Lead Analyst, Business Resiliency

Ensemble Health Partners • Work at Home - Ohio - Other, OH

1d • $111,800 - $167,700 • Remote

About The Position

This role supports Ensemble’s Enterprise Risk Management (ERM), business resiliency, and control architecture programs by connecting enterprise risks, controls, evidence, continuity capabilities, and assurance activities within a consistent governance model. It partners with the Director, Enterprise Risk Management & Business Resiliency and stakeholders across Internal Audit, Finance, Compliance, Cybersecurity GRC, IT Operations, IT Audit, Third-Party Risk Management, Privacy, Legal, Operations, and business leadership to strengthen organizational resilience, risk visibility, control alignment, and executive decision-making. Approximately 60% of the role focuses on business resiliency and 40% on ERM program execution and control architecture. The posting describes the role as a Manager-level opportunity, though its listed title is Lead Analyst, Business Resiliency.

The business resiliency portion includes developing and maturing continuity and resilience capabilities, including continuity planning, business impact analyses, tabletop exercises, after-action reviews, crisis preparedness, recovery strategies, and resiliency governance. The role also advances ERM strategy, risk assessment, risk methodologies, analytics, reporting, governance, and executive insight. In control architecture, it helps establish an integrated enterprise controls framework, including control taxonomy, standards, ownership, evidence, lifecycle management, and cross-framework mappings. The position uses analytics, automation, artificial intelligence, and other technologies to improve program efficiency and oversight, and works with leaders to embed risk and resilience considerations into planning and operations.

The role is remote, but the successful candidate must be willing and able to travel to and work onsite at client, temporary, or corporate office locations as business needs require. Compensation is listed as $111,800–$167,700, based on experience.

Requirements

• One of the following certifications: CBCP, MBCI, CRISC, RIMS-CRMP, CIA, CISA, or CRCR; candidates who do not already hold a certification must be working toward one.
• Willingness to obtain a certification within 9 months.
• At least 6 years of progressive experience in Business Resiliency and Enterprise Risk Management in a rapid-growth environment, including at least 2 years at the Manager level.
• At least 2 years of experience managing people.
• Bachelor’s degree or equivalent experience in Health Information Management, Health Information Systems, Risk Management, Accounting, Auditing, Finance, Healthcare Revenue Cycle, or a related field.
• Inquisitiveness and openness to innovation, including AI, to explore improved processes and ways to reduce friction and improve patient and client experiences.
• Must reside and be authorized to work in the United States.
• Must be willing and able to travel to and work onsite at client, temporary, or corporate office locations as business needs require.

Nice To Haves

• Expertise in Business Resiliency, Operational Resilience, Enterprise Risk Management, Internal Controls, Governance, and Assurance, and ability to integrate these into an enterprise-wide strategy.
• Ability to think strategically and execute pragmatically, including designing scalable governance frameworks, operating models, and risk and resiliency capabilities without disproportionate administrative burden or cost.
• Strong analytical, facilitation, and stakeholder engagement skills, including the ability to influence outcomes, build consensus, challenge assumptions, and drive change without direct authority.
• Exceptional executive communication and relationship management skills, including the ability to translate complex topics into concise, actionable insights for senior leadership, executive committees, and the Board.
• Ability to identify, evaluate, and apply AI, automation, analytics, and emerging technologies to risk, resiliency, governance, and control programs while maintaining appropriate oversight.
• Experience building cultures of risk awareness, resiliency, accountability, preparedness, continuous improvement, and shared ownership.
• Working knowledge of frameworks and standards such as COSO ERM, COSO Internal Control – Integrated Framework, ISO 31000, ISO 22301, NIST CSF, NIST AI RMF, HITRUST CSF, ISO 27001, SOC 1/SOC 2, HIPAA Security and Privacy Rules, and PCI DSS.
• Hands-on experience with GRC, resiliency, or risk management platforms such as Optro RiskOversight and CrossComply, AuditBoard, ServiceNow IRM/GRC, Archer, Workiva, MetricStream, Fusion, or comparable solutions.
• Strong data analysis, reporting, Microsoft 365, SharePoint, and AI-assisted productivity capabilities.

Responsibilities

• Partner with the Director, Enterprise Risk Management & Business Resiliency to develop and execute the long-term enterprise resiliency strategy.
• Design, implement, and mature business resiliency programs, frameworks, governance processes, and operating models across business operations, technology, applications, vendors, customers, and critical services.
• Use artificial intelligence, automation, analytics, and emerging technologies to improve resiliency, risk, and control program efficiency, effectiveness, quality, scalability, and reporting, with appropriate governance and oversight.
• Embed resilience, preparedness, dependency management, and recovery considerations into strategic planning, operational decisions, project delivery, vendor oversight, and day-to-day business activities.
• Define and execute the long-term vision, framework, governance model, and operating strategy for Enterprise Risk Management.
• Advance ERM methodologies, taxonomies, analytics, reporting, and governance processes, using Optro RiskOversight, automation, artificial intelligence, and other technologies where appropriate.
• Support enterprise risk assessments by facilitating executive engagement, identifying strategic and emerging risks, challenging assumptions, strengthening risk ownership, and translating risk intelligence into recommendations.
• Develop risk metrics, key risk indicators, dashboards, scenario analyses, and executive communications for leaders and the Board.
• Establish and mature the enterprise control architecture strategy and design and govern the controls framework, including taxonomy, standards, ownership models, evidence requirements, lifecycle management, and cross-framework mappings.
• Analyze relationships between risks, controls, findings, obligations, and assurance activities to identify coverage gaps, redundancies, inefficiencies, emerging control needs, and opportunities to strengthen mitigation.
• Use analytics, automation, artificial intelligence, and enabling technologies to improve control visibility, reporting, monitoring, and effectiveness, and develop dashboards, coverage metrics, heat maps, and executive insights.
• Serve as a trusted advisor to leaders across Operations, Internal Audit, Finance, Business Resiliency, Cybersecurity, IT, Third-Party Risk Management, Compliance, Privacy, Legal, and other functions.
• Partner with business and functional leaders to incorporate resiliency principles into operational processes, technology initiatives, vendor oversight, customer commitments, strategic planning, and major business changes.
• Translate audit findings, risk assessments, continuity exercises, recovery planning, compliance obligations, management action plans, and control requirements into integrated improvement strategies.
• Advise leaders, risk owners, and process owners on risk management, business resiliency, control design, governance, evidence expectations, and control-to-risk alignment.
• Drive cross-functional initiatives from design through adoption, with clear ownership, timelines, and measurable outcomes, while identifying opportunities for efficiency, simplification, automation, and value creation.

Benefits

• Bonus incentives
• Paid certifications
• Tuition reimbursement
• Comprehensive benefits package, including healthcare, time off, retirement, and well-being programs
• Professional development
• Quarterly and annual incentive programs

What This Job Offers

• Job Type: Full-time
• Career Level: Manager