operational risk analyst

OpenAI

About the Team
<br><br>
The Intelligence and Investigations team seeks to rapidly identify and mitigate abuse and strategic risks to ensure a safe online ecosystem. We are dedicated to identifying emerging abuse trends, analyzing risks, and working with our internal and external partners to implement effective mitigation strategies to protect against misuse. Our efforts contribute to OpenAI's overarching goal of developing AI that benefits humanity.
<br><br>
The Strategic Intelligence & Analysis (SIA) team provides safety intelligence for OpenAI’s products by monitoring, analyzing, and forecasting real-world abuse, geopolitical risks, and strategic threats. Our work informs safety mitigations, product decisions, and partnerships, ensuring OpenAI’s tools are deployed securely and responsibly across critical sectors.
<br><br>
About the Role
<br><br>
As an Agentic Risk Analyst, you will shape OpenAI’s operating picture for current agentic risk across products and platforms. You will bring a strategic, system-level perspective to current risks, connecting individual incidents, technical findings, abuse patterns, and external developments to relevant workstreams, mitigations, owners, dependencies, and residual gaps. You will analyze how risks emerge through autonomy, multi-step task execution, tool use, memory, retrieval, connectors, computer-use capabilities, and multi-agent workflows, with a particular focus on both adversarial misuse and unintended system behavior. By synthesizing signals from investigations, evaluations, red teaming, security reviews, product launches, external research, and real-world incidents, you will maintain a current view of material risks and evolving threat patterns. Your work will help turn complex and often ambiguous signals into coordinated decisions and measurable follow-through across product, safety, security, policy, and governance teams.
<br><br>
You will work closely with investigators, engineers, product, policy, safety, and security teams, and measurement and forecasting experts who lead longer-horizon risk discovery and scenario work to maintain a shared operating picture of current risks, mitigation priorities, owners, and dependencies. This is an opportunity to help shape how OpenAI coordinates decisions and follow-through across the evolving risk landscape of increasingly capable agentic systems, ensuring that safety decisions keep pace with rapidly advancing technology.
<br><br>
<b>In this role, you will:</b><br>
Build and maintain a current, company-wide portfolio of material agentic risks across OpenAI’s products, platforms, and emerging capabilities, mapping each risk to relevant workstreams, owners, mitigations, dependencies, decisions, and residual gaps.
<br><br>
Run a cross-functional intake and review cadence for signals from across OpenAI and the broader ecosystem to identify emerging risks, evolving threat patterns, and important shifts in the agentic risk landscape, routing findings to the right owners and decision-makers
<br><br>
Connect individual incidents, technical findings, evaluations, and weak signals to broader system-level trends, producing clear assessments of impact, severity, evidence, uncertainty, priority, and recommended action.
<br><br>
Assess how emerging capabilities, product changes, ecosystem developments, and adversary adaptation may affect current risk priorities and launch readiness, surfacing risks that are unowned, stalled, or under-mitigated for decision and escalation, and tracking residual risk after launch.
<br><br>
In partnership with colleagues who lead horizon scanning, use relevant external developments across AI safety and security research, public incidents, adversarial activity, industry standards, emerging technologies, and competitor products, as inputs to current risk prioritization and mitigation decisions at OpenAI.
<br><br>
Apply and refine practical frameworks and taxonomies for current agentic failure modes, control gaps, abuse patterns, and potential downstream harms across products, deployment environments, and user workflows, integrating them into the broader risk program.
<br><br>
Produce concise, decision-ready assessments that communicate key findings, assumptions, confidence levels, competing hypotheses, and prioritized recommendations for product, safety, security, policy, and leadership stakeholders, with accountable owners and next review points.
<br><br>
Define and track operating metrics for the agentic-risk program, including coverage, ownership, decision latency, mitigation status, and closure and partner with measurement experts on risk indicators and monitoring capabilities.
<br><br>
Partner with colleagues who lead evaluations, scenario analyses, tabletop exercises, red-team campaigns, and investigations focused on agentic systems, using their findings to drive actionable mitigations, accountable ownership, and measurable follow-through.
<br><br>
You might thrive in this role if you
<br><br>
Have significant experience—typically 7+ years—in trust and safety, integrity, security, cyber threat intelligence, AI safety, product risk, strategic intelligence, abuse investigations, or a related field.
<br><br>
Have a strong understanding of modern AI systems and agentic architectures, including hands-on experience using, evaluating, or building agentic systems. You are familiar with AI safety concepts, agentic failure modes, and misalignment risks, and can reason about how agent objectives, incentives, environments, and system design choices may produce unintended or harmful outcomes.
<br><br>
Have demonstrated experience analyzing how harmful outcomes emerge from interactions between users, products, and technical systems, and can assess how increasingly capable agentic systems may amplify, automate, or transform existing abuse vectors such as fraud, scams, social engineering, coordinated influence operations, cyber abuse, or other forms of platform misuse. You have also helped operate a cross-functional risk, safety, security, or integrity program, clarifying ownership, resolving dependencies, escalating gaps, and driving follow-through without direct authority.
<br><br>
Have exceptional analytical judgment and experience producing assessments under uncertainty. You can identify weak signals, develop and test hypotheses, distinguish signal from noise, communicate assumptions and confidence levels clearly, and update your conclusions as new evidence becomes available.
<br><br>
Possess strong technical fluency and are comfortable engaging deeply with engineers, researchers, and security practitioners. You do not need to be an engineer, but you should be able to translate technical findings into clear risk assessments.
<br><br>
Are comfortable synthesizing data and evidence from multiple sources to manage a current risk portfolio, including investigations, telemetry, evaluations, experiments, dashboards, and external research. Experience using SQL, Python, and analytical tools is a plus.
<br><br>
Have experience applying risk frameworks, threat models, severity assessments, taxonomies, or prioritization frameworks to structure current operational ambiguity and support decision-making.
<br><br>
Communicate complex topics clearly and effectively, producing concise, executive-ready analysis and influencing stakeholders across technical and non-technical teams.
<br><br>
Thrive in fast-moving environments, balancing rigor with pragmatism while building lightweight operating processes and tools that improve organizational coordination and follow-through on material risks.
<br><br>
About OpenAI
<br><br>
OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. We push the boundaries of the capabilities of AI systems and seek to safely deploy them to the world through our products. AI is an extremely powerful tool that must be created with safety and human needs at its core, and to achieve our mission, we must encompass and value the many different perspectives, voices, and experiences that form the full spectrum of humanity.
<br><br>
We are an equal opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristic.
<br><br>
For additional information, please see
<br><br>
OpenAI’s Affirmative Action and Equal Employment Opportunity Policy Statement
<br><br>
.
<br><br>
Background checks for applicants will be administered in accordance with applicable law, and qualified applicants with arrest or conviction records will be considered for employment consistent with those laws, including the San Francisco Fair Chance Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act, for US-based candidates. For unincorporated Los Angeles County workers: we reasonably believe that criminal history may have a direct, adverse and negative relationship with the following job duties, potentially resulting in the withdrawal of a conditional offer of employment: protect computer hardware entrusted to you from theft, loss or damage; return all computer hardware in your possession (including the data contained therein) upon termination of employment or end of assignment; and maintain the confidentiality of proprietary, confidential, and non-public information. In addition, job duties require access to secure and protected information technology systems and related data security obligations.
<br><br>
To notify OpenAI that you believe this job posting is non-compliant, please submit a report through
<br><br>
this form
<br><br>
. No response will be provided to inquiries unrelated to job posting compliance.
<br><br>
We are committed to providing reasonable accommodations to applicants with disabilities.
<br><br>
OpenAI Global Applicant Privacy Policy
<br><br>
At OpenAI, we believe artificial intelligence has the potential to help people solve immense global challenges, and we want the upside of AI to be widely shared. Join us in shaping the future of technology.
<br><br>
Compensation
<br><br>
$288K – $425K + Offers Equity

Agentic Risk Analyst

CoBank

<div>Benefits Overview:
<div>
A career at CoBank can offer you the opportunity to make a personal impact on the people and communities where we do business. In order to be the best, we hire the best!</div><div><b>
Remarkable Benefits Offered by CoBank</b></div><ul><li>
Careers with a purpose</li><li>
Time-Off Packages, 15 days of vacation, 10 paid sick days and 11 paid holidays</li><li>
Competitive Compensation &amp; Incentive</li><li>
Hybrid work model: flexible arrangements for most positions</li><li>
Benefits Packages, including Medical, Dental and Vision coverage, Disability, AD&amp;D, and Life Insurance</li><li>
Robust associate training and development with CoBank University</li><li>
Tuition reimbursement for higher education</li><li>
Outstanding 401k: up to 6% matching and additional 3% non-elective contribution &amp; Student Loan Match</li><li>
Community Impact: United Way Angel Day, Volunteer Day and Associate Directed Contribution</li><li>
Associate Resource Groups: creating a culture of respect and inclusion</li><li>
Recognize a fellow associate through our GEM awards</li></ul><br>
<div></div>
Job Description:
<div>
Responsible for conducting detailed analysis that contributes to and advances Risk Management programs and processes including the Operational Risk and Resilience, Product Governance, AI Risk Governance, and Risk Governance programs. The analysis performed will play a key role in supporting bank-wide initiatives through risk identification and quantification.</div>
Essential Functions:
<ul><li>Contributes to the development and evolution of risk metrics for the bank. Creates, maintains, and enhances reports to key stakeholders.</li><li>
Owns one or more ERM processes. E.g., conducts regular assessments to identify emerging operational risks, leveraging internal and external sources to benchmark industry standards, monitor compliance, and track adherence to policies and procedures.</li><li>
Utilizes data and information to aid in risk-based decision-making.</li><li>
Sources and cleans data. Determines business rules for preparing data to be consumed in both formal and informal processes.</li><li>
Queries, aggregates, and manipulates large datasets for various analyses. Supports the transformation of information into key business insights.</li><li>
Assists in the design of department/system processes for Risk Management that are efficient and comply with regulatory standards. Leads change implementation and prepares related training materials.</li><li>
Supports best practices in modeling and model risk management (e.g., parameterize and calibrate forecasting models, perform ongoing monitoring of model assumptions, develop and update documentation).</li><li>
Provides technical subject matter expertise and analytic support for ad-hoc analysis and development of visualizations with potential of becoming a standard for the bank.</li><li>
Supports the monitoring of data integrity and model risk controls execution. Identifies risks, proactively solves problems and addresses issues.</li><li>
Supports executive-level risk committees and working groups, including the creation of committee packages and other presentations.</li><li>
Presents technical results in both informal meetings and formal presentations.</li></ul>
Education:
<ul><li>Bachelor's Degree in Business, Economics, Finance or other related discipline. required</li><li>
Master's Degree in Business, Economics, Finance or other related discipline. preferred</li><li>
FRM and/or CFA preferred</li></ul>
Work Experience:
<ul><li>4 years of experience in risk management, audit, or a related area required</li><li>
3 years of experience using SAS, SQL, Python or R to perform advanced analysis. required</li><li>
Prior Experience with risk management platforms, data visualization tools (e.g., QRM, Tableau, Power BI), and advanced Excel. required</li><li>
A proactive approach, strong analytical and reasoning skills, and the ability to build strong working relationships at all levels of management are essential.</li><li>
Demonstrated ability to translate highly technical risk data into clear, actionable reports or dashboards for executive boards.</li><li>
Strong quantitative and qualitative skills to assess complex datasets and model potential outcomes.</li><li>
Proven capacity to balance concurrent responsibilities in a dynamic setting.</li><li>
Essential ability to think strategically and develop creative solutions to complex challenges.</li></ul>
Physical Exertion Details:
<div>
Sedentary Exerting up to 10 pounds of force occasionally (Occasionally: activity or condition exists up to 1/3 of the time) and/or a negligible amount of force frequently (Frequently: activity or condition exists from 1/3 to 2/3 of the time) to lift, carry, push, pull, or otherwise move objects, including the human body. Sedentary work involves sitting most of the time, but may involve walking or standing for brief periods of time. Jobs are sedentary if walking and standing are required only occasionally and all other sedentary criteria are met.</div>
Travel Requirement Details:
<div>
Occasional Travel occurs infrequently (typically, once a month or less).</div>
About CoBank:
<div>
The typical base pay range for this role is between $100,000 - $123,000. Compensation may vary based on individual job-related knowledge, skills, expertise, and experience. This position is eligible for a discretionary annual incentive program driven by organization and individual performance.</div><div>
The listed salary, other compensation and benefits information is accurate as of the date of this posting. This job will be posted for a minimum of five (5) business days or until the position is filled. CoBank reserves the right to adjust compensation for all positions and to modify or discontinue benefits programs at any time in its sole discretion, subject to applicable law.</div><div></div><div><br>
CoBank is a cooperative bank serving vital industries across rural America. The bank provides loans, leases, export financing and other financial services to agribusinesses and rural power, water and communications providers in all 50 states. The bank also provides wholesale loans and other financial services to affiliated Farm Credit associations serving more than 76,000 farmers, ranchers and other rural borrowers in 23 states around the country. CoBank is a member of the Farm Credit System, a nationwide network of banks and retail lending associations chartered to support the borrowing needs of U.S. agriculture, rural infrastructure and rural communities. Headquartered outside Denver, Colorado, CoBank serves customers from regional banking centers across the U.S. and also maintains an international representative office in Singapore.</div><div></div><div><b><br>
REASONABLE ACCOMMODATION</b></div><div>
We are committed to ensuring that our online application process provides an equal employment opportunity to all applicants, including qualified individuals with disabilities. If you are an applicant with a disability, or are assisting an applicant with a disability, and require accessibility assistance or would like to request a reasonable accommodation for any aspect of the application process, including completing an application, interviewing, or otherwise participating in the employee selection process, please submit a request by emailing recruiting@cobank.com. Include your contact information and specific details about your requested accommodation.</div><div></div><div><br>
Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment visa at this time.</div><div></div><div><br>
CoBank is an Equal Opportunity Employer.</div><div></div><div><br>
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, disability, or status as a protected veteran.</div></div>

Enterprise Risk Analyst, Operational Risk and Resilience

<div>Benefits Overview:
<div>
A career at CoBank can offer you the opportunity to make a personal impact on the people and communities where we do business. In order to be the best, we hire the best!</div><div><b>
Remarkable Benefits Offered by CoBank</b></div><ul><li>
Careers with a purpose</li><li>
Time-Off Packages, 20 days of vacation, 10 paid sick days and 11 paid holidays</li><li>
Competitive Compensation &amp; Incentive</li><li>
Hybrid work model: flexible arrangements for most positions</li><li>
Benefits Packages, including Medical, Dental and Vision coverage, Disability, AD&amp;D, and Life Insurance</li><li>
Robust associate training and development with CoBank University</li><li>
Tuition reimbursement for higher education</li><li>
Outstanding 401k: up to 6% matching and additional 3% non-elective contribution &amp; Student Loan Match</li><li>
Community Impact: United Way Angel Day, Volunteer Day and Associate Directed Contribution</li><li>
Associate Resource Groups: creating a culture of respect and inclusion</li><li>
Recognize a fellow associate through our GEM awards</li></ul><br>
<div></div>
Job Description:
<div>
Responsible for conducting detailed analysis that contributes to and advances one or more Enterprise Risk Management (ERM) programs to assist CoBank in managing credit/market/operational risks. Such programs include, but are not limited to Risk Assessment, Product Governance, Portfolio Analytics, Risk Governance, Derivative Risk Modeling, and Model Risk Management. The analysis performed will play a key role in supporting bank-wide initiatives through risk identification and quantification.</div>
Essential Functions:
<ul><li>Develops and evolves risk metrics for the bank. Creates, maintains, and enhances reports to key stakeholders.</li><li>
Owns one or more ERM processes models, or reports. Manages or creates project plans to drive bank initiatives.</li><li>
Utilizes data and information to risk-based decision-making.</li><li>
Sources and cleans data. Determines business rules for preparing data to be consumed in both formal and informal processes.</li><li>
Queries, aggregates, and manipulates large datasets for various analyses. Transforms information into key business insights.</li><li>
Designs department/system processes for Risk Management that are efficient and comply with regulatory standards. Leads change implementation and prepares related training materials.</li><li>
Adheres to best practices in modeling and model risk management (e.g., parameterize and calibrate forecasting models, perform ongoing monitoring of model assumptions, develop and update documentation).</li><li>
Provides technical and business subject matter expertise, as well as ad-hoc analysis with the potential of becoming a standard for the bank.</li><li>
Monitors data integrity and model risk controls execution. Identifies risks, proactively solves problems and addresses issues.</li><li>
Creates packages and presentations for executive-level risk committees and working groups.</li><li>
Initiates and leads discussions and meetings. Prepares and gives formal presentations to key stakeholders.</li></ul>
Education:
<ul><li>Bachelor's Degree in Economics, Mathematics, Computer Science, Statistics, Finance or other relevant discipline. required</li><li>
Master's Degree in Economics, Mathematics, Computer Science, Statistics, Finance or other relevant discipline. preferred</li><li>
FRM and/or CFA preferred</li></ul>
Work Experience:
<ul><li>6 years of financial risk management experience or other related experience. required</li><li>
3 years Experience with statistical and/or database software packages such as SAS, R, Python, SQL, or Matlab. required</li><li>
A proactive approach, strong analytical and reasoning skills, and the ability to build strong working relationships at all levels of management are essential.</li><li>
Demonstrated ability to translate highly technical risk data into clear, actionable reports or dashboards for executive boards.</li><li>
Strong quantitative and qualitative skills to assess complex datasets and model potential outcomes.</li><li>
Proven capacity to balance concurrent responsibilities in a dynamic setting. The successful candidate must have the confidence and ability to work in a fast-paced, complex environment and to handle multiple tasks and priorities at any given time</li><li>
The ability to think strategically and to offer creative solutions to complex problems is essential.</li><li>
Experience with risk management platforms, data visualization tools (e.g., QRM, Tableau, Power BI), and advanced Excel.</li></ul>
Physical Exertion Details:
<div>
Sedentary Exerting up to 10 pounds of force occasionally (Occasionally: activity or condition exists up to 1/3 of the time) and/or a negligible amount of force frequently (Frequently: activity or condition exists from 1/3 to 2/3 of the time) to lift, carry, push, pull, or otherwise move objects, including the human body. Sedentary work involves sitting most of the time, but may involve walking or standing for brief periods of time. Jobs are sedentary if walking and standing are required only occasionally and all other sedentary criteria are met.</div>
Travel Requirement Details:
<div>
Occasional Travel occurs infrequently (typically, once a month or less).</div>
About CoBank:
<div>
The typical base pay range for this role is between $110,000 - $135,300. Compensation may vary based on individual job-related knowledge, skills, expertise, and experience. This position is eligible for a discretionary annual incentive program driven by organization and individual performance.</div><div>
The listed salary, other compensation and benefits information is accurate as of the date of this posting. This job will be posted for a minimum of five (5) business days or until the position is filled. CoBank reserves the right to adjust compensation for all positions and to modify or discontinue benefits programs at any time in its sole discretion, subject to applicable law.</div><div></div><div><br>
CoBank is a cooperative bank serving vital industries across rural America. The bank provides loans, leases, export financing and other financial services to agribusinesses and rural power, water and communications providers in all 50 states. The bank also provides wholesale loans and other financial services to affiliated Farm Credit associations serving more than 76,000 farmers, ranchers and other rural borrowers in 23 states around the country. CoBank is a member of the Farm Credit System, a nationwide network of banks and retail lending associations chartered to support the borrowing needs of U.S. agriculture, rural infrastructure and rural communities. Headquartered outside Denver, Colorado, CoBank serves customers from regional banking centers across the U.S. and also maintains an international representative office in Singapore.</div><div></div><div><b><br>
REASONABLE ACCOMMODATION</b></div><div>
We are committed to ensuring that our online application process provides an equal employment opportunity to all applicants, including qualified individuals with disabilities. If you are an applicant with a disability, or are assisting an applicant with a disability, and require accessibility assistance or would like to request a reasonable accommodation for any aspect of the application process, including completing an application, interviewing, or otherwise participating in the employee selection process, please submit a request by emailing recruiting@cobank.com. Include your contact information and specific details about your requested accommodation.</div><div></div><div><br>
Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment visa at this time.</div><div></div><div><br>
CoBank is an Equal Opportunity Employer.</div><div></div><div><br>
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, disability, or status as a protected veteran.</div></div>

Senior Enterprise Risk Analyst, Risk Assessment

HamdanGlobal

<p><b>Enterprise Risk Management (ERM) Analyst</b></p><p><b>Department:</b> Governance &amp; Control &ndash; Enterprise Risk Management<br/><b>Reports To:</b> Head of ERM &amp; AML<br/><b>**************************************Location: Qatar***********************************************</b></p><p><b>Role Purpose</b></p><p>The Enterprise Risk Management (ERM) Analyst is responsible for supporting the implementation, monitoring, and continuous enhancement of the Enterprise Risk Management framework across the organization. The role provides operational, analytical, technical, and administrative support to the Head of ERM &amp; AML in identifying, assessing, monitoring, and mitigating enterprise-wide risks while ensuring compliance with regulatory requirements and internal governance standards.</p><p>Key ResponsibilitiesStrategic &amp; Risk Management Support</p><ul><li>Support the Head of ERM &amp; AML in implementing the Enterprise Risk Management strategy, framework, policies, and objectives aligned with organizational goals.</li><li>Assist in conducting enterprise-wide risk assessments and monitoring risk exposure across all business units.</li><li>Contribute to the development of risk management initiatives that support strategic and operational decision-making.</li><li>Participate in special projects, risk deep dives, and troubleshooting exercises to identify gaps, exposures, and improvement opportunities.</li></ul><p>Policies, Procedures &amp; Governance</p><ul><li>Assist in developing, reviewing, and updating ERM policies, procedures, frameworks, and governance documentation.</li><li>Ensure departmental compliance with approved policies, procedures, and regulatory requirements.</li><li>Coordinate with departments to prepare and maintain key risk management documents and regulatory submissions, including ORSA reports and related governance documentation.</li><li>Promote risk awareness and risk management best practices across the organization.</li></ul><p>Risk Registers &amp; Reporting</p><ul><li>Prepare, maintain, and update departmental and corporate risk registers based on periodic risk assessments.</li><li>Monitor existing and emerging risks to ensure timely escalation and management attention.</li><li>Maintain risk dashboards, incident logs, trend analyses, and management reports.</li><li>Prepare meeting agendas, presentations, and minutes for Corporate Risk Committee (CRC) and Risk Management Working Group (RMWG) meetings.</li><li>Support the preparation of periodic and ad-hoc reports for senior management, regulators, auditors, and rating agencies.</li></ul><p>Risk Analysis &amp; Mitigation</p><ul><li>Follow up with departments regarding identified risks, mitigation plans, and action status updates.</li><li>Conduct root cause analysis and evaluate risk interdependencies to recommend practical and effective mitigation measures.</li><li>Support the development and implementation of organizational risk response strategies and action plans.</li><li>Coordinate information requests from regulators, auditors, and other external stakeholders.</li><li>Attend regulatory meetings and represent the Head of ERM &amp; AML when required.</li></ul><p>ORSA &amp; Regulatory Support</p><ul><li>Assist external actuaries in gathering operational and financial data for Own Risk and Solvency Assessment (ORSA) exercises and stress testing scenarios.</li><li>Participate in reviewing calculations, assumptions, and draft/final ORSA reports prior to submission.</li><li>Coordinate opening and closing meetings related to ORSA reviews, audits, and regulatory inspections.</li><li>Monitor emerging risks and ensure risks exceeding approved appetite levels are escalated appropriately.</li></ul><p>Key Performance Indicators (KPIs)</p><ul><li>Timely completion and maintenance of enterprise risk registers.</li><li>Effective monitoring and reporting of enterprise risks and mitigation actions.</li><li>Compliance with internal policies, procedures, and regulatory requirements.</li><li>Accuracy and timeliness of risk reports, dashboards, and presentations.</li><li>Effectiveness of risk mitigation plans and action tracking.</li><li>Proactive identification and escalation of emerging risks.</li><li>Contribution toward maintaining a strong risk-aware culture within the organization.</li></ul><p>Reporting &amp; Authority</p><ul><li>Reports directly to the Head of ERM &amp; AML.</li><li>Operates within the financial and operational authority framework established by management.</li><li>Ensures compliance with all applicable Qatar Central Bank (QCB) regulations and corporate governance requirements.</li></ul><p>Internal &amp; External RelationshipsInternal</p><ul><li>Regular interaction with department managers, Risk Champions, and business stakeholders across the organization.</li><li>Collaborate with departments to collect risk-related information, evidence, and action updates.</li></ul><p>External</p><ul><li>Coordinate with auditors, regulators, consultants, and external actuaries as required.</li></ul><p>Qualifications &amp; Experience</p><ul><li>Bachelor&rsquo;s Degree in Risk Management, Business Administration, Finance, Accounting, Audit, Compliance, or related field.</li><li>Minimum 6&ndash;10 years of experience in Enterprise Risk Management, Insurance, Audit, Compliance, or Governance functions.</li><li>Professional Risk Management certification (e.g., IRM, CRMA, CRM, FRM) is preferred but not mandatory.</li></ul><p>Skills &amp; Competencies</p><ul><li>Strong understanding of Enterprise Risk Management frameworks and governance principles.</li><li>Excellent analytical, problem-solving, and organizational skills.</li><li>Strong report writing, presentation, and documentation abilities.</li><li>Effective communication and stakeholder management skills across all organizational levels.</li><li>Ability to work independently, manage multiple priorities, and lead initiatives proactively.</li><li>Proficiency in Microsoft Office applications and risk reporting tools.</li><li>Strong attention to detail and time management capabilities.</li></ul><p>Behavioral Competencies</p><ul><li>Proactive and solution-oriented mindset.</li><li>High level of integrity and professionalism.</li><li>Ability to work under pressure and meet deadlines.</li><li>Strong collaboration and interpersonal skills.</li><li>Continuous learning mindset with awareness of evolving regulatory and risk management practices.</li></ul><p>Pay: AED24,000.00 - AED27,000.00 per hour</p><p>Application Question(s):</p><ul><li>Do you have experience with Enterprise Risk Management domain ?</li><li>Do you have experience with Insurance or Banking or Fintech Company ?</li><li>Do you have hands on exposure with AML (anti money laundering)?</li></ul><p>Work Location: In person</p>

Sr. ERM Analyst

Alphanumeric Systems Inc

<div><div><b>Audit &amp; Compliance Analyst IV (Lead)</b></div><div><b>
Location:</b> Lynchburg, VA or Richmond, VA (Hybrid Preferred | Remote Considered)<br>
<b>Pay Rate:</b> $62.00 - $67.00 per hour</div><div></div><div><i><br>
Must be able to work in the US without sponsorship requirements.</i></div><div><i>
We are not accepting applications from 3rd party agencies.</i></div><div></div><div><br>
Alphanumeric is hiring an <b>Audit &amp; Compliance Analyst IV (Lead)</b> to work with a well-established leader in the financial and insurance industry. This role is ideal for an experienced governance, risk, and compliance (GRC) professional who enjoys improving processes, supporting audits, and driving operational excellence across enterprise information security programs.</div><div>
You'll play a key role in administering policy and compliance activities, automating governance processes, supporting regulatory initiatives, and partnering with cross-functional teams to strengthen security and compliance across the organization.</div><div></div><div><b><br>
What You'll Do:</b></div><ul><li>
Administer and support the ServiceNow Policy and Compliance modules, ensuring accurate configuration and day-to-day operations.</li><li>
Manage ServiceNow ITSM oversight queues, including intake, triage, tracking, and resolution of policy and compliance requests.</li><li>
Partner with Information Security, Risk, Compliance, Legal, Internal Audit, IT, and business teams to support enterprise governance initiatives.</li><li>
Coordinate and automate policy lifecycle activities, including policy reviews, attestations, control testing, continuous monitoring, and evidence collection.</li><li>
Improve operational efficiency through automation, standardized workflows, and streamlined compliance processes.</li><li>
Support a &quot;test once, satisfy many&quot; approach to meet multiple regulatory and audit requirements with minimal duplication.</li><li>
Monitor compliance controls and identify policy violations while supporting remediation efforts.</li><li>
Develop dashboards, reports, and compliance metrics for leadership and key stakeholders.</li><li>
Coordinate evidence requests and documentation for internal audits, external assessments, and regulatory reviews.</li><li>
Create and maintain standard operating procedures (SOPs), process documentation, and job aids.</li><li>
Identify opportunities to improve governance and compliance processes.</li><li>
Work independently while collaborating across distributed teams and multiple business functions.</li><li>
Manage competing priorities while maintaining exceptional attention to detail and quality.</li><li>
Execute assigned responsibilities with minimal supervision and maintain accountability for operational delivery.</li></ul><div></div><div><b><br>
What We're Looking For</b></div><ul><li><div>
Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field preferred.</div><ul><li>
Equivalent professional IT or cybersecurity experience may be considered in lieu of a degree.</li></ul></li><li>
Experience with cybersecurity governance, risk, and compliance (GRC) principles.</li><li>
Minimum of <b>3 years of experience with ServiceNow GRC/IRM</b>, preferably including ServiceNow ITSM.</li><li><div>
Working knowledge of cybersecurity frameworks such as:</div><ul><li>
NIST SP 800-53</li><li>
NIST Cybersecurity Framework (CSF)</li><li>
ISO/IEC 27001</li></ul></li><li>
Experience supporting policy management, compliance monitoring, audits, and control testing.</li><li>
Familiarity with governance tools such as Unified Control Framework (UCF) and SIG.</li><li>
Understanding of Software Development Lifecycle (SDLC) and project management principles.</li><li>
Excellent written and verbal communication skills.</li><li>
Strong organizational skills with the ability to manage multiple priorities.</li><li>
Passion for continuous improvement, automation, and operational excellence.</li></ul><div></div><div><b><br>
Preferred Qualifications: </b>Experience with one or more of the following is highly desirable:</div><ul><li>
Security+</li><li>
CISA</li><li>
CGRC</li><li>
CISSP</li><li>
CISM</li><li>
PMP</li><li>
Experience partnering with Risk, Compliance, Legal, and Internal Audit teams.</li><li><div>
Knowledge of regulatory and assurance frameworks including:</div><ul><li>
HIPAA</li><li>
SOX (Sarbanes-Oxley)</li><li>
NYDFS</li><li>
SOC 1</li><li>
SOC 2</li></ul></li></ul><div></div><div><b><br>
Why Join Us?</b></div><ul><li>
Competitive hourly pay of <b>$62-$67/hour.</b></li><li>
Hybrid work environment with remote flexibility for qualified candidates.</li><li>
Opportunity to support enterprise cybersecurity governance initiatives.</li><li>
Work alongside highly collaborative security, compliance, audit, and technology teams.</li><li>
Make a meaningful impact by improving security operations, compliance automation, and audit readiness within a leading financial services organization.</li></ul><div></div><b><br>
About Alphanumeric Systems Inc.:</b><p><br>
Alphanumeric is a dynamic company born of a diverse mindset and held to a distinctly high standard. You may know us as a tech and communications firm established in 1979, but we also lead life science and healthcare organizations toward a more efficient future across the globe, bringing patients and providers together to build personalized relationships that fit their needs.But at our core, we are a family with a shared and passionate dedication to our customers. We treat our candidates as amazing (because they are!)Apply today to join our family and Make Your Mark!</p></div>

Audit Compliance Analyst

Ellumen, Inc

<div><b>Cybersecurity Analyst
</b><br>
<b>Position Overview
</b><br>
Ellumen is seeking a Cybersecurity Analyst to support cybersecurity and Risk Management Framework (RMF) activities for Defense Health Agency (DHA) systems and applications. The successful candidate will serve as a key liaison supporting Information System Security Managers (ISSMs), system stakeholders, and site personnel to ensure the security, compliance, and operational integrity of DHA environments.
<br>
This role requires expertise in RMF, cybersecurity compliance, continuous monitoring, and accreditation activities across enterprise systems and networks. The Cybersecurity Analyst will evaluate security controls, assess risks, support authorization activities, and provide recommendations to strengthen the security posture of DHA systems, including local and wide area networks, workstations, network devices, and end-user devices.
<br>
<b>Key Responsibilities
</b><ul><li>Support all phases of the Risk Management Framework (RMF) lifecycle, including system authorization, continuous monitoring, and accreditation activities.
</li><li>Develop, implement, and maintain cybersecurity programs, policies, procedures, and security requirements at the organizational and system levels.
</li><li>Manage and maintain cybersecurity documentation repositories, including eMASS and related compliance artifacts.
</li><li>Coordinate cybersecurity inspections, assessments, audits, testing activities, and continuous monitoring efforts with internal and external stakeholders.
</li><li>Provide technical cybersecurity guidance and advisory support to ISSMs, site personnel, and program stakeholders.
</li><li>Review security requirements and provide recommendations to project teams and system owners.
</li><li>Analyze, review, and provide input on Plans of Action and Milestones (POA&amp;Ms) to support risk mitigation efforts.
</li><li>Support the development and implementation of Cybersecurity Control Correlation Identifier (CCI) metrics, policies, and procedures.
</li><li>Monitor compliance with DHA and Department of Defense cybersecurity policies, standards, and regulations.
</li><li>Identify, document, and report cybersecurity incidents through appropriate reporting channels.
</li><li>Provide guidance regarding CMRS tagging, TASKORD requirements, and Information Assurance Vulnerability Management (IAVM) compliance.
</li><li>Conduct cybersecurity risk assessments and provide analysis, recommendations, and strategic guidance to Government leadership.
</li><li>Collaborate with cross-functional teams to support secure system operations and maintain authorization compliance.
</li><li>Perform additional cybersecurity and compliance-related duties as assigned.
</li></ul><b>Required Qualifications
</b><ul><li>Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field. Equivalent combination of education and experience may be considered.
</li><li>Minimum of 5 years of experience supporting RMF processes within Department of Defense (DoD) or DHA environments, or equivalent relevant experience.
</li><li>Minimum of 5 years of experience supporting DHA systems, programs, or healthcare IT environments, or equivalent relevant experience.
</li><li>Active Secret Security Clearance (required).
</li><li>Strong knowledge of:
<ul><li>DoD Risk Management Framework (RMF)
</li><li>NIST 800-53 security controls
</li><li>eMASS
</li><li>Continuous Monitoring (ConMon)
</li><li>Security Control Assessments (SCAs)
</li><li>Vulnerability management and compliance reporting
</li><li>POA&amp;M development and management
</li><li>IAVM requirements and remediation processes
</li></ul></li></ul><b>Certifications
</b><br>
Candidates must meet DoD 8570/8140 requirements for IAM Level I certification and possess one of the following certifications (or equivalent):
<ul><li>CompTIA Security+ CE (minimum requirement)
</li><li>CAP
</li><li>GSLC
</li><li>Other DoD-approved IAM Level I certifications
</li></ul>For additional certification requirements, refer to the DoD Approved Baseline Certifications guidance.
<br>
<b>Preferred Qualifications
</b><ul><li>Experience supporting Defense Health Agency (DHA) enterprise environments.
</li><li>Familiarity with military healthcare systems and federal cybersecurity compliance requirements.
</li><li>Experience working directly with ISSMs, Authorizing Officials (AOs), and Security Control Assessors (SCAs).
</li><li>Strong written and verbal communication skills with the ability to present technical findings to both technical and non-technical audiences.
</li><li>Ability to manage multiple priorities in a fast-paced federal environment.
</li></ul><b>Clearance Requirement
</b>Active Secret Security Clearance required.<br>
<ul><li>
</li></ul><br>
<br>
We are committed to fostering an inclusive and professional work environment. As an equal opportunity employer, we consider all qualified applicants for employment without regard to legally protected characteristics. We offer comprehensive healthcare benefits, which will be discussed in detail prior to your first interview.</div>

Cybersecurity Analyst

<div><b>Cybersecurity Analyst</b><br>
<b>Position Overview</b><br>
Ellumen is seeking a Cybersecurity Analyst to support cybersecurity and Risk Management Framework (RMF) activities for Defense Health Agency (DHA) systems and applications. The successful candidate will serve as a key liaison supporting Information System Security Managers (ISSMs), system stakeholders, and site personnel to ensure the security, compliance, and operational integrity of DHA environments.<br>
This role requires expertise in RMF, cybersecurity compliance, continuous monitoring, and accreditation activities across enterprise systems and networks. The Cybersecurity Analyst will evaluate security controls, assess risks, support authorization activities, and provide recommendations to strengthen the security posture of DHA systems, including local and wide area networks, workstations, network devices, and end-user devices.<br>
<b>Key Responsibilities</b><ul><li>
Support all phases of the Risk Management Framework (RMF) lifecycle, including system authorization, continuous monitoring, and accreditation activities.</li><li>
Develop, implement, and maintain cybersecurity programs, policies, procedures, and security requirements at the organizational and system levels.</li><li>
Manage and maintain cybersecurity documentation repositories, including eMASS and related compliance artifacts.</li><li>
Coordinate cybersecurity inspections, assessments, audits, testing activities, and continuous monitoring efforts with internal and external stakeholders.</li><li>
Provide technical cybersecurity guidance and advisory support to ISSMs, site personnel, and program stakeholders.</li><li>
Review security requirements and provide recommendations to project teams and system owners.</li><li>
Analyze, review, and provide input on Plans of Action and Milestones (POA&amp;Ms) to support risk mitigation efforts.</li><li>
Support the development and implementation of Cybersecurity Control Correlation Identifier (CCI) metrics, policies, and procedures.</li><li>
Monitor compliance with DHA and Department of Defense cybersecurity policies, standards, and regulations.</li><li>
Identify, document, and report cybersecurity incidents through appropriate reporting channels.</li><li>
Provide guidance regarding CMRS tagging, TASKORD requirements, and Information Assurance Vulnerability Management (IAVM) compliance.</li><li>
Conduct cybersecurity risk assessments and provide analysis, recommendations, and strategic guidance to Government leadership.</li><li>
Collaborate with cross-functional teams to support secure system operations and maintain authorization compliance.</li><li>
Perform additional cybersecurity and compliance-related duties as assigned.</li></ul><b>
Required Qualifications</b><ul><li>
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field. Equivalent combination of education and experience may be considered.</li><li>
Minimum of 5 years of experience supporting RMF processes within Department of Defense (DoD) or DHA environments, or equivalent relevant experience.</li><li>
Minimum of 5 years of experience supporting DHA systems, programs, or healthcare IT environments, or equivalent relevant experience.</li><li>
Active Secret Security Clearance (required).</li><li>
Strong knowledge of:<ul><li>
DoD Risk Management Framework (RMF)</li><li>
NIST 800-53 security controls</li><li>
eMASS</li><li>
Continuous Monitoring (ConMon)</li><li>
Security Control Assessments (SCAs)</li><li>
Vulnerability management and compliance reporting</li><li>
POA&amp;M development and management</li><li>
IAVM requirements and remediation processes</li></ul></li></ul><b>
Certifications</b><br>
Candidates must meet DoD 8570/8140 requirements for IAM Level I certification and possess one of the following certifications (or equivalent):<ul><li>
CompTIA Security+ CE (minimum requirement)</li><li>
CAP</li><li>
GSLC</li><li>
Other DoD-approved IAM Level I certifications</li></ul>
For additional certification requirements, refer to the DoD Approved Baseline Certifications guidance.<br>
<b>Preferred Qualifications</b><ul><li>
Experience supporting Defense Health Agency (DHA) enterprise environments.</li><li>
Familiarity with military healthcare systems and federal cybersecurity compliance requirements.</li><li>
Experience working directly with ISSMs, Authorizing Officials (AOs), and Security Control Assessors (SCAs).</li><li>
Strong written and verbal communication skills with the ability to present technical findings to both technical and non-technical audiences.</li><li>
Ability to manage multiple priorities in a fast-paced federal environment.</li></ul><b>
Clearance Requirement</b><ul><li>
Active Secret Security Clearance required.</li></ul><br>
<br>
We are committed to fostering an inclusive and professional work environment. As an equal opportunity employer, we consider all qualified applicants for employment without regard to legally protected characteristics. We offer comprehensive healthcare benefits, which will be discussed in detail prior to your first interview.<br>
XJ6</div>

Cybersecurity Analyst- Secret Clearance Required

Search 5449+ Operational risk analyst jobs near you this June. New roles added regularly across leading industries. Apply today.