Staff Enterprise Risk Analyst
About The Position
True Anomaly is seeking an experienced Staff Enterprise Risk Analyst to lead enterprise risk across multiple domains and teams, including cyber, compliance, program, and supply chain risk. The role determines how the company assesses risk, when to establish new risk programs, and how to describe risk in relation to the company’s objectives so management can make informed decisions about reducing, transferring, avoiding, or accepting risks. It requires expert judgment in enterprise risk methods, the ability to build effective risk programs from business objectives with little direction, and the ability to influence leaders across the company. The successful candidate will work near Long Beach, Denver, or Washington, D.C., and is expected to work onsite at least three days per week. The position remains open until filled.
Requirements
- Bachelor’s degree in business, engineering, cybersecurity, risk management, or a related field, or equivalent experience.
- 8 to 15 years of risk experience in defense, aerospace, technology, or another regulated industry, including building a risk program or method adopted by others.
- Expert knowledge of enterprise risk methods and scoring calibration, and understanding of how risk informs company planning and program governance.
- Experience rating risk against a defined method and explaining results and uncertainty to non-specialist leaders.
- Ability to start from a business objective, determine the appropriate response, and build it with little direction.
- Strong written and verbal communication skills, including bottom-line-first writing for executives.
- Working knowledge of U.S. Government contracting obligations, such as DFARS, ITAR and EAR, CUI handling, and NIST SP 800-171.
- U.S. citizenship and eligibility for a DoD Secret or TS/SCI clearance.
Nice To Haves
- Active DoD Secret or TS/SCI clearance and SAP eligibility.
- Experience supporting space or missile defense programs, such as MDA, SDA, Space Systems Command, or Golden Dome.
- Risk experience in aerospace or defense, including program, supply chain, or third-party risk.
- Experience applying quantitative methods such as FAIR when appropriate for a decision.
- Familiarity with ISO 31000, COSO ERM, AS9100D, NIST SP 800-53, or CMMC.
- Experience with a risk register or GRC platform, and data analysis in Python or SQL.
Responsibilities
- Assess risks across domains and teams using shared exposure and impact scales and the criticality of affected assets or activities; identify enterprise-wide risks that appear in multiple places.
- Determine whether a business objective requires an assessment or a new risk program, create needed programs, and maintain a current, complete risk register across domains.
- Write decision documents that lead with the bottom line and a recommendation; replace repeat decisions with standing rules; and propose risk appetite thresholds and approval authority for management to set.
- Test the scoring model against past risks, propose changes for ERM leadership to adopt, and translate the ERM Doctrine into methods for analysts across domains.
- Brief executives, shape how teams discuss risk, and surface dissent before decisions are finalized.
- Design risk intake, routing, and recording processes; write standards for other analysts; automate monitoring; and coach senior analysts.
Benefits
- 100% company-paid medical, dental, and vision coverage for employees and dependents, with HSA/HRA options.
- Flexible Time Off for exempt employees or accrued PTO of up to 25 days for non-exempt employees.
- 12 paid holidays.
- Parental leave and sick leave.
- Daily catered lunch and unlimited snacks for in-office employees.
- 401(k) retirement plan.
- Fitness reimbursement.
- Dog Fridays.
- Equity participation as part of total compensation.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
