Senior Risk and Compliance Analyst

Plan and conduct risk assessment activities across frameworks including NIST, HITRUST, PCI, HIPAA, SOC, MAR, CMS, and JCAHO Prepare draft reports and management reporting deliverables Review work prepared by less experienced team members for audit quality Interpret inherent risk assessments, engagement risks, authoritative guidance, safeguards, and contractual requirements Develop assurance plans and conduct qualitative and quantitative impact assessments Lead project plans for risk assessment and decisioning with business owners and stakeholders Collaborate with Information Security, Privacy, Procurement, Audit, Compliance, Legal, technical staff, project teams, and third parties Communicate assessment results and findings and provide consultation and direction Translate complex data flows, information sharing, integrations, and safeguards into simplified terminology and process/data flows Maintain risk management reporting dashboards in RSA Archer Prepare and assist with delivery of risk assurance reports to management Ensure risk questionnaires and assessments are distributed and completed on time Ensure enterprise compliance requirements are met Assist with training and mentoring team members Monitor departmental metrics, internal controls, contractual obligations, regulatory requirements, and customer inquiries or audits Perform other duties as assigned or requested Requirements Bachelor's Degree in Accounting, Finance, Business Administration/Management, Information Technology, Pre-Law, or related field required 6 years of related and progressive experience may substitute for a Bachelor's degree 5 years in Audit and Compliance required 3 years of Business Process Design experience 3 years of Project Management experience Expert knowledge of business and technology processes, risk and control frameworks, and assessment methodologies, particularly in healthcare payer and provider processes Knowledge of regulatory guidelines, vendor management, sourcing and procurement, and vendor assessments Excellent resource and project planning capabilities and decision-making skills Strong written and verbal communication skills for diverse audiences Strong relationship-building and influencing skills in a matrixed organization Leadership qualities and ability to motivate and inspire individuals High capacity for analytical thinking, interpretation, judgment, and strategic decision-making No language other than English required Travel requirement of 0%–25% Physical work site required Preferred certifications include CPA, CISA, CIPP, or CISSP Core Competencies Demonstrates expertise in risk assessment activities across various frameworks such as NIST, HITRUST, and HIPAA, while effectively leading project plans and collaborating with cross-functional teams. Proficient in developing assurance plans, conducting impact assessments, and ensuring compliance with regulatory guidelines. #J-18808-Ljbffr Jobtailor