Senior Risk Management Analyst

Lumen Solutions Group Inc • Washington, DC

3d • Remote

About The Position

We are seeking a Senior Risk Management Analyst with strong experience in Operational Risk Management, Third-Party Risk Management (TPRM), Risk Assessments, Compliance, and Controls. The ideal candidate will partner with business owners and risk stakeholders to identify, assess, monitor, and mitigate enterprise risks. This role requires hands-on experience with ServiceNow IRM and TPRM, along with the ability to perform independent assessments, evaluate controls, manage risk issues, and support enterprise risk governance.

Requirements

• Bachelor's degree in a relevant field.
• 5+ years of experience in one or more of the following: Risk Management, Third-Party Risk Management (TPRM), Operational Risk, Audit, Compliance, Security Governance, Legal/Regulatory Services
• Hands-on ServiceNow IRM & TPRM experience – REQUIRED
• Experience performing risk assessments, control assessments, compliance reviews, and independent assessments.
• Strong understanding of risk identification, risk mitigation, inherent risk, residual risk, risk registers, and control effectiveness.

Responsibilities

• Conduct and support divisional risk assessments, third-party risk assessments, and control self-assessments (CSAs).
• Evaluate the adequacy and effectiveness of controls designed to protect organizational assets and information.
• Track, monitor, and manage identified risks, issues, remediation activities, and mitigation plans.
• Maintain risk and assessment documentation to support auditability and re-performance.
• Utilize ServiceNow IRM and TPRM to manage risk, compliance, controls, assessments, and related documentation.
• Partner with business owners as a Risk Management SME to identify issues, control gaps, emerging risks, and process improvement opportunities.
• Maintain and monitor a centralized risk register, including third-party risks and associated mitigation strategies.
• Support the inventory of business processes, controls, process-level risks, and improvement opportunities.
• Maintain third-party relationship information, including business owners, inherent risk, risk tiers, and residual risk.
• Perform and support third-party due diligence and evaluate controls related to data protection, privacy, access, and other relevant risk domains.
• Collaborate with Compliance, Security, Legal, Audit, & other subject matter experts to establish & maintain risk and compliance frameworks.
• Support frameworks aligned with industry standards such as NIST and HITRUST.
• Develop and contribute to risk management training, awareness materials, dashboards, and enterprise reporting.
• Support compliance with established Common Compliance Framework (CCF) requirements.
• Identify opportunities to improve risk management processes, control efficiency, control effectiveness, and overall enterprise risk culture.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior