Governance Risk and Compliance Risk Register Analyst - $148 CTC - REMOTE

Governance Risk and Compliance Risk Register Analyst - $148 CTC - REMOTE

Posted Today by Chandra Technologies, Inc.

Apply
Negotiable
Undetermined
Remote
Remote
Apply
Cyber Security External Auditing Management Prioritisation Risk Governance Risk Management Risk Register Stakeholder Management Templates Verification And Validation Workflows

Summary: The Governance Risk and Compliance Risk Register Analyst role focuses on defining and implementing governance workflows for risk management, including risk identification, validation, and ongoing monitoring. The position requires collaboration with stakeholders across various functions to establish clear documentation and processes. The contractor will also be responsible for producing deliverables such as risk register frameworks and governance models. This role is fully remote and emphasizes knowledge transfer for sustainability beyond the contract term.

Key Responsibilities:

  • Define end to end governance workflows for risk identification, review, acceptance, mitigation, and ongoing monitoring.
  • Establish roles and responsibilities for risk owners, reviewers, and governance bodies.
  • Design escalation and reporting processes for high risk and accepted risks.
  • Engage key stakeholders across business, technology, security, and governance functions to validate risk requirements and workflows.
  • Facilitate working sessions or workshops to socialize the risk register and governance processes.
  • Support onboarding of initial risks into the enterprise risk register.
  • Produce clear, audit ready documentation covering risk register structure, risk scoring methodology, and governance workflows.
  • Provide knowledge transfer to designated security staff to ensure sustainability beyond the contract term.
  • Deliver the Enterprise Risk Register Framework, Risk Scoring and Prioritization Model, Risk Governance Model, Initial Population of Risk Register, and Final Documentation Package.

Key Skills:

  • Experience with Risk Register Design and Framework.
  • Experience with Risk Scoring and Prioritization Model.
  • Experience with Governance Processes and Workflows.
  • Experience with Stakeholder and Enablement.
  • Demonstrated skill with documentation and knowledge transfer.

Salary (Rate): undetermined

City: undetermined

Country: undetermined

Working Arrangements: remote

IR35 Status: undetermined

Seniority Level: undetermined

Industry: Other

Job Description:

***Crop to Crop resumes are accepted

  • Define end to end governance workflows for:
  1. Risk identification and intake
  2. Risk review and validation
  3. Risk acceptance, mitigation, or transfer
  4. Ongoing monitoring and periodic reassessment
  • Establish roles and responsibilities for risk owners, reviewers, and governance bodies.
  • Design escalation and reporting processes for high risk and accepted risks.
  • Engage key stakeholders across business, technology, security, and governance functions to validate risk requirements and workflows.
  • Facilitate working sessions or workshops to socialize the risk register and governance processes.
  • Support onboarding of initial risks into the enterprise risk register.
  • Produce clear, audit ready documentation covering:
  1. Risk register structure and data definitions
  2. Risk scoring methodology
  3. Governance workflows and decision authorities
  • Provide knowledge transfer to designated security staff to ensure sustainability beyond the contract term.

The contractor shall provide the following deliverables during the engagement:

    1. Enterprise Risk Register Framework
      1. Standardized risk register template and taxonomy
    2. Risk Scoring and Prioritization Model
      1. Documented likelihood and impact scales
      2. Scoring methodology and prioritization logic
    3. Risk Governance Model
      1. Defined workflows for risk intake, review, acceptance, and monitoring
      2. Roles and responsibilities matrix
    4. Initial Population of Risk Register
      1. Initial set of documented risks reflecting current cybersecurity and technology risk posture
    5. Final Documentation Package
      1. Consolidated guidance and operating procedures for ongoing risk management

Required Skills:

  • Experience with Risk Register Design and Framework
  • Experience with Risk Scoring and Prioritization Model
  • Experience with Governance Processes and Workflows
  • Experience with Stakeholder and Enablement
  • Demonstrated skill with documentation and knowledge transfer
Apply
Similar Jobs
Loading data...