk Lead

Mayo US; Rochester (MN); On-site; USD 130,000 - 170,000; Full time

Job summary

Mayo Clinic in Rochester, MN is seeking a Privacy Third Party Risk Management Principal Risk Analyst to guide complex risk operations, privacy initiatives, and compliance projects. This role partners with Legal, Supply Chain, Office of Information Security, and TPRM to design policies and operational processes aligned with Mayo Clinic’s risk tolerance.

The position leads multidisciplinary workgroups, supports investigations, audits, and executive communications, and may involve travel to Mayo

Qualifications

• Knowledge of privacy regulations and risk frameworks.
• Ability to conduct risk assessments and investigations.
• Strong communication and stakeholder education.

Responsibilities

• Lead risk operations and complex projects across teams.
• Develop policies and procedures to support risk tolerance.
• Coordinate with Legal, HR, and external counsel.
• Provide risk guidance to leadership and business partners.

Skills

Risk management

Regulatory compliance

Data privacy

Project management

Tools

GRC software

Monitoring tools

Issue management software

Job description

Mayo Clinic in Rochester, MN is seeking a Privacy Third Party Risk Management Principal Risk Analyst to guide complex risk operations, privacy initiatives, and compliance projects. This role partners with Legal, Supply Chain, Office of Information Security, and TPRM to design policies and operational processes aligned with Mayo Clinic’s risk tolerance.

The position leads multidisciplinary workgroups, supports investigations, audits, and executive communications, and may involve travel to Mayo