Compliance Risk Analyst

Compliance Risk Analyst

Location: Philadelphia, PA 19113.

Duration: 6 months contract to hire - no visa sponsorship

Essential Functions and Responsibilities:

• Governance– Assist in the development, implementation, and maintenance of governance policies, procedures, and frameworks. Conduct regular assessments of governance practices to identify areas for improvement and optimization. Collaborate with stakeholders to ensure alignment of governance activities with organizational objectives.
• Risk Management – Conduct risk assessments to identify and evaluate potential risks across various business areas. Develop risk mitigation strategies and action plans to address identified risks. Monitor risk indicators and escalate issues as necessary to management. Assist in the implementation of risk management tools and methodologies. Implement capabilities to manage third party Cybersecurity risks.
• Compliance –Conduct compliance reviews and audits to assess adherence to regulatory obligations. Assist in the development and implementation of compliance policies, procedures, and training programs. Investigate compliance issues, conduct root cause analysis, and recommend corrective actions.
• Monitoring, Reporting & Analysis – Prepare regular reports and presentations on governance, risk, and compliance activities for management and stakeholders. Analyze data and trends to identify emerging risks and compliance gaps. Provide insights and recommendations to enhance governance, risk management, and compliance processes. Support internal and external audit activities as needed. Implement monitoring mechanisms to track compliance with IT policies, controls, and regulatory requirements. 
• Documentation Standardization – Standardize documentation practices for IT processes, controls, and compliance activities, ensuring completeness, accuracy, and accessibility of documentation.
• Perform other security-related tasks as assigned.

Desired Experience and Abilities

• Strong analytical and problem-solving abilities, with a keen attention to detail and the ability to prioritize and manage multiple tasks simultaneously.
• Proficiency with governance, risk, and compliance software/tools is desirable.
• Strong analytical skills with the ability to assess and mitigate risks effectively.
• Proficiency in monitoring mechanisms and reporting tools to track compliance with IT policies, controls, and regulatory requirements.
• Proven track record of developing and implementing governance, risk, and compliance frameworks in complex IT environments.
• Experience with data visualization tools such as Power BI, Tableau, or QlikView.

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Risk Management, or a related field. Advanced degree or professional certification (e.g., CRISC, CISA, CISM) is preferred.
• Minimum of 3 to 4 years of experience in governance, risk management, or compliance roles.
• Solid understanding of governance principles, risk management frameworks and compliance requirements
• Experience in managing audits, assessments, and regulatory compliance initiatives related to IT operations.
• Proficiency in IT governance frameworks cybersecurity principles, and risk assessment methodologies.
• Demonstrated commitment to continuous learning and professional development in the field of IT governance, risk management, and compliance.
• Excellent communication skills, both verbal and written, with the ability to convey complex concepts to diverse audiences.
• Ability to work independently and collaboratively in a fast-paced environment.
• Experience with security frameworks (e.g., CIS, NIS CSF, NIST RMF, ISO 27001) is a plus.
• Proficiency with governance, risk, and compliance software/tools is desirable.
• Experience with LogicManager or OneTrust is desirable.