Senior Risk Management Analyst

🕒 6 days ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

🧐 Business Analyst

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

OpenLoop

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2020

💼 Consulting

⚖️ Legal

📦 Logistics

💰 $15M Series A - OpenLoop Health on 2023-03

Consulting • Legal • Logistics

OpenLoop is a white-label telehealth platform and managed services provider that helps organizations launch and scale virtual care programs. It combines SaaS-based, brandable technology (scheduling, booking, payments, EHR/API integrations) with clinical staffing, credentialing, payer coverage and RCM, regulatory/legal support, and 24/7 patient support. OpenLoop serves health plans, hospitals and health systems, retailers, employers and digital health companies with AI-powered operations, a nationwide clinician network and broad insurance coverage including Medicare and Medicaid.

📋 Description

• Own and deepen the enterprise risk register as an enterprise-wide view of risk, separate from the cyber risk register. • Sharpen the enterprise risk appetite statement and apply it to business decisions across the company. • Operate and scale the ERM policy and enterprise risk assessment methodology; run assessments and hold named risk owners accountable. • Report enterprise risk posture to executives and the Enterprise Risk Committee. • Produce risk-assessment and governance evidence across the control framework portfolio, including SOC 2, HITRUST, HIPAA, and NIST CSF 2.0. • Set reporting cadence for the security program portfolio and identify delivery risks before commitments slip. • Maintain the multi-year security risk-reduction roadmap and report progress. • Own security organization OKRs from definition through measurement and reporting. • Track critical dependencies and drive priority initiatives to completion. • Own the security awareness program. • Manage property and casualty renewals, claims, certificates of insurance, carrier audits, and insurance requirements in customer contracts. • Extend second-line risk coverage into pharmacy, financial, and clinical risk with domain owners. • Coordinate with the third-party risk and resilience owner so vendor and concentration risks reach the enterprise risk register. • Automate recurring work across register maintenance, assessment intake, evidence gathering, and reporting. • Perform other duties as assigned.

🎯 Requirements

• 10+ years in information security, risk management, or GRC. • Demonstrated ownership of a governance, risk, and compliance program or an enterprise risk program, including registers, policy, and assessment methodology. • Experience maintaining a multi-year risk-reduction roadmap and reporting progress against it. • Hands-on risk and control self-assessment (RCSA) work or a comparable enterprise risk assessment methodology you have run yourself. • Experience authoring and presenting risk reports to executives and a board or equivalent governing body. • A record of holding owners across other teams to commitments without direct authority over them. • Program experience against SOC 2, HITRUST, HIPAA, NIST CSF, or a comparable control framework. • Experience as the first person dedicated full time to a function, operating without a team of your own or a dedicated budget line. • CRISC, CISA, CISSP, or equivalent certification preferred. • Healthcare work involving sensitive data preferred. • Agentic AI systems built to automate governance intake, evidence gathering, or reporting preferred. • Direct support for SOC 2, HITRUST, or HIPAA assurance cycles preferred. • Development of a security awareness program from scratch preferred. • Ownership or administration of a GRC platform preferred.

🏖️ Benefits

• Medical, Dental, and Vision plans • Flexible Spending/Health Savings Accounts • Flexible PTO • 401(k) + Company Match • Life Insurance • Pet insurance