Sr. Risk Analyst

About the role

SHI International Corp., founded in 1989, is a global provider of IT solutions and services. With over 17,000 organizations relying on SHI's concierge approach, the company is committed to diversity, continuous professional growth, and employee wellness.

Responsibilities

• Identify, assess, and monitor operational, financial, reputational, and strategic risks across the organization.
• Develop, implement, and update risk management policies, procedures, and mitigation plans to ensure risks are managed within the organization’s risk appetite.
• Collaborate with all departments to understand and address their specific risks, and provide guidance on mitigation measures.
• Maintain and support the Risk and Resiliency (R&R) tool, including integration with ancillary systems.
• Lead training, communication, and awareness initiatives to build risk management capability across the firm.
• Create, update, and maintain risk documentation, including policies, standards, guidelines, process flows, the PRC library, and Risk Register.
• Ensure accurate Risk and Control Self-Assessments (RCSA), conduct control reviews for projects, business changes, third parties, and health checks, and evaluate the effectiveness of control programs.
• Conduct internal governance reviews, support audits, and partner with business managers to document and remediate risks.
• Identify and implement process improvements to strengthen controls, improve efficiency, and drive cost savings.
• Stay informed of industry trends and regulatory changes in risk management.
• Develop and present risk reports, KPIs, and KRIs for management and board review; engage management on recommended actions.
• Support Incident Response & Management efforts by identifying risks, providing metrics, and assisting as needed.

Qualifications

• In-depth knowledge and experience with risk management principles, including identification, assessment, and mitigation strategies.
• Expert/Advanced proficiency in using risk management software tools to monitor, analyze, and report on risk exposure.
• Expert/Advanced skill in project management, with the ability to lead projects to completion while ensuring alignment with goals and optimal resource utilization.
• Strong commitment to producing high-quality work and upholding organizational ethics, integrity, and compliance standards.
• Capable of thriving in fast-paced team environments, managing multiple tasks, and adapting to shifting priorities.
• Proficiency in Microsoft applications including Word, Excel, PowerPoint, Project, and Outlook; familiarity with Asana and Lucid is a plus.
• Experience in data analysis, including data cleaning, transformation, modeling, and interpretation to support strategic decision-making.
• Skilled in stakeholder management, with the ability to align diverse interests and drive consensus to achieve business objectives.
• Experienced with GRC Risk Management tools, and related interfaces (ServiceNow is a Plus).
• Proficient computer skills required, experience using Microsoft applications (Word, Excel, PowerPoint, Project, Visio, and Outlook).
• Willingness to travel up to 25% of the time to engage with internal business units and conduct vendor assessments.
• Flexibility to work extended hours, including evenings and weekends, and to respond on short notice during incident management or special project execution.

Skills

• Completed Bachelor’s Degree in Computer Science or a related field, or relevant work experience required.
• 5+ years of Risk Management experience with a strong understanding of operational risk and business process improvement methods.
• 5+ years of Project Management experience.
• 2+ years of experience in Business Continuity and Incident Management experience.
• Knowledge and experience with Risk Management, Business Continuity Management and Information Technology standards and best practices, including governance frameworks (ISO 31000, 27001, 22301, NIST, ITIL, etc.).

Benefits

The estimated annual pay range for this position is $80,000 - $130,000 which includes a base salary. The compensation for this position is dependent on job-related knowledge, skills, experience, and market location and, therefore, will vary from individual to individual. Benefits may include, but are not limited to, medical, vision, dental, 401K, and flexible spending.