risk management specialist

Saudi German Health

<div>
 
 We are looking for a dedicated
 
 Patient Safety &amp; Risk Specialist / Supervisor
 
 to join our team and drive a culture of safety, quality, and continuous improvement across our healthcare facilities.
 
 
 
 
 
 Key Responsibilities
 
 <ul>
 <li>
 Lead and support patient safety initiatives in line with international accreditation standards.
 </li>
 <li>
 Investigate, analyze, and manage patient safety incidents, adverse events, and near misses.
 </li>
 <li>
 Conduct Root Cause Analysis (RCA), Failure Mode and Effects Analysis (FMEA), and risk assessments.
 </li>
 <li>
 Develop and implement risk mitigation strategies and corrective action plans.
 </li>
 <li>
 Monitor patient safety indicators and prepare performance reports and recommendations.
 </li>
 <li>
 Ensure compliance with regulatory requirements and accreditation standards (JCI/CBAHI).
 </li>
 <li>
 Deliver patient safety education and awareness programs for clinical and non-clinical staff.
 </li>
 <li>
 Collaborate with multidisciplinary teams to improve quality of care and reduce clinical risks.
 </li>
 <li>
 Support organizational quality improvement projects and patient safety campaigns.
 </li>
 </ul>
 
 
 
 
 Requirements
 
 <ul>
 <li>
 Bachelor's degree in Nursing, Healthcare Administration, Pharmacy, Medicine, or another relevant healthcare discipline.
 </li>
 <li>
 Master's degree or professional certification in Patient Safety, Healthcare Quality, or Risk Management is an advantage.
 </li>
 <li>
 
 Minimum 6-10 years of experience in Patient Safety, Clinical Risk Management, or Healthcare Quality within a hospital setting.
 
 </li>
 <li>
 Strong knowledge of patient safety principles, risk management methodologies, and quality improvement tools.
 </li>
 <li>
 Hands-on experience with incident reporting systems, RCA, FMEA, and healthcare accreditation standards (JCI/CBAHI).
 </li>
 <li>
 Excellent analytical, communication, presentation, and report-writing skills.
 </li>
 <li>
 Ability to lead initiatives, facilitate investigations, and work effectively with multidisciplinary teams.
 </li>
 </ul>
</div>

Patient Safety and Risk Specialist/Supervisor

West Bend Insurance Company

<div>
 Recognized as a  Milwaukee Journal Sentinel  Top Workplace for 14 consecutive years, including three years of being honored as number one! Join us at West Bend, where we believe that our associates are our greatest asset. We hire talented individuals who are conscientious, dedicated, customer focused, and able to build lasting relationships. We create and maintain an environment where you feel a sense of belonging and appreciation. Your diversity of thought, experience, and knowledge are valued. We&rsquo;re committed to fostering a welcoming culture, offering you opportunities for meaningful work and professional growth. More than a workplace, we celebrate our successes and take pride in serving our communities.
 
 
 
 Job Summary
 
 
 
 West Bend is looking for a Loss Control Representative to join our growing team.
 
 
 Conduct onsite calls to provide risk assessments and service to prospect, new quote and existing accounts. Risk Assessments include physical surveys, investigating risk exposures/accidents, analyzing risk experience, developing service plans and providing recommendations. Consult with underwriters to determine account and risk acceptability. Provide verbal and written correspondence to underwriting. Work with agents to foster and develop relationships and to secure new business. Effectively manage a service territory, work with customers to ensure safety planning is in place and conduct training presentations to business clients, large groups, or associations. Training presentations may be conducted in-person, and occasionally on a weekend.
 
 
 
 Work Location
 
 
 
 This is a field-based position covering the Central Virginia region and working out of your home office.
 
 
 The internal deadline to apply is 06/22/2026. External applications will be accepted on a rolling basis while the position remains open.
 
 
 
 Responsibilities &amp; Qualifications
 
 
 
 
 Summary of Responsibilities
 
 
 
 <ul>
 <li>
 3+ years of experience in safety, loss control, risk management, insurance, claims, underwriting, or a related field.
 </li>
 <li>
 Demonstrates the ability to work independently in a field-based territory, evaluate large or complex accounts across multiple classes of business, identify key loss drivers, and develop practical recommendations to help reduce loss frequency and severity.
 </li>
 <li>
 Proficient with Microsoft Office, including Word, Excel and PowerPoint
 </li>
 <li>
 Proven interpersonal, presentation, relationship-building, oral, and written communication skills, with the ability to clearly explain risk findings to underwriting partners, agents, and insureds.
 </li>
 <li>
 Strong problem-solving, critical thinking, active listening, negotiation, prioritization, and decision-making skills.
 </li>
 <li>
 Valid driver&rsquo;s license required
 </li>
 <li>
 Strong written communication skills with the ability to document field observations, loss drivers, and recommendations in a clear, practical, and business-focused manner.
 </li>
 <li>
 Ability to work independently in a remote, field-based territory with regular travel throughout Virginia.
 </li>
 <li>
 Valid driver's license required.
 
 
 </li>
 </ul>
 
 Preferred Education And Training
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Loss Control, Risk Management, Safety, Insurance or related field
 </li>
 <li>
 Designation in safety, health or insurance (CSP, ASP, ARM, CRM, CIC, CPCU, etc.) or willingness to pursue
 </li>
 <li>
 Demonstrates a willingness to support peers, participate in advanced projects, engage with internal and external partners, and pursue ongoing professional development through training, conferences, or professional associations.
 </li>
 <li>
 Previous experience working for/with a multi-line insurance carrier
 
 
 </li>
 </ul>
 
 In a competitive market for top talent, what sets West Bend apart?
 
 
 
 <ul>
 <li>
 We offer stability and continued growth.
 </li>
 <li>
 We reward for performance &ndash; both at the personal and company level.
 </li>
 <li>
 Our leadership team will help ensure your success by partnering with you every step of the way. From training and development to tools and resources, your success is our success.
 </li>
 <li>
 This position provides ownership of a defined Virginia territory with multiline exposure and regular partnership with underwriting, agents, and insureds
 </li>
 <li>
 For someone who enjoys practical risk management, field work, and relationship-based service, this role offers meaningful opportunity to make a direct impact.
 
 
 </li>
 </ul>
 If this sounds like the opportunity and company you have been looking for to advance your career, then apply today.
 
 
 
 Salary Statement
 
 
 
 The salary range for this position is $67,000 - $110,000
 
 
 The actual base pay offered to the successful candidate will be based on multiple factors, including but not limited to job-related knowledge/skills, experience, business needs, geographical location, and internal equity.  Compensation decisions are made by West Bend and are dependent upon the facts and circumstances of each position and candidate.
 
 
 
 Benefits
 
 
 
 
 West Bend offers a comprehensive benefit plan including but not limited to :
 
 
 
 <ul>
 <li>
 Medical &amp; Prescription Insurance
 </li>
 <li>
 Health Savings Account
 </li>
 <li>
 Dental Insurance
 </li>
 <li>
 Vision Insurance
 </li>
 <li>
 Short and Long Term Disability
 </li>
 <li>
 Flexible Spending Accounts
 </li>
 <li>
 Life and Accidental Death &amp; Disability
 </li>
 <li>
 Accident and Critical Illness Insurance
 </li>
 <li>
 Employee Assistance Program
 </li>
 <li>
 401(k) Plan with Company Match
 </li>
 <li>
 Pet Insurance
 </li>
 <li>
 Paid Time Off . Standard first year PTO is 17 days , pro-rated based on month of hire. E nhance d PTO may be available for experienced candidates
 </li>
 <li>
 Bonus eligible based on performance
 </li>
 <li>
 West Bend will comply with any applicable state and local laws regarding employee leave benefits, including, but not limited to providing time off pursuant to the Colorado Healthy Families and Workplaces Act for Colorado employees, in accordance with its plans and policies.
 
 
 </li>
 </ul>
 
 EEO
 
 
 
 West Bend provides equal employment opportunities to all associates and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, and promotion.
 
 
</div>

Loss Control Representative (Central Virginia)

Mace Group

<div>Mace combines construction expertise with consultancy to unlock potential in every person or project and redefine the boundaries of ambition. Our values shape the way we consult and define the people we want to join us on our journey.
The project:
This is an opportunity to work on one of the largest programmes in Saudi Arabia. This unique project consists of major mixed-use development including sports facilities, entertainment and arts along with all associated infrastructure.
Mace is one of the delivery partners requiring high-calibre and experienced professionals to lead integrated teams throughout each phase of the project.
You&rsquo;ll be responsible for:
<ul><li>Champion safety-first values, confidently applying stop-work authority and promoting wellbeing standards.</li>
<li>Demonstrate leadership behaviours aligned with organisational values, mentoring and coaching junior staff.</li>
<li>Implement and continuously improve risk frameworks, registers, dashboards and reporting processes.</li>
<li>Facilitate risk workshops, reviews, and assessments to identify, evaluate, and mitigate project risks.</li>
<li>Collaborate with project teams to integrate risk controls into plans, schedules and budgets.</li>
<li>Monitor changes to risk exposure and the effectiveness of controls, driving timely mitigation and continuous improvement.</li>
<li>Support risk reviews, workshops, audits, and assurance activities to promote compliance with governance requirements and industry best practice.</li>
<li>Partner with project teams to embed risk management into project planning, delivery, schedules, and budgets.</li>
<li>Ensure high-quality risk data, compliance with best practice, and proactive monitoring of changing risk profiles.</li>
<li>Works collaboratively towards the common goal of net zero carbon transition and share responsibility for the proactive identification and management of the associated carbon emissions and reductions during the delivery of work.</li>
</ul>You&rsquo;ll need to have:
<ul><li>Relevant degree or diploma in risk management, engineering or project management.</li>
<li>Progressing toward chartership with a recognised professional body and ongoing professional development.</li>
<li>10+ years&rsquo; risk leadership experience on major projects, ideally in KSA/Middle East.</li>
<li>Strong expertise in risk tools, analytics, and stakeholder collaboration.</li>
<li>Necessary visa criteria for the Kingdom of Saudi Arabia and have relevant work experience working on high-valued projects/programmes for a project management consultancy business, which are required for immigration and client approval.</li>
</ul>Our values
Safety first - Going home safe and well: We champion a safe, diverse, and inclusive working environment, understanding the importance of well-being in every team.
Client focus - Deliver on our promise: We own the quality of deliverables and strategic outcomes and build long-term relationships with our clients.
Integrity - Always do the right thing: We influence positive outcomes within our industry while always aligning with our compliance obligations.
Create opportunity - For our people to excel: We champion a continuous improvement culture throughout all activities, inspiring our people and teams to develop. 
 
Mace is an inclusive employer and welcomes interest from a diverse range of candidates. Even if you feel you do not fulfill all the criteria, please apply, as you may still be the best candidate for this role or another role within our organisation. 
 
We are also open to discussing part-time, flexible, and hybrid working options if suitable within the role.
#LI-Onsite</div>

Risk Manager

KeyBank

<div>Location:
4910 Tiedeman Road, Brooklyn Ohio
About the Job
Reporting to the Director of Cybersecurity Risk Oversight, the Sr. Cybersecurity Risk Oversight Professional is a 2nd Line of Defense risk management position that provides independent oversight and Risk Management subject matter expertise to 1st Line of Defense Business units and their corresponding Business Risk and Control Analysts. 
This position is responsible for Operational Risk oversight of the Key Technology and Operations Services line of business, as well as technology and information security risk oversight for areas of the enterprise that manage technology. As part of this oversight role, experience with cybersecurity domains, operations, architecture, governance, information security, and the ability to leverage that experience to identify material risks, provide credible challenge and assist in developing effective mitigation strategies.
Essential Functions<ul><li>
Evaluate risk and control identification within key processes and perform gap assessments on control coverage as well as first line of defense identification processes</li><li>
Collaborate with leaders to gain insights on operational performance, emerging risks and strategic initiatives while identifying opportunities for improvement.</li><li>
Evaluate and monitor projects, strategic initiatives, and new technologies to ensure alignment with risk tolerance and business goals.</li><li>
Review risks, controls and, conduct assessments to support effective oversight and compliance with risk management requirements.</li><li>
Oversee the technology portfolio, assessing projects and initiatives to ensure alignment with risk appetite and adequate mitigation strategies.</li><li>
Support and enhance the overall risk oversight framework by developing and updating oversight practices.</li><li>
Partner with various teams to influence the implementation of operational practices to mitigate risk within appetite.</li><li>
Provide expert advice on risk management practices, offering practical solutions to mitigate identified risks.</li><li>
Analyze and assess risks associated with new products or services including third parties.</li><li>
Assist with audits and regulatory examinations, ensuring through and timely responses to inquiries and findings.</li><li>
Foster positive relationships with business partners and senior management ensuring open communication on risk matters.</li><li>
Escalate and report any significant risk issues and facilitate appropriate corrective actions.</li><li>
Perform ongoing monitoring of emerging risks, industry and regulatory trends.</li></ul>
Required Qualifications<ul><li>
Bachelor&rsquo;s degree in business, finance, technology, or economics or commensurate/relevant degree is required.</li><li>
Minimum of 5 years industry experience, within Operational Risk, Enterprise Risk, Technology Risk, Information Security Risk, External/Internal Audit or in the technology or information security lines of business.</li><li>
Outstanding active listening skills</li><li>
Demonstrated ability to work with internal and external auditors and regulators.</li><li>
Ability to think strategically coupled with the ability to drive to execution</li><li>
Ability to view risk holistically within a dynamic, fast paced team environment</li><li>
In-depth practical knowledge of internal controls, risk assessments and operational and compliance processes, and applicable techniques for implementation of compliance and legal requirements and operational processes.</li><li>
Familiarity with Microsoft Office tools such as Excel, Teams, and the proven ability to learn how to use other unique technologies.</li><li>
Capable of conducting in depth testing of systems, processes and controls</li><li>
Manage workflows and task assignment to ensure timely completion of work</li><li>
Have an execution oriented, process efficiency and continuous improvement mindset</li><li>
Possessing intellectual curiosity and a passion for seeking to understand</li><li>
Proven ability to have, maintain, and establish strong contacts within the industry so as to be aware of current industry issues and practices</li></ul>
Licenses and Certifications<ul><li>
Applicable certifications such as:<ul><li>
ISACA: CISA, CRISC, CET, CGEIT, CISM</li><li>
ISC2: CISSP, CCSP, SSCP</li><li>
Cloud Security Alliance Certs: CCAK</li><li>
Cloud Provider-Specific Certifications</li></ul></li></ul>
Preferred Qualifications<ul><li>
MBA, Law Degree or other relevant advanced education</li><li>
Current and practical knowledge of Technology and/or Information Security activities, challenges, and workflows</li><li>
Additional industry certifications such as those listed above</li><li>
BS or Masters in Technology or Security related field</li><li>
Foundational knowledge of Archer GRC preferred</li><li>
Project management, Agile experience preferred</li></ul>
Tactical Skills<ul><li>
Demonstrated experience working with regulatory agencies, guidelines and requirements</li><li>
Strong ability to work with all levels of management within the company</li><li>
Experience working/managing projects across multiple functional areas and dealing with multiple business partners</li><li>
Experience working on initiatives that require strategic planning/thinking</li><li>
Flexibility to switch priorities based on the needs of the company in a fast-paced environment</li><li>
Ability to grasp complex processes quickly and be able to identify risks and compensating controls</li><li>
Excellent problem-solving abilities and results oriented; able to make decisions independently</li><li>
Proven ability to work as a team</li><li>
Strong leadership skills and ability to influence others</li><li>
Sound understanding of compliance and operational risks and internal control frameworks</li><li>
Strong analytical/research skills coupled with ability to effectively summarize findings</li><li>
Excellent oral, written and interpersonal skills</li><li>
Ability to adapt to change and communicate changing requirements</li><li>
Excellent organizational skills and meticulous attention to detail</li><li>
Self-motivated</li><li>
Proficient PC skills with experience in Microsoft Office, Outlook and, SharePoint</li></ul> 
Personal Skills<ul><li>
Adaptability: Demonstrates a willingness to listen to other opinions and adjusts to new or changing assignments, processes, and people while avoiding snap reactions</li><li>
Agile Mindset: Explains specific agile processes and its associated checkpoints and deliverables and applies major agile tools and techniques to accomplish tasks; understands that failures/defects equate to new learnings</li><li>
Collaboration: Demonstrates experience in participating in productive collaborative processes that help solve business problems and meet business goals</li><li>
Problem Solving: Demonstrates the ability to examine a specific problem and understand the perspective of stakeholders; uses fact-finding techniques to identify and document specific problems</li></ul> 
Practical Skills<ul><li>
Business Acumen: Participates in business tasks to get things done in own business unit and communicates key considerations for business decision-making processes</li><li>
Data Analysis: Identifies correlations that reveal trends and determine conditions, often with disparate data sets; Evaluates the quality of data collected and the effectiveness of data analysis methods for evaluating performance</li><li>
Oral &amp; Written Communication: Possesses the ability to adapt listening and facilitation style to others&rsquo; communication styles and uses various approaches appropriately and effectively</li><li>
Risk Management: Implements or manages risk management for own business unit and documents key steps of the risk management process and associated procedures</li><li>
Systems Thinking: Analyzes the dynamics of a system to determine key characteristics, properties, and functions; surfaces problems within systems and searches for root causes while leveraging a foundational knowledge of continuous improvement</li></ul>
Core Competencies<ul><li>
All KeyBank employees are expected to demonstrate Key&rsquo;s Values and sustain proficiency in identified Leadership Competencies.</li></ul> 
Physical Demands<ul><li>
General Office - Prolonged sitting, ability to communicate face to face in person or on the phone with teammates and clients, frequent use of PC/laptop, occasional lifting/pushing/pulling of backpacks, computer bags up to 10 lbs.</li></ul> 
Travel<ul><li>
Occasional travel to include overnight stay.</li></ul>
COMPENSATION AND BENEFITS
This position is eligible to earn a base salary in the range of $96,000.00 - $181,000.00 annually. Placement within the pay range may differ based upon various factors, including but not limited to skills, experience and geographic location. Compensation for this role also includes eligibility for incentive compensation which may include production, commission, and/or discretionary incentives.
Please click here for a list of benefits for which this position is eligible.
Key has implemented an approach to employee workspaces which prioritizes in-office presence, while providing flexible options in circumstances where roles can be performed effectively in a mobile environment.
Job Posting Expiration Date: 08/29/2026 KeyCorp is an Equal Opportunity Employer committed to sustaining an inclusive culture. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, genetic information, pregnancy, disability, veteran status or any other characteristic protected by law.
Qualified individuals with disabilities or disabled veterans who are unable or limited in their ability to apply on this site may request reasonable accommodations by emailing HR_Compliance@keybank.com. 

#LI-Hybrid</div>

Sr. Cybersecurity Operational Risk Officer

Nestlé

<div>Nestl&eacute; Waters KSA &ndash; Almanhal Water Factory (Position based in Almanhal Water Factory - Riyadh Seconed Industrial Area) 
Job Purpose:
In this position you will be responsible to maintain a EHS and comfortable working environment by ensuring adherence to the company policies and Standard. 
Key Responsibilities:<ul><li>Implement all EHS policies and procedure in compliance with Nestle standards.</li><li>Performs inspections and evaluations to identify and analyze workplace hazards that can result in harm to people, property and the environment.</li><li>Investigates, documents, and photographs accidents and incidents; compiles and analyzes data to prepare reports containing findings and recommendations for corrective action.</li><li>Performs ergonomic assessments of work spaces, reviews employee work processes, and recommends changes to reduce workplace discomfort.</li><li>Works with staff and others to reduce the frequency and severity of accidental losses, and achieve a workplace environment committed to safety and loss prevention.</li><li>Provide safety training as required .</li><li>Preparing emergency response plans.</li><li>Ensure compliance with ISO 45001-2018 standards.</li><li>Adhere to the Nestle EHS rules and procedures at all times during the working hours to ensure own and others safety.</li></ul> 
Experince &amp; Requirements:<ul><li>Diploma or Bachelore Degree in Engineering or Occupational Safety, Risk Management or Related field.</li><li>1 &ndash; 3 years of experience in health and safety field.</li><li>SAFETY Kawader certificate.</li><li>OSHA/NEBOSH or HSE/OSH certification is a plus.</li></ul> 
About Nestl&eacute; Waters &amp; Premium Beverage
 Nestl&eacute; Waters &amp; Premium Beverages is a standalone, globally managed business within the Nestl&eacute; Group.
The company serves consumers in more than 100 markets with a portfolio of more than 35 brands, including S.Pellegrino, Perrier, Acqua Panna, Sanpellegrino Italian Sparkling Drinks, Maison Perrier, Buxton, Essentia, Levissima, La Vie and Nestl&eacute; Pure Life. Building on its heritage and expertise in waters, Nestl&eacute; Waters &amp; Premium Beverages is focused on growth in premium and better‑for‑you beverages, creating value for consumers, customers and stakeholders.
Water stewardship is central to the business. Nestl&eacute; Waters &amp; Premium Beverages is the only beverage company with all bottling sites certified to the Alliance for Water Stewardship (AWS) Standard. Additionally, the company has implemented around 70 water regeneration projects globally, as part of its ambition to protect and restore more water than it uses, working with local stakeholders and experts to identify shared water challenges and support solutions that build resilience and benefit communities and nature.</div>

SSHE Officer

Rividium

<div>RiVidium Inc. is seeking an experienced Vulnerability Assessment &amp; Penetration Testing Specialist ? Level III to serve the team for all Cybersecurity and Intelligence Enterprise Information Technology Services (CIEITS) program activities.
The Vulnerability Assessment &amp; Penetration Testing Specialist ? Level III serves as the senior technical expert responsible for planning, executing, and leading advanced penetration testing, vulnerability assessments, software assurance, and cyber supply chain risk management activities across the Department of Homeland Security (DHS) Intelligence Enterprise (DHS IE). This role performs comprehensive security assessments of enterprise networks, cloud environments, applications, operating systems, and Cross Domain Solutions (CDS) using industry-recognized methodologies and advanced manual testing techniques.
The specialist leverages frameworks such as MITRE ATT&amp;CK, OWASP, NIST, and industry best practices to identify vulnerabilities that may not be detected by automated tools. The position also supports software assurance initiatives through secure code reviews, application security testing, and Supply Chain Risk Management (SCRM) activities to strengthen the cybersecurity posture of DHS IE systems.
Working closely with Security Operations Center (SOC) personnel, Cybersecurity Engineers, Information System Security Officers (ISSOs), Information System Security Managers (ISSMs), developers, and Government stakeholders, the Vulnerability Assessment &amp; Penetration Testing Specialist provides expert recommendations to reduce enterprise cyber risk while ensuring compliance with Federal, DHS, and Intelligence Community (IC) cybersecurity requirements.
Key Responsibilities
<ul><li>Lead and conduct comprehensive penetration testing engagements for DHS Intelligence Enterprise systems, networks, applications, cloud environments, and infrastructure.</li>
<li>Perform penetration testing using industry-recognized methodologies, including:
<ul><li>MITRE ATT&amp;CK Framework</li>
<li>OWASP Web Security Testing Guide</li>
<li>NIST penetration testing guidance</li>
<li>PTES (Penetration Testing Execution Standard)</li>
</ul></li><li>Plan and execute all phases of penetration testing, including:
<ul><li>Pre-engagement planning</li>
<li>Rules of Engagement (ROE)</li>
<li>Threat intelligence gathering</li>
<li>Threat modeling</li>
<li>Vulnerability identification</li>
<li>Exploitation</li>
<li>Post-exploitation analysis</li>
<li>Reporting and remediation recommendations</li>
</ul></li><li>Utilize advanced manual testing techniques to identify vulnerabilities that are not detectable through automated scanning tools.</li>
<li>Perform network, web application, wireless, cloud, and infrastructure penetration testing using ethical hacking techniques while ensuring no disruption to production environments.</li>
<li>Validate Security Operations Center (SOC) detection and incident response capabilities through controlled adversary emulation and red team testing.</li>
<li>Assess logging, monitoring, detection, and response mechanisms to identify gaps in defensive capabilities.</li>
<li>Perform software assurance reviews by conducting security and compliance testing of software requests and applications prior to deployment.</li>
<li>Review Software Assurance Request Forms and provide technical adjudication and security recommendations.</li>
<li>Conduct vulnerability assessments of enterprise systems and deliver comprehensive Security Assessment Reports (SARs) and Vulnerability Assessment Reports (VARs) within established service-level agreements.</li>
<li>Perform Supply Chain Risk Management (SCRM) and Cyber Supply Chain Risk Management (C-SCRM) assessments for software, hardware, and third-party technologies supporting DHS IE.</li>
<li>Conduct secure source code reviews using both automated and manual analysis techniques to identify software vulnerabilities and coding weaknesses.</li>
<li>Utilize static application security testing (SAST), dynamic application security testing (DAST), and software composition analysis (SCA) tools to evaluate software security.</li>
<li>Maintain the penetration testing toolkit, ensuring monthly software updates, quarterly configuration reviews, and compliance with approved security baselines.</li>
<li>Develop comprehensive penetration testing reports documenting:
<ul><li>Testing methodology</li>
<li>Attack paths</li>
<li>Exploited vulnerabilities</li>
<li>MITRE ATT&amp;CK mappings</li>
<li>Risk ratings</li>
<li>Technical findings</li>
<li>Executive summaries</li>
<li>Remediation recommendations</li>
</ul></li><li>Develop and maintain Standard Operating Procedures (SOPs) supporting penetration testing, software assurance, vulnerability assessment, and SCRM activities.</li>
<li>Collaborate with cybersecurity engineering, DevSecOps, cloud engineering, and system administration teams to remediate identified vulnerabilities.</li>
<li>Support cybersecurity audits, security assessments, authorization activities, and continuous monitoring initiatives.</li>
<li>Participate in cybersecurity working groups and provide technical guidance on emerging threats, offensive security techniques, and vulnerability management best practices.</li></ul> 

Minimum Qualifications
<ul><li>Active Top Secret/Sensitive Compartmented Information (TS/SCI) security clearance.</li>
<li>Minimum 7?10 years of experience performing penetration testing, vulnerability assessments, software assurance, and offensive cybersecurity activities within Federal Government or Intelligence Community environments.</li>
<li>Current Certified Ethical Hacker (CEH) certification.</li>
<li>Current Certified Information Systems Security Professional (CISSP) certification.</li>
<li>Expert knowledge of:
<ul><li>MITRE ATT&amp;CK Framework</li>
<li>OWASP Testing Methodology</li>
<li>OWASP Top 10</li>
<li>NIST Cybersecurity Framework</li>
<li>Penetration Testing Execution Standard (PTES)</li>
</ul></li><li>Demonstrated experience with penetration testing and vulnerability assessment tools such as:
<ul><li>Burp Suite Professional</li>
<li>Nessus / ACAS</li>
<li>Nmap</li>
<li>Metasploit Framework</li>
<li>Wireshark</li>
<li>Kali Linux</li>
<li>WebInspect</li>
<li>Nikto</li>
<li>Other industry-standard offensive security tools</li>
</ul></li><li>Experience performing software assurance using:
<ul><li>SonarQube</li>
<li>GitLab Security</li>
<li>Static Application Security Testing (SAST)</li>
<li>Dynamic Application Security Testing (DAST)</li>
<li>Software Composition Analysis (SCA)</li>
</ul></li><li>Minimum 2 years of experience in each of the following:
<ul><li>Software Assurance</li>
<li>Penetration Testing</li>
<li>Vulnerability Assessment</li>
<li>Patch Management</li>
<li>Secure Cloud and Hybrid Cloud Security Engineering</li>
</ul></li><li>Experience performing secure code reviews and identifying application security vulnerabilities.</li>
<li>Bachelor's degree in Cybersecurity, Computer Science, Software Engineering, Information Systems, or a related technical discipline.</li></ul> 

Preferred Qualifications
<ul><li>Offensive Security Certified Professional (OSCP) certification.</li>
<li>GIAC Penetration Tester (GPEN) certification.</li>
<li>Experience conducting penetration testing of Cross Domain Solutions (CDS) and classified information systems.</li>
<li>Experience supporting DHS Intelligence &amp; Analysis (I&amp;A) or other Intelligence Community cybersecurity programs.</li>
<li>Familiarity with:
<ul><li>DISA Security Technical Implementation Guides (STIGs)</li>
<li>Container security (Docker, Kubernetes)</li>
<li>Kubernetes security</li>
<li>Serverless application security</li>
<li>Secure DevSecOps pipelines</li>
</ul></li><li>Experience supporting Cloud Service Provider (AWS, Azure, or Google Cloud) penetration testing and cloud-native security assessments.</li>
<li>Experience performing adversary emulation, purple team, or red team exercises.</li>
<li>Familiarity with NIST SP 800-161 Cyber Supply Chain Risk Management (C-SCRM) guidance.</li></ul> 

Required Certifications
The following current certifications are required:
<ul><li>Certified Ethical Hacker (CEH)</li>
<li>Certified Information Systems Security Professional (CISSP)</li>
</ul>
Preferred certifications include:
<ul><li>Offensive Security Certified Professional (OSCP)</li>
<li>GIAC Penetration Tester (GPEN)</li>
</ul>
Clearance Requirement
Active Top Secret/Sensitive Compartmented Information (TS/SCI) Clearance Required</div>

Vulnerability Assessment & Penetration Testing Specialist ? Level III

WelbeHealth

<div>WelbeHealth PACE helps seniors stay in their homes and communities by providing medical care and community-based services. We believe in going the extra mile and aim to make a genuine difference in our participants' lives.

The People Senior Specialist (Assignment: Employee Relations) leads complex employee relations (ER) work including high-risk investigations, performance management, and involuntary terminations. This role serves as a trusted consultant to leadership, People Advisors, Legal, and Compliance teams, providing expert guidance on policy interpretation, workplace conduct, and risk mitigation. The People Senior Specialist is accountable for supporting fair and consistent corrective action and termination processes, partnering on leave and accommodation-related ER cases, and building ER capability through training and resources.

This role is different because the People Senior Specialist at WelbeHealth:
<ul>
<li>Leads high-risk investigations, advises on sensitive employment decisions, and partners directly with People leadership, Legal, and Compliance teams to navigate complex workplace matters, unlike traditional HR roles focusing on case management</li>
<li>Drives proactive ER strategy, not just reactive case work &ndash; analyzing trends, strengthening policies and leader capability, and helping design scalable ER practices that improve workplace culture, mitigate risk, and support WelbeHealth's mission</li>
</ul>
We care about our team members. That's why we offer:
<ul>
<li>Medical insurance coverage (Medical, Dental, Vision)</li>
<li>Work/life balance - We mean it! 17 days of personal time off (PTO), 12 holidays observed annually, and 6 sick days</li>
<li>401K savings + match</li>
<li>Comprehensive compensation package including base pay and bonus</li>
<li>And additional benefits!</li>
</ul>
On the day-to-day, you will:
<ul>
<li>Lead thorough and confidential ER investigations, including allegations of harassment, discrimination, retaliation, workplace misconduct, and policy violations</li>
<li>Conduct interviews, gather and analyze evidence, and produce clear documentation and recommendations, partnering with Legal and People leadership on high-sensitivity or high-risk matters</li>
<li>Serve as a subject matter expert in performance management, partnering with leaders and People Advisors to improve performance outcomes through coaching, clear expectations, timely feedback, and appropriate support plans</li>
<li>Provide consultation and support for high-risk terminations, including those related to leaves of absence, accommodations, protected activity, investigations, and other sensitive circumstances, as well as support standard involuntary terminations by ensuring consistency, documentation sufficiency, and alignment to policies and best practices</li>
<li>Partner closely with Leave of Absence and Accommodations teams to support ER matters that intersect with leaves, restrictions, or workplace accommodations</li>
<li>Support development and delivery of ER-related training for People Advisors and leaders, including performance documentation, corrective actions, investigations, conflict resolution, and respectful workplace expectations</li>
<li>Use ER case management dashboards and reporting to identify key trends, themes, and emerging risk areas across ER activity, presenting insights to internal stakeholders</li>
</ul>
Job Requirements Include:
<ul>
<li>Bachelor's degree, commitment to obtain a bachelor's degree within three (3) years, or equivalent experience is required</li>
<li>Minimum of five (5) years of professional experience in ER</li>
<li>Demonstrated expertise in both design and execution in ER</li>
<li>Demonstrated ability to lead initiatives inclusive of successful change management</li>
<li>Excellent interpersonal and collaboration skills across stakeholders and contexts</li>
<li>Excellent communication and presentation skills, both written and verbal, with strong skills in Word and PowerPoint</li>
<li>Experience leading multi-disciplined project or process improvement teams</li>
<li>Able to lean into data-driven organization, leveraging reports and data to inform and execute on projects</li>
</ul>
We are seeking a People Senior Specialist with deep experience in ER who is passionate about creating fair, consistent, and compliant workplace practices within a mission-driven healthcare organization. If you are excited about leading complex ER work, partnering with leaders to navigate challenging people matters, and strengthening organizational practices that support both our team members and the vulnerable seniors we serve, we encourage you to apply.<div>
COVID-19 Vaccination Policy

At WelbeHealth, our mission is to unlock the full potential of our vulnerable seniors. In this spirit, please note that we have a vaccination policy for all our employees and proof of vaccination, or a vaccine declination form will be required prior to employment. WelbeHealth maintains required infection control and PPE standards and has requirements relevant to all team members regarding vaccinations. 


Our Commitment to Diversity, Equity and Inclusion

At WelbeHealth, we embrace and cherish the diversity of our team members, and we're committed to building a culture of inclusion and belonging. We're proud to be an equal opportunity employer. People seeking employment at WelbeHealth are considered without regard to race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, marital or veteran status, age, national origin, ancestry, citizenship, physical or mental disability, medical condition, genetic information or characteristics (or those of a family member), pregnancy or other status protected by applicable law. 


Beware of Scams

Please ensure your application is being submitted through a WelbeHealth sponsored site only. Our emails will come from @welbehealth.com email addresses. You will never be asked to purchase your own employment equipment. You can report suspected scam activity to fraud.report@welbehealth.com</div></div>

Senior Employee Relations Specialist

Search 10000+ Risk management specialist jobs near you this August. New roles added regularly across leading industries. Apply today.