Risk Management Analyst

Risk Management Analyst

Role: Risk Management Analyst

Location: Remote

Type: C2C/W2

Client: State of WA

Scope: Risk Management Analyst (RMA) Resources identify, assess, and manage risks inherent to the operations of WAHBE and follow organizational strategies to manage risk efficiently and effectively. The RMA provides support to the Risk Management and Compliance Teams to ensure WAHBE is compliant with laws, regulations, policies, procedures, and standards. RMA Resources do not access Federal Tax Information.

Journey Level Resource Requirements Mandatory

• An Associate’s degree in Risk Management, MIS, Cybersecurity, or related field.
• At least 5 years of experience in IT auditing, risk assessment of compliance, privacy, and security controls.

Education substitution:

• Bachelor’s degree = 1 year
• Master’s degree = 2 years

5 years of demonstrated experience in:

• IT auditing or risk assessment.
• Using Governance, Risk, and Compliance (GRC) frameworks.
• Enterprise Risk Management (ERM) policies and training.
• Analyzing audit reports and ensuring compliance.

Desired It’s desirable to have:

• Audit/risk experience in Health Exchange environments.
• MARS-e, IRS 1075, and NIST 800-53 audit experience.
• Advanced experience with GRC tools.
• Big-Four audit firm experience.
• Certifications like CIA, COSO-ERM, CISA, CISSP.

Experience with:

• ZenGRC, Jira, Confluence, SolarWinds.

Senior Level Resource Requirements Mandatory

• An Associate’s degree in Risk Management, MIS, Cybersecurity, or related field.
• At least 7 years of experience in IT auditing and risk management.

Education substitution:

• Bachelor’s degree = 1 year
• Master’s degree = 2 years

7 years of demonstrated experience in:

• IT auditing and compliance risk assessments.
• ERM policy development and GRC framework utilization.
• Audit consultations, compliance tracking, and regulatory reporting.

Desired It’s desirable to have:

• Health Exchange audit experience.
• Advanced GRC tool expertise.
• Certifications like CIA, COSO-ERM, CISA, CISSP.

Experience with:

• ZenGRC, Jira, Confluence.

Expert Level Resource Requirements Mandatory

• An Associate’s degree in Risk Management, MIS, Cybersecurity, or related field.
• At least 10 years of IT audit and risk management experience.

Education substitution:

• Bachelor’s degree = 1 year
• Master’s degree = 2 years

10 years of experience in:

• IT auditing and risk assessment.
• GRC framework development and compliance tracking.
• ERM planning and risk consultations.

Desired It’s desirable to have:

• Health Exchange audit experience.
• MARS-e, IRS 1075, and NIST 800-53 knowledge.
• Certifications like CIA, CISA, CISSP.

Experience with:

• ZenGRC, Jira, Confluence, SolarWinds.