Manager of Business Resiliency, Risk & Controls

Ensemble Health Partners • Work at Home - Ohio - Other, OH

1d • $111,800 - $167,700 • Remote

About The Position

Ensemble is hiring a Manager of Business Resiliency, Risk & Controls to support its Enterprise Risk Management (ERM), business resiliency, and control architecture programs. The role combines strategic planning with practical delivery to help the organization prepare for, respond to, and recover from disruptive events while maintaining critical operations and serving customers. The manager reports to the Director, Enterprise Risk Management & Business Resiliency and partners across Internal Audit, Finance, Compliance, Cybersecurity GRC, IT Operations, IT Audit, Third-Party Risk Management, Privacy, Legal, Operations, and business leadership.

Approximately 60% of the position focuses on business resiliency, including continuity planning, business impact analyses, tabletop exercises, after-action reviews, crisis preparedness, recovery strategy, and resiliency governance. Approximately 40% focuses on ERM program execution and control architecture. The role also advances risk and control reporting, governance, analytics, and use of automation, artificial intelligence, and other technologies, with appropriate oversight.

This is a remote position. Candidates must be willing and able to travel to and work onsite at client, temporary, or corporate office locations as business needs require. The position is limited to individuals who reside and are authorized to work in the United States. Compensation is $111,800–$167,700, based on experience.

Requirements

• CBCP, MBCI, CRISC, RIMS-CRMP, CIA, CISA, or CRCR certification, or working toward one; willingness to obtain a certification within 9 months.
• At least 6 years of progressive experience in Business Resiliency and Enterprise Risk Management in a rapid-growth environment.
• At least 2 years of experience at the Manager level.
• At least 2 years of experience managing people.
• Bachelor’s degree or equivalent experience in Health Information Management, Health Information Systems, Risk Management, Accounting, Auditing, Finance, Healthcare Revenue Cycle, or a related field.
• Analytical judgment to synthesize complex risk, control, evidence, audit, and KRI information and advise leaders on implications, gaps, and mitigation strategies.
• Systems thinking to connect risks, controls, processes, technologies, and assurance activities into durable governance models.
• Ability to collaborate and influence across risk, audit, finance, technology, compliance, legal, and operational stakeholders without direct authority.
• Execution and accountability in driving cross-functional initiatives from design through adoption with clear ownership, timelines, and measurable outcomes.
• Business resiliency judgment applying continuity, crisis management, disaster recovery, and operational resilience practices.
• Communication skills to translate risk, resiliency, and control concepts into clear guidance for executives, managers, and assurance partners.
• Must reside and be authorized to work in the United States.
• Willingness and ability to travel to and work onsite at client, temporary, or corporate office locations as business needs require.

Nice To Haves

• Expertise in Business Resiliency, Operational Resilience, Enterprise Risk Management, Internal Controls, Governance, and Assurance, with the ability to integrate them into an enterprise-wide strategy.
• Ability to design scalable governance frameworks, operating models, and risk and resiliency capabilities across business functions, technology, vendors, customers, and regulatory requirements without disproportionate administrative burden or cost.
• Strong analytical, facilitation, and stakeholder engagement skills, including influencing outcomes, building consensus, challenging assumptions, and driving change without direct authority.
• Executive communication and relationship management skills, including translating complex risk, resiliency, control, technology, and emerging threat concepts into concise, actionable insights for senior leadership, executive committees, and the Board.
• Experience applying artificial intelligence, automation, analytics, and emerging technologies to improve risk, resiliency, governance, and control programs while maintaining appropriate oversight.
• Experience building organizational cultures that promote risk awareness, resiliency, accountability, preparedness, continuous improvement, and shared ownership.
• Working knowledge of COSO ERM, COSO Internal Control – Integrated Framework, ISO 31000, ISO 22301, NIST CSF, NIST AI RMF, HITRUST CSF, ISO 27001, SOC 1/SOC 2, HIPAA Security & Privacy Rules, PCI DSS, and related standards.
• Hands-on experience with GRC, resiliency, or risk management platforms such as Optro RiskOversight & CrossComply, AuditBoard, ServiceNow IRM/GRC, Archer, Workiva, MetricStream, or Fusion.
• Strong data analysis, reporting, Microsoft 365, SharePoint, and AI-assisted productivity capabilities.
• Advanced use of AI and experience managing teams using AI to drive process and technology improvements, including exploration, experimentation, and application.

Responsibilities

• Partner with the Director, Enterprise Risk Management & Business Resiliency, to develop and execute the long-term enterprise resiliency strategy and the ERM vision, framework, governance model, and operating strategy.
• Design, implement, and continuously mature business resiliency programs, frameworks, governance processes, and operating models across business operations, technology, applications, vendors, customers, and critical services.
• Support continuity planning, business impact analyses, tabletop exercises, after-action reviews, crisis preparedness, recovery strategy development, and resiliency governance.
• Identify and implement appropriate uses of artificial intelligence, automation, analytics, and emerging technologies to improve resiliency, risk, and control program efficiency, effectiveness, quality, scalability, and reporting while maintaining governance and oversight.
• Embed resilience, preparedness, dependency management, and recovery considerations in strategic planning, operational decisions, project delivery, vendor oversight, and day-to-day business activities.
• Advance ERM methodologies, taxonomies, analytics, reporting, and governance processes, including use of Optro RiskOversight and other technologies to improve efficiency, transparency, adoption, and executive insight.
• Support enterprise risk assessments by facilitating executive engagement, identifying strategic and emerging risks, challenging assumptions, strengthening risk ownership, and translating risk intelligence into recommendations for leadership, internal audit planning, and Board oversight.
• Develop risk metrics, key risk indicators, dashboards, scenario analyses, and executive communications to help leaders and the Board monitor and respond to evolving business, operational, technology, regulatory, and third-party risks.
• Establish and mature the enterprise control architecture strategy and govern its framework, taxonomy, standards, ownership models, evidence requirements, lifecycle management, and cross-framework mappings.
• Analyze relationships among risks, controls, findings, obligations, and assurance activities to identify gaps, redundancies, inefficiencies, emerging control needs, and opportunities to strengthen mitigation while reducing unnecessary control burden.
• Use analytics, automation, artificial intelligence, and enabling technologies to improve control visibility, reporting, monitoring, and effectiveness, and develop dashboards, coverage metrics, heat maps, and executive insights.
• Serve as a trusted advisor to cross-functional leaders and partner with business and functional leaders to align risk, resiliency, control, governance, and assurance activities and embed resiliency principles into business processes and initiatives.
• Translate audit findings, risk assessments, continuity exercises, recovery plans, compliance obligations, management action plans, and control requirements into integrated improvement strategies.
• Advise leaders, risk owners, and process owners on risk management, business resiliency, control design, governance, evidence expectations, and control-to-risk alignment.
• Drive cross-functional initiatives from design through adoption, with clear ownership, timelines, and measurable outcomes, and identify opportunities for efficiency, simplification, automation, and value creation.

Benefits

• Bonus incentives, including quarterly and annual incentive programs.
• Paid professional certifications.
• Tuition reimbursement.
• Comprehensive benefits, including healthcare, time off, retirement, and well-being programs.
• Career advancement and professional development.
• Benefits designed to support the physical, emotional, and financial health of associates and their families.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager