Risk

• Develop and execute a comprehensive safety and risk management strategy for all corporate and franchise operations
• Establish safety standards, policies, procedures, and best practices that support operational excellence and risk reduction
• Create and manage company-wide safety scorecards, KPIs, dashboards, and reporting systems
• Lead initiatives designed to reduce workplace injuries, vehicle accidents, cargo claims, and insurance losses
• Foster a culture of accountability, leadership, and safety ownership across all levels of the organization
• Provide executive leadership with regular reporting and recommendations regarding safety trends, risks, and corrective actions
• Serve as the organization's primary authority on regulatory compliance and monitor regulatory changes
• Oversee the company's captive insurance programs and risk management initiatives
• Analyze workers' compensation, auto liability, general liability and cargo claims and implement proactive loss prevention strategies
• Develop and deliver safety certification programs for franchise owners and operational leaders
• Build and lead a high-performing safety and risk management function

Director of Safety and Risk Management

• Provides oversight and critical challenge of the identification, assessment, monitoring, mitigation and reporting of all significant risks throughout the business/function.
• Challenge unmitigated risks in accordance with risk framework and assess adequacy and timeliness of remediation.
• Escalate identified gaps appropriately.
• Prepare, review, and present clear, well-supported risk opinions, reports, and presentations for senior leadership addressing the state of the operational risk environment, emerging risks, and key themes.
• Support ORM’s Framework with First Line Risk.
• Monitor execution for alignment with ORM policies and guidance, as well as supervisory expectations.
• Collaborate with first line risk teams, technology risk, compliance, model risk, and other second line partners to drive consistency, transparency, and value-added risk management outcomes.
• Assess issues, control failures, or policy breaches to determine whether root cause has been adequately identified by first line and remediation plans are effective and sustainable.
• Interact with external peers and members of professional organizations to remain aware of changing or emerging risks and proactively bring key information to team for inclusion/consideration in continuous monitoring and/or other oversight activities.

Senior Operational Risk Advisor

• Assist with preparation of RMF documentation including SSPs, control matrices, and POA&Ms under senior guidance.
• Support audit evidence collection, organization, and tracking activities.
• Maintain action logs, audit trackers, and status reports.
• Participate in A&A and audit meetings and document meeting minutes.
• Support maintenance of compliance and evidence repositories.
• Assist with POA&M updates and remediation tracking activities.

Junior Analyst, Risk Management Framework

• The RMF / A&A Manager provides senior leadership and strategic oversight for federal cybersecurity authorization, compliance, and audit programs supporting Ginnie Mae enterprise and cloud environments.
• This role is accountable for end to end execution of the Risk Management Framework (RMF), Assessment & Authorization (A&A), FedRAMP integration, and IT audit support, ensuring sustained compliance with FISMA, NIST, OMB mandates, and agency policies.
• The Manager serves as the primary interface with government leadership and drives delivery excellence across multiple concurrent authorizations, audits, and third party assessments.
• Provide programmatic leadership across RMF, A&A, FedRAMP, and IT audit activities for major and minor systems and cloud platforms.
• Direct multi disciplinary teams delivering authorization packages, audit responses, third party assessments, and remediation activities.
• Serve as senior advisor to Authorizing Officials (AO), CISO, IAM, CTA, and System Owners on risk posture, authorization decisions, and compliance strategy.
• Oversee FedRAMP P ATO reviews, agency control inheritance analysis, risk acceptance documentation, and authorization recommendations.
• Lead third party assessment (3PAO) coordination and ensure quality, consistency, and timeliness of Security Assessment Reports (SARs).
• Ensure development and maintenance of all RMF artifacts (SSP, SAR, POA&M, BIA, PIA, ISA, FIPS 199, contingency plans, and risk acceptance).
• Lead enterprise audit readiness and execution for FISMA, financial system audits, and SSAE 18 reviews.
• Establish governance processes, SOPs, metrics, dashboards, and executive level reporting.
• Drive continuous improvement of RMF and audit processes to enhance efficiency, quality, and sustainability.

Risk Management Framework A&A Manager

• Supporting a wide range of projects for private and government clients throughout the U.S. (and internationally)
• Performing human health risk assessments in accordance with regulatory guidance and project-specific work plans
• Developing Risk Assessment Work Plans and contributing to Sampling and Analysis Plans/Quality Assurance Project Plans
• Successfully coordinating with internal project teams, including delegating to junior staff
• Preparing technical deliverables; including writing reports and performing/reviewing risk assessment calculations using R software
• Maintaining knowledge of federal and state regulations/guidance documents for conducting risk assessments
• Maintaining work quality, quantity, and efficiency at or above company standards

Human Health and Ecological Risk Assessor

• The Information Architecture Governance Advisor owns the design and implementation of an enterprise information model.
• Establishes and carries out enterprise data and information architecture policies, standards, and processes according to guidelines.
• Is responsible for structuring, organizing, and communicating information in a way that makes it easy for business users to find, navigate, and understand.
• Champions and facilitates the review of data-related changes across the organization.
• Works with business partners and Information Technology (IT) partners to drive consensus around how data should be structured.
• Define criteria and controls for an authoritative data source (ADS)
• Lead the design and implementation of information modeling practices for the enterprise
• Define data and information architecture related standards and guidelines
• Coordinate and facilitate the review of data-related changes from an enterprise perspective
• Organize data within domains and sub-domains to enhance the ability to find, govern, and utilize data across the enterprise
• Enhance the company’s data governance platform to include data and information architecture components, definitions, and relationships
• Support enterprise data strategy and data governance programs by providing a structured approach to architectural decision-making, ensuring changes are evaluated based on their impact across the enterprise
• Identify and mitigate risks associated with architectural decisions and implementations
• Establish guidelines and standards to minimize risks while ensuring compliance with regulations and policies
• Act as liaison between business and IT to translate business data requirements into logical data architecture design
• Engage in the development of policies, standards and procedures and coordinate with stakeholders through the approval process
• Ensure compliance with established standards for development and management of data
• Ensure compliance to data-related regulatory rules
• Perform regular peer review of information models used across the enterprise

Information Architecture Governance Advisor

• Lead the integrated RBAM practice across Vulnerability Management, Configuration Management, and Database Management, aligning effort with USCIS business priorities and risk tolerance.
• Oversee RBAM projects end-to-end: track schedules, facilitate working sessions, and brief leadership and the Government PM/COR on status, risks, and decisions.
• Run the vulnerability scanning program using approved tooling. Initiate scans, analyze results, prioritize remediation by impact and likelihood, and ensure adherence to DHS policies and federal regulations.
• Continuously monitor emerging threats (CVE, NVD, CISA KEV) and translate them into a prioritized, defensible remediation backlog.
• Validate and act on the DHS/CISA Cyber Hygiene Report. Partner with system owners and admins on remediation plans, track progress, and report to leadership.
• Support the USCIS software approval process — evaluate new products and technologies for security, compliance, and operational fit.
• Establish, document, and enforce configuration management policies, procedures, and baselines across diverse IT environments — with full traceability for changes (documented, tracked, approved, audited).
• Use configuration management tooling to monitor and report on system configurations and compliance, identify drift, and resolve configuration-related risks.
• Develop and maintain database hardening scripts and processes; translate audit requirements into actionable configurations and evidence artifacts.
• Build and refine Splunk dashboards and reporting (and ServiceNow workflows/tickets) so VM/CM posture is visible at a glance — not buried in a spreadsheet.
• Author and maintain SOPs and Playbooks for RBAM operations; contribute to the Risk Register, Weekly Status Report, and Monthly Program Management Review.

Risk-Based Asset Management Lead

• Lead in conducting information risk assessments as assigned to the team
• Request and analyze documentation necessary to perform appropriate assessment and conduct necessary interviews in order to collect and review relevant materials necessary to produce results of the assessment
• Clearly and concisely document and communicate risk assessment results with requester, security architects and management, as appropriate
• Conduct and formulate appropriate risk scoring, as it relates to threat, vulnerability, likelihood, impact, security controls/countermeasures, etc.
• Perform follow up activities related to assigned risks, ensuring mitigation activities stay on track
• Communicate risk treatment methodology, risk avoidance, risk acceptance, risk transference and risk mitigation to appropriate groups
• Take lead role in partnering with multiple projects and initiatives to apply security architecture requirements, develop architecture solutions, integrate security into solution designs, access risks of security gaps, and develop architecture remediation
• Prepare and present solution decks to different levels of management and varying technical experience

Senior Information Risk Consultant

• Critically evaluate animal and in vitro toxicological data and results to assess potential for human health risks from exposure to chemicals in the environment and consumer products.
• Perform various analyses in support of toxicology projects, including tabulation of toxicology study data and evaluation of results, for reports, systematic reviews, and hazard assessments.
• Conduct literature searches and critically review and evaluate toxicology studies for strengths and weaknesses regarding study quality, relevance, and reliability for use in human health risk assessment.
• Project work related to toxicology may include systematic reviews, hazard assessments, occupational health and safety assessments, litigation support, regulatory comment, product safety assessments, and site-specific human health risk assessments.
• Assist in the preparation of deliverables (reports, manuscripts, memoranda, presentations, project proposals, agency comments).
• Opportunities to manage small- to medium-sized projects.

Mid-Career Toxicologist, Risk Assessor

• Lead governance support across enterprise IT initiatives, including governance boards, change control activities, and decision forums
• Develop and maintain governance frameworks, processes, decision paths, escalation models, and supporting documentation
• Coordinate agendas, meeting materials, minutes, decisions, and action tracking for governance bodies and leadership forums
• Support prioritization and triage of initiatives, enhancements, issues, and risks through structured governance processes
• Work across program, strategy, architecture, security, and financial teams to ensure governance decisions are informed and actionable
• Support transparency through dashboards, reports, scorecards, and governance status materials, OKRs, and Metrics
• Help improve governance effectiveness through process refinement, performance tracking, and follow-up discipline
• Support alignment of governance processes with enterprise priorities, compliance expectations, and operational needs

Governance Lead

• Execute the VA Enterprise Risk Analysis (ERA) process using a custom ERA tool to identify key cybersecurity risk factors in network connected devices
• Acquire, review, and leverage system documentation and data gathered through questionnaires and interviews with customers in the field and vendor or manufacturer representatives to accurately document critical security posture elements
• Work within a Risk Management team to achieve best outcomes for the ERA process

Enterprise Risk Analyst

• Works with insurance company partners and clients in establishing claims protocols and or policy enhancements
• Schedules and conducts claim reviews with clients and insurance company partners ensuring proper claims handling, reserve standards and settlement protocols
• Act as a claims advocate and liaison for clients interested in mitigating claims costs
• Regularly reviews individual claims within client portfolios and keeps reserves and records up-to-date
• Serves as a mentor to colleagues as requested
• Develops an understanding of marketing strategies and contributes to business development and renewal opportunities
• Provides summaries of claims reviews, activities, etc. to appropriate Advisors, Director of Risk Mitigation and other colleagues and clients as necessary.

Claims Executive, Commercial Risk – Insurance Advisory Solutions

• Provide operational leadership for the data governance team in support of data and application software development management
• Create plans and manage activities, within assigned unit/area
• Assess viability of current direction/projects/operations and recommend strategies and tactics
• Lead team in scheduling, direction, future planning and standard practices
• Monitor and control quality while seeking opportunities for improvement

Manager, IT – Data Governance

• Build and maintain matching, concordance, and survivorship processes
• Develop data quality rules, monitoring, and dashboards
• Perform SQL analysis and Python-based automation/validation
• Manage data issues, track resolution, and support governance workflows
• Partner with engineering teams (e.g., Databricks) and business stakeholders
• Maintain governance documentation, standards, and metrics
• Support CRM data standards and validation processes

Data Governance, MDM Specialist

• Responsible for vetting out the contractor's qualifications
• Review contractor background checks for risk factors
• Validate contractor’s license, insurance, OFAC status, SOS, and other qualifying information
• Use AI tools to research the contractor thoroughly to provide a risk score and recommendation
• Responsible for completing a collateral/project review
• Review construction-related documents for GSE program acceptance
• Research and review local jurisdiction/permitting requirements
• Evaluate construction contracts for industry best practices
• Review plans and specifications for accuracy
• Review plot plans/surveys for accuracy
• Review inspection/warranty requirements
• Review foundation/final survey requirements
• Analyze construction budgets and draw schedules for risk
• Review appraisal reports against project documents, such as the plans and specifications, and the budget.
• Use AI tools to assist with completing the project review

Construction Risk Analyst

• Represent Risk Management on certain business related activities, cross-functional meetings, committees, etc.
• Oversee the development of quantitative/analytical models and applications.
• Utilize team personnel resources through strategic planning and scheduling of engagements.
• Develop analysis of data through the use of models and determine impact operational and risk based capital.
• Support associates and lead in the execution of risk activities.
• Serve as a subject matter expert on risk principles throughout Transamerica and Aegon.
• Maintain strong relationships with senior level personnel across all of Transamerica and Group NV.
• Conduct regular business and risk discussions.
• Participate in risk committee discussions.
• Other duties and responsibilities as assigned based on specific discipline within Risk Management.

Senior Manager, Enterprise Risk Management

• Execute complex risk analysis, modeling, and reporting activities supporting IFRS 17 and U.S. GAAP frameworks for VA/RILA products.
• Quantify and analyze key risks, including equity market risk, interest rate risk, cash flow variability, credit risk, liquidity risk, and hedging impacts, with emphasis on their financial reporting implications.
• Support the production, validation, and interpretation of IFRS 17 results, including drivers of movement, sensitivities, and disclosure support.
• Provide analytical support for GAAP conversion processes.
• Partner with actuarial modeling, ALM, finance, and investment teams to assess model results, assumptions, and controls impacting financial statements.
• Effectively communicate complex analytical results to team leaders through clear documentation, presentations, and executive‑level summaries.

Senior Risk Analyst – Annuities

• Oversee RBAM projects, schedules, milestones, and team execution
• Facilitate meetings and brief leadership on status, risks, priorities, and progress
• Direct and support enterprise vulnerability scanning, analysis, remediation prioritization, and reporting
• Guide the development and enforcement of secure configuration baselines across systems and platforms
• Coordinate database hardening, patching, scanning, and compliance activities with stakeholders
• Review cyber hygiene findings and translate results into actionable remediation plans
• Support evaluation of new technologies and products through security review and software approval processes
• Develop or enhance dashboards, reporting, and metrics to improve visibility into risk and remediation progress
• Support process improvement, automation, and operational maturity efforts across the RBAM function
• Ensure work products, reporting, and technical activities align with DHS, client, and federal cybersecurity expectations
• Lead and coordinate vulnerability management, configuration management, and database hardening activities

See all jobs on JobTailor