We are seeking a Senior Risk Analyst Contractor to support Enterprise Risk Management (ERM) activities across a wide range of programs, projects, and business units. This key role will involve conducting risk assessments, supporting internal controls documentation, and developing risk-related policies and procedures. The position also plays a vital role in third-party risk, information security, and business continuity planning.
Key Responsibilities:
•Participate in Enterprise Risk initiatives across all business areas and vendor engagements.
•Maintain and update risk records and documentation in the Governance, Risk, and Compliance (GRC) system.
•Represent Risk in PMO-led projects to ensure appropriate risk representation and oversight.
•Collaborate with cross-functional teams to understand business challenges and provide risk-informed solutions.
•Conduct interviews with business areas to document risks, processes, and controls.
•Assist in drafting and updating Enterprise Risk policies and procedures.
•Support internal control documentation by populating templates and drafting control narratives.
•Facilitate risk management lifecycle activities: risk identification, analysis, response, monitoring, and certification.
•Assist with third-party risk management, including vendor performance monitoring, risk profiling, and compliance tracking.
•Support collaboration with the Information Security team and contribute to the Information Security Program.
•Work alongside the Business Continuity team to maintain disaster recovery plans and update Business Impact Analyses.
Qualifications:
•Minimum of 3 years of experience in Enterprise Risk Management, focusing on governance, risk, and compliance.
•Strong knowledge of ERM principles, risk assessment methodologies, and internal controls.
•Familiarity with business continuity planning and business impact analysis.
•Ability to manage multiple priorities with minimal supervision.
•Experience with risk and security frameworks such as NIST 800-53, ISO 27001, COBIT, or COSO ERM.
•Excellent organizational skills and attention to detail.
•Strong policy and procedure writing experience.
•Ability to interpret and create process maps and flow diagrams.
Preferred Qualifications:
•Bachelor’s degree in Finance, Accounting, Information Systems, or related field.
•Professional certifications such as CISA, CIA, or CRMA.
•Previous experience in the financial services industry.
•Working knowledge of internal controls in finance and cloud/application security environments.
Job Type: Contract
Pay: $68.00 - $73.00 per hour
Expected hours: 40 per week
Schedule:
Work Location: Hybrid remote in Richmond, VA 23220