Risk Analyst

State of Maryland•Anne Arundel, MD

2d•Onsite

About The Position

As the state’s IT leader, DoIT manages information technology and telecommunications services and provides critical support to state agencies, the Executive Office of the Governor, coordinating offices, and independent Executive Branch agencies. The agency provides cybersecurity, digital, data governance, AI enablement, infrastructure, and platform services to its partner agencies, ensuring the State of Maryland is more secure, productive, and accessible. This position leads the audit intake process in Service Now and serves as the data interpreter for the compliance programs. The role involves identifying, evaluating, and prioritizing areas of non-compliance, control weakness, and operational risk across the Department and its vendors. It converts risk indicators, audit results, audit intake trends, and operational data into actionable analysis to enable management to intervene early, strengthen controls, and focus improvement efforts where exposure is most significant. The role also performs targeted internal audits, spot checks, and control reviews to identify non-compliance or emerging risk before issues develop into formal findings or external audit observations. It analyzes trends from various sources to identify recurring issues and develops dashboards, scorecards, and reports to present risk exposure and improvement priorities.

Requirements

Graduation from an accredited high school or possession of a high school equivalency certificate.
Six years of administrative staff or professional work.
Candidates may substitute 30 college credit hours from an accredited college or university for each year up to four years of the required experience.
Candidates may substitute the possession of a Bachelor's degree from an accredited college or university and two years of experience in administrative staff or professional work for the required experience.
Candidates may substitute the possession of a Master's degree from an accredited college or university for the required experience.
Candidates may substitute U.S. Armed Forces military service experience as a commissioned officer involving staff work related to the administration of rules, regulations, policy, procedures and processes, or overseeing or coordinating unit operations or functioning as a staff assistant to a higher ranking commissioned officer on a year-for-year basis for the required experience.

Nice To Haves

One year experience using ServiceNow to collect and track audit data.
Experience interpreting data from audit findings and putting this data into clear readable statements that stakeholders can instantly understand.
Experience conducting Federal and/or State regulatory compliance audits.

Responsibilities

Leads the audit intake process in Service Now.
Serves as the data interpreter for the compliance programs by identifying, evaluating, and prioritizing areas of non-compliance, control weakness, and operational risk across the Department to include its vendors.
Converts risk indicators, audit results, audit intake trends, and operational data into actionable analysis that enables management to intervene early, strengthen controls, and focus improvement efforts where exposure is most significant.
Perform targeted internal audits, spot checks, and control reviews to identify non-compliance or emerging risk before issues develop into formal findings or external audit observations.
Analyze trends from intake mechanisms, audit activity, compliance cases, incident patterns, and current projects to identify recurring hot spots, failure points, or systemic weaknesses.
Develop dashboards, scorecards, and reports that present risk exposure, trend patterns, and improvement priorities in a clear format for management and compliance leadership.
Other duties assigned.