Senior Risk Advisor

Key Responsibilities

• Advises leadership on enterprise risk posture, tradeoffs, and risk acceptance, delivering clear, actionable recommendations.
• Identifies systemic and emerging risks, influencing prioritization and investment decisions.
• Leads risk and gap assessments across business processes and technology environments from initiation through treatment planning.
• Owes escalation of material risks and recommends mitigation, treatment, or acceptance strategies.
• Maintains and updates the enterprise risk register, tracking remediation efforts and monitoring SLA adherence.
• Integrates risk data into executive reports and governance metrics.
• Supports and contributes to the organization’s Third-Party Risk Management (TPRM) program, including vendor risk assessments during onboarding, reassessment, and renewal phases.
• Collaborates with business owners and procurement teams on third-party risk decisions and remediation activities.
• Contributes to the ongoing development and maturity of the TPRM program.

Required Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Information Systems, Cybersecurity, Business Administration, or related field, or equivalent experience.
• 7+ years of experience in risk management, including advisory or leadership roles.
• Deep understanding of enterprise risk management frameworks and advising executive leadership.
• Proven experience performing third-party/vendor risk assessments throughout the vendor lifecycle.
• Strong communication skills with experience preparing risk documentation, reports, and governance presentations.
• Working knowledge of security and risk frameworks such as NIST CSF, NIST 800-53, PCI DSS, HIPAA, or SOC 2.
• Experience with GRC and vendor risk platforms like TruOps, Prevalent, OneTrust, ProcessUnity, or ServiceNow.
• Demonstrated stakeholder management skills with the ability to influence decisions across decentralized organizations.
• Ability to leverage analytics, automation, and AI to improve risk management processes.

Preferred Qualifications

• Certifications such as CRISC, CISA, PMI-RMP, CTPRP, CTPRA, CISM, or CISSP.
• Experience building or maturing a Third-Party Risk Management (TPRM) program.
• Familiarity with federated, matrixed, or multi-business enterprise environments.
• Knowledge of AI governance and emerging technology risks.
• Experience supporting executive risk committees and governance forums.

About Delphi-US

Delphi-US is a national IT Services firm based in Newport, Rhode Island. We attract top-tier technical and professional talent, positioning leading employers to enhance their competitive edge. Our expertise spans Data Intelligence, AI/ML, DevOps & Cloud, Health IT, and Energy Management, serving critical sectors including energy, finance, biomed, government, and Fortune 500 companies. Our dedicated consultants leverage a proprietary matching process to deliver high-quality, tailored project teams. We are committed to excellence, professionalism, and delivering lasting results for our clients.