Principal Risk Analyst: Privacy-Third-Party Risk Management

Mayo Clinic•Rochester, MN

About The Position

The Principal Risk Analyst will lead risk business operations, special projects, investigations, legal litigation, mitigation development, non-employee access and end user awareness/education. The incumbent will provide guidance to the RD unit for day-to-day operational support, including project management. The incumbent will demonstrate leadership and represent the RD on project teams, committees, strike teams and workgroups.

Requirements

Deep subject matter expertise in relevant compliance laws and regulations such as privacy compliance, investigations, revenue cycle compliance, device manufacturing compliance, general compliance, conflict of interest.
Understanding of and ability to apply the Seven Elements of an Effective Compliance Program.
Ability to carry out audits, assessments and investigations.
Ability to use relevant compliance tools including GRC software, monitoring tools, and issue management software.
Technical and nontechnical communication skills (verbal and written).
Analytical aptitude.
Project management skills.
High level integrity and ability to use discretion and maintain confidential information.

Nice To Haves

Some travel may be required to other Mayo Clinic sites and/or training conferences.

Responsibilities

Supports and develops RD initiatives.
Responsible for the design of enterprise business operations, including operational growth and development.
Leads multi-disciplinary workgroups and projects.
Responsible for development of policies and procedures to support the organization's risk tolerance.
Gathers and organizes information from a cross-functional investigative team.
Works directly with Legal and Human Resources on high risk internal and external investigations.
Works directly with Legal and External Counsel on policy, regulatory and/or litigation matters (using eDiscovery protocols).
Completes documentation to support findings including legal reports, SBARs, and executive summaries.
Responsible for peer review of work unit documentation.
Develops and presents Risk training(s) geared towards Mayo Clinic leadership.
Ability to follow and apply legal holds and execute proper preservation of evidence and chain of custody protocols.
Depending on role this may include the ability to follow proper computer forensic evidence handling, advanced knowledge of data preservation, acquisition of computing and storage devices either fixed or mobile and more technical forensic investigations.
Other functions and projects as assigned.