Risk Analyst

Mayo Clinic•Rochester, MN

1d•Hybrid

About The Position

This role is a part of the Privacy Investigations Team. Conducts privacy investigations by reviewing system access, interviewing involved parties, and determining whether use or disclosure of protected information complies with privacy laws, policies, and organizational standards. Analyzes risk and documents findings clearly and objectively, preparing investigation summaries and recommendations that support defensible decision‑making and regulatory compliance. Partners with key stakeholders (e.g., Legal, HR, Information Security, Compliance) to resolve incidents, provide education, virtual/on-site trainings, support corrective actions, and contribute to ongoing privacy monitoring and prevention efforts. The incumbent will support Risk Department business operations, special projects, investigations, legal litigation, mitigation development, non-employee access and end user awareness/education.

Requirements

Bachelor’s Degree in related field such as Accounting, Audit, Human Resources, IT, law enforcement, paralegal and minimum of 5 years of related experience or 7 years related experience required.
Some roles require specialized skills (e.g. CPA, Forensic Accounting, Government, Law Enforcement, investigations, Military).
Must have technical and nontechnical communication skills (verbal and written), analytical aptitude and project management skills.
Demonstrates high level integrity and ability to use discretion and maintain confidential information.

Nice To Haves

Forensic Analytics experience preferred.
Certifications Preferred: CFE, CISM, CISSP or CITPM

Responsibilities

Supports Risk Department initiatives through workgroup participation.
Responsible for enterprise business operations, including operational growth and development.
Works collaboratively on multi-disciplinary workgroups and projects to synthesize, articulate, and document business objectives and requirements.
Builds credibility, rapport and partners with key stakeholders to provide exceptional customer service and support.
Maintains effective correspondence and in-person communication.
Assists with implementation of policies and procedures to support the organization’s risk tolerance.
Identify, monitor, and examine activities involving theft, fraud, or official misconduct/policy violations.
Gathers and organizes information from a cross-functional investigative team.
Work with Legal and Human Resources on internal and external investigations and on litigation matters using eDiscovery protocols.
Completes documentation to support findings including legal reports, SBARs, and executive summaries.
Familiarity with chain of custody protocols, including ability to follow proper computer forensic evidence handling, best practice procedures.
Possesses knowledge of data preservation, acquisition of computing and storage devices either fixed or mobile and more technical forensic investigations.
Must have technical and nontechnical communication skills (verbal and written), analytical aptitude and project management skills.
Demonstrates high level integrity and ability to use discretion and maintain confidential information.
Other functions and projects as assigned.