Senior Business Analyst - Risk

Responsibilities will include the following:

• Lead and mentor the team to achieve and exceed performance goals, fostering a culture of continuous improvement and professional development. Regularly assess team members' competency skills and proficiency to ensure desired skills and capabilities are maintained.

• Lead risk management initiatives and documentation, in coordination with the NWM Strategy team, to ensure proper instructions, policy, and adherence to Executive Orders related to the National Continuity Policy, Preparedness and Response Policies, and National Risk Register.

• Review the National Resilience Strategy and all compliance elements within National, Executive, Federal, DoW, IC, and other applicable government statutes, directives and regulations, and provide insight into government and industry “best practices” / industry standards governing risk management and planning.

• Application of a risk-informed approach and support of the National Critical Infrastructure policy and development of a comprehensive Plan of Actions & Milestones (POA&M) with metrics that deliver and sustain an integrated risk management program complying with all National, Executive, DoW and IC directed program elements.

• Provide input, develop, and implement a multi-year strategic management plan specific to Risk Management, Risk Mitigation, and Resiliency, linked to compliance with National, DoW, IC, National System for Geospatial Intelligence (NSG) requirements and metrics.

• Develop the Risk program guidance and instruction to establish the NWM Risk Management Team as the facilitators of Agency operational and mission risk.

• Lead risk management forums both internal and external.
• • Identification, documentation, and coordination of equities associated with joint risks both internal and at the Joint Risk Working Groups (JRWGs). Coordinate with joint agencies and provide JRWG agenda and meeting invites prior to each JRWG and coordinate with risk owners presenting at each JRWG.
• • Serve as the Mission Assurance Risk Committee (MARC) facilitator and discussion lead. Provide MARC agenda and meeting invites prior to each MARC and coordinate with risk owners presenting at each MARC.
• • Champion Risk Management across the Agency and the IC by building collaborative relationships with mission partners to improve processes, foster transparency, and synchronize risk management efforts for operational-level risk, joint-level risk, and enterprise-level risk.
• • Serve as the NGOC expert/risk management administrator to address all associated program and taskings from DXC enterprise risk management.
• • Serve as the NGOC subject matter expert for NGOC enterprise risk management and internal control program.
• • Identify and validate internal control processes and address associated taskers for each fiscal year.
• • Perform risk management, gap analysis, and oversight of budgeting and acquisition of resources for Risk Mitigation planning and activities.
    • Must be OCI cleared.
    • Support procurement defense-wide (PDW) processes; including, but not limited to, documentation and conducting data gathering and analyses.
    • Provide recommendations for senior leader decisions each fiscal year.
• • Prioritize critical function and system risk mitigation efforts to identify most viable PDW candidates, improving Agency-level resilience.
• • Develop Risk Mitigation Planning and/or Risk Acceptance Plans templates and processes in support of risks associated with BIAs, TCAs, ESAs and other risks.
  • Provide senior program and project management support, including the development of strategic plans, policies, and Standard Operating Procedures (SOPs).
    • Coordinate with Strategy on the TCAs/DCAs identified each year, review and assess for those requiring Risk Mitigation Plans and facilitate development of those plans for each asset.
    • Coordinate with Readiness on the annual business impact analysis (BIA), essential support activities (ESAs), and single points of failure that require risk mitigation plans. Conduct the process to support completion of each annual RMP.
  • Evolve NROM to establish an unmatched, one-of-a-kind risk management portal; provide guidance and instruction to components pertaining to operational risk management efforts, including continuity risk (COOP):
    • Define capabilities, in the form of requirements, to enhance and automate risk processes within the Risk and Opportunity Management (ROM) system.
    • Maintain proficiency in use of ROM, granting access to qualified Agency users, and conducting periodic tests and evaluation of the service.
    • Lead demonstrations of ROM, the risk management process, and overviews to both internal and external stakeholders.
  • Manage agency risks for all components, identify areas of collaboration and lead discussions related to risk.
    • Review and manage risks, issues, and opportunities within the ROM system. Ensure accuracy of the data entered and assist risk users with demos, training, updates to their risks, and other user assistance needed.
    • Collaborate with risk owners, partners, and resilience team to provide risk assessments, mitigation, and recommendations.
  • Provide input for taskers, auditing process that spans daily operational status, enterprise management, periodic formal plan audits, and training inclusive of corrective action plans.
  • Strengthen NGA’s resiliency by identifying vulnerabilities to NGA's Essential Support Activities/Tasks and provide specifically tailored tools to support analysis, planning, budgeting, and other remediation efforts to eliminate identified vulnerabilities.
  • Identify "Resiliency-related” risks and develop a solution, in collaboration with the GEOINT Resiliency Team (GRT), to collect/manage/remediate threats to resiliency.
  • Develop and maintain Risk and Resiliency program documentation.
    • Update and manage the Risk Team internal handbook to document all processes, roles and responsibilities and pertinent risk team information on an annual basis.
  • Update the Risk Management Plan documentation to ensure accuracy, updated processes, and key information related to the NGOC Risk and Resilience Program.
  • Develop training documentation for the NGOC Risk and Resilience Program.
    • Coordinate with the NGOC College/Training team to ensure a holistic view of risk management.
  • Capture meeting notes, update the weekly activities, capture action items and schedule weekly Risk and Resilience Team meetings.
    • Provide administrative support to each Risk Management forum.
  • Conduct testing of the ROM system and provide feedback on each test plan.
  • Introduce efficiencies in the Defense Critical Infrastructure Program (DCIP) Risk Mitigation Plan (RMP) process by leveraging the ROM system and formalizing the development and approval processes for DCIP RMPs.