Job title: Governance Risk and Compliance Risk Register Analyst
Location: Austin, TX (100% Remote)
Duration: Long term
Visa: GCH, GC-EAD, , H1B’s
Client: 70127081
Responsibilities
- Define end to end governance workflows for:
- Risk identification and intake
- Risk review and validation
- Risk acceptance, mitigation, or transfer
- Ongoing monitoring and periodic reassessment
- Establish roles and responsibilities for risk owners, reviewers, and governance bodies.
- Design escalation and reporting processes for high risk and accepted risks.
- Engage key stakeholders across business, technology, security, and governance functions to validate risk requirements and workflows.
- Facilitate working sessions or workshops to socialize the risk register and governance processes.
- Support onboarding of initial risks into the enterprise risk register.
- Produce clear, audit ready documentation covering:
- Risk register structure and data definitions
- Risk scoring methodology
- Governance workflows and decision authorities
- Provide knowledge transfer to designated security staff to ensure sustainability beyond the contract term.
Deliverables
- The contractor shall provide the following deliverables during the engagement:
- Enterprise Risk Register Framework
- Standardized risk register template and taxonomy
- Risk Scoring and Prioritization Model
- Documented likelihood and impact scales
- Scoring methodology and prioritization logic
- Risk Governance Model
- Defined workflows for risk intake, review, acceptance, and monitoring
- Roles and responsibilities matrix
- Initial Population of Risk Register
- Initial set of documented risks reflecting current cybersecurity and technology risk posture
- Final Documentation Package
- Consolidated guidance and operating procedures for ongoing risk management
Required skills
- 8 years of Experience with Risk Register Design and Framework
- 8 years of Experience with Risk Scoring and Prioritization Model
- 8 years of Experience with Governance Processes and Workflows
- 8 years of Experience with Stakeholder and Enablement
- 8 years of Demonstrated skill with documentation and knowledge transfer