Senior Operational Risk & Compliance Analyst

Job Summary: 

IAIC is seeking a Senior Operational Risk & Compliance Analyst to work within the Enterprise Risk and Compliance program, responsible for supporting the identification, assessment, and monitoring of risks while ensuring compliance with regulatory and internal requirements. This role works closely with risk and compliance managers, business units, and other stakeholders to maintain a strong risk management framework and promote adherence to policies and regulations. The ideal candidate will have a strong understanding of risk frameworks, governance structures, and regulatory expectations. 

Job Location: Remote 

Main Responsibilities:     

Risk Management and Governance: 

• Assist in conducting risk assessments to identify operational, financial, and compliance risks across business processes and systems. 

• Collect and analyze data to evaluate risk likelihood and impact using established methodologies. 

• Support the maintenance of risk registers and key risk indicators (KRIs).  

• Support the development and implementation of risk and compliance policies, procedures, and controls. 

• Conduct reviews to ensure controls are operating effectively and recommend improvements. 

• Assist in updating risk and compliance frameworks to align with industry standards 

• Support the investigation, documentation, and reporting of risk and compliance incidents, including data collection and root cause analysis. 

• Contribute to the development and testing of business continuity, disaster recovery, and incident response plans. 

Compliance Monitoring: 

• Monitor adherence to applicable laws, regulations, and internal policies (e.g., SOX, Privacy laws, ISO 31000). 

• Assist in preparing documentation and evidence for internal and external audits. 

• Track regulatory changes and assist in assessing their impact on business operations. 

Ethics Program Development and Maintenance 

• Assist in designing, implementing, and maintaining an enterprise-wide ethics program to promote integrity and ethical decision-making. 

• Support the development of a code of conduct and related policies, ensuring alignment with organizational values and regulatory requirements. 

• Coordinate ethics training and awareness campaigns to educate employees on ethical standards and reporting mechanisms. 

• Monitor and investigate reports of ethical concerns or violations, ensuring confidentiality and compliance with whistleblower policies. 

• Maintain ethics program documentation and metrics, reporting on program effectiveness to management and governance bodies. 

Reporting and Communication: 

• Prepare risk and compliance reports, dashboards, and metrics for management and governance committees. 

• Communicate findings and recommendations to stakeholders in a clear and concise manner. 

• Support the creation of presentations and materials for risk and compliance training sessions. 

Training and Awareness: 

• Assist in developing and delivering training materials to promote risk and compliance awareness. 

• Support initiatives to foster a culture of risk management and ethical behavior across the organization. 

Insurance Risk Management 

• Assist with the annual insurance renewal process, including data collection, application preparation, negotiations with brokers and carriers, and subsequent invoice processing and payment. 

• Maintain accurate records of insurance policies, claims, certificates of insurance, and risk exposures 

• Collaborate with internal departments (e.g., legal, procurement, operations, etc.) to assess insurance needs for contracts, projects, and new initiatives. 

Basic Qualifications:   

• Bachelor’s degree in business, Finance, Risk Management, or a related field. 

• 5-10 years of experience in risk management, compliance, audit, or a related field. 

• Experience implementing Enterprise Risk Management tools. 

• Basic understanding of risk management frameworks (e.g., COSO, ISO 31000) and compliance regulations. 

• Strong analytical skills with the ability to interpret data and identify trends. 

• Proficiency in Microsoft Office (Excel, PowerPoint (Excel, Word, PowerPoint) and familiarity with GRC tools or data analytics software. 

• Excellent written and verbal communication skills for technical and non-technical audiences. 

• Detail-oriented with strong organizational and time-management skills. 

• Ability to work collaboratively in a team-oriented environment. 

Preferred Qualifications: 

• Familiarity with GRC platforms or risk management software. 

• Knowledge of data privacy regulations or industry standards (e.g., NIST, ISO). 

• Experience with process mapping or control testing. 

• Certifications such as ARM, CRMP (RIMS), RMP, CIA, or CCEP are a plus but not required. 

• Experience in highly regulated industries (e.g., finance, healthcare, technology) is a plus. 

• Exposure to risk assessments, compliance monitoring, or regulatory reporting preferred. 

#carrier

#IPG