Risk Management Analyst (RMA) (Expert Level)
: Job Details :

Job DescriptionRisk Management Analyst (RMA) Resources identify, assess, and manage risks inherent to the operations of the client and follow organizational strategies to manage risk efficiently and effectively. The RMA provides support to the Risk Management and Compliance Teams to ensure the client is compliant with laws, regulations, policies, procedures, and standards. RMA Resources do not access Federal Tax Information.RequirementsBasic Qualifications (Mandatory):

• An Associate's degree in Risk Management, Management Information Systems (MIS), Cybersecurity, or a related field.
• At least 10 years of professional experience as an internal/external IT auditor, risk management analyst conducting audits/risk assessments of regulatory compliance, business and financial, data privacy, information technology, and cyber/physical security controls.
• Formal education in Risk Management, Management Information Systems (MIS), Cybersecurity, or a related field can be substituted for the following years of experience:
• Bachelor's degree: 1 year
• Master's degree: 2 years
• Internal/external IT auditing, and/or risk management analysis conducting audits/risk assessments of regulatory compliance, business and financial operations, data privacy, information technology, and cyber/physical security controls.
• Governance, Risk, and Compliance (GRC) framework and software utilization and administration.
• Creating, revising, and following Enterprise Risk Management (ERM) plans, policies, procedures, and standards.
• Risk management, audit, and compliance consultations and training.
• Independent audit report analysis to identify, report, and track related findings, anomalies, or problems to key stakeholders.
• Evaluation of information technology general computing controls to determine level of regulatory compliance.
• Preparation, presentation, and submission of deliverables to meet regulatory requirements

Preferred Qualifications (Desired):

• Audit/risk management experience in a Health Exchange or its partners.
• MARS-e, IRS 1075 and NIST 800-53 regulatory audit/risk management experience.
• Expert-level experience implementing, administering, and using GRC software tools.
• Prior Big-Four audit firm work experience.
• Professional certifications such as CIA, COSO-ERM, CISA, CISM, CISSP.
• Candidate have experience with the following Software and Services:
• ZenGRC
• Jira
• Confluence
• SolarWinds