Governance Risk and Compliance Risk Register Analyst

Allied Consultants, Inc.•Austin, TX

1d•Remote

About The Position

Allied Consultants, Inc is a proudly Austin based firm with over 34 years of experience delivering top-tier technical and business professionals within Texas State Agencies. They are currently seeking an experienced Governance Risk and Compliance Risk Register Analyst to play a key role within a high-impact technical services team. Allied Consultants values its consultants and is committed to providing an exceptional experience. Candidates selected for interviews will be subject to a criminal background check and may be required to pass a drug screening, in compliance with federal and state regulations. All offers of employment are contingent upon successful completion of these checks. Allied Consultants is a proud to be an Equal Opportunity Employer, celebrating diversity and committed to creating an inclusive environment for all employees.

Requirements

Experience with Risk Register Design and Framework (8 years Required)
Experience with Risk Scoring and Prioritization Model (8 years Required)
Experience with Governance Processes and Workflows (8 years Required)
Experience with Stakeholder and Enablement (8 years Required)
Demonstrated skill with documentation and knowledge transfer (8 years Required)

Responsibilities

Define end to end governance workflows for: Risk identification and intake, Risk review and validation, Risk acceptance, mitigation, or transfer, Ongoing monitoring and periodic reassessment
Establish roles and responsibilities for risk owners, reviewers, and governance bodies.
Design escalation and reporting processes for high risk and accepted risks.
Engage key stakeholders across business, technology, security, and governance functions to validate risk requirements and workflows.
Facilitate working sessions or workshops to socialize the risk register and governance processes.
Support onboarding of initial risks into the enterprise risk register.
Produce clear, audit ready documentation covering: Risk register structure and data definitions, Risk scoring methodology, Governance workflows and decision authorities
Provide knowledge transfer to designated security staff to ensure sustainability beyond the contract term.
The contractor shall provide the following deliverables during the engagement: Enterprise Risk Register Framework (Standardized risk register template and taxonomy)
The contractor shall provide the following deliverables during the engagement: Risk Scoring and Prioritization Model (Documented likelihood and impact scales, Scoring methodology and prioritization logic)
The contractor shall provide the following deliverables during the engagement: Risk Governance Model (Defined workflows for risk intake, review, acceptance, and monitoring, Roles and responsibilities matrix)
The contractor shall provide the following deliverables during the engagement: Initial Population of Risk Register (Initial set of documented risks reflecting current cybersecurity and technology risk posture)
The contractor shall provide the following deliverables during the engagement: Final Documentation Package (Consolidated guidance and operating procedures for ongoing risk management)