Risk Management Analyst

Hello All,


I hope you are doing well.


Role: Risk Management Analyst


Location: Remote


Type: C2C/W2


Client: State of WA

Scope:


Risk Management Analyst (RMA) Resources identify, assess, and manage risks inherent to the operations of WAHBE and follow organizational strategies to manage risk efficiently and effectively. The RMA provides support to the Risk Management and Compliance Teams to ensure WAHBE is compliant with laws, regulations, policies, procedures, and standards. RMA Resources do not access Federal Tax Information.


1.Journey Level Resource Requirements


Mandatory

• An Associate's degree in Risk Management, MIS, Cybersecurity, or related field.
• At least 5 years of experience in IT auditing, risk assessment of compliance, privacy, and security controls.

Education substitution:

• Bachelor's degree = 1 year
• Master's degree = 2 years

5 years of demonstrated experience in:

• IT auditing or risk assessment.
• Using Governance, Risk, and Compliance (GRC) frameworks.
• Enterprise Risk Management (ERM) policies and training.
• Analyzing audit reports and ensuring compliance.

Desired
It's desirable to have:

• Audit/risk experience in Health Exchange environments.
• MARS-e, IRS 1075, and NIST 800-53 audit experience.
• Advanced experience with GRC tools.
• Big-Four audit firm experience.
• Certifications like CIA, COSO-ERM, CISA, CISSP.

Experience with:

• ZenGRC, Jira, Confluence, SolarWinds.

2.Senior Level Resource Requirements


Mandatory

• An Associate's degree in Risk Management, MIS, Cybersecurity, or related field.
• At least 7 years of experience in IT auditing and risk management.

Education substitution:

• Bachelor's degree = 1 year
• Master's degree = 2 years

7 years of demonstrated experience in:

• IT auditing and compliance risk assessments.
• ERM policy development and GRC framework utilization.
• Audit consultations, compliance tracking, and regulatory reporting.

Desired
It's desirable to have:

• Health Exchange audit experience.
• Advanced GRC tool expertise.
• Certifications like CIA, COSO-ERM, CISA, CISSP.

Experience with:

• ZenGRC, Jira, Confluence.

3.Expert Level Resource Requirements


Mandatory

• An Associate's degree in Risk Management, MIS, Cybersecurity, or related field.
• At least 10 years of IT audit and risk management experience.

Education substitution:

• Bachelor's degree = 1 year
• Master's degree = 2 years

10 years of experience in:

• IT auditing and risk assessment.
• GRC framework development and compliance tracking.
• ERM planning and risk consultations.

Desired


It's desirable to have:

• Health Exchange audit experience.
• MARS-e, IRS 1075, and NIST 800-53 knowledge.
• Certifications like CIA, CISA, CISSP.

Experience with:

• ZenGRC, Jira, Confluence, SolarWinds.