Risk Management Analyst jobs in Richmond, VA

We are currently seeking a Lead Analyst, IT Risk Management (ITRM), to lead the IT compliance awareness activities, coordinate all Cybersecurity related training and implement strategy for operationalizing Altria’s Cyber Risk scoring approach.

This person will develop an expertise with new tools from Elevate security, Knowbe4 and MyPath; and learn compliance and records management working with Compliance & Integrity and Records Management respectively; and work with other areas to provide cyber related training.

In this role, you will:

• Develop expertise in the field of compliance and records awareness while delivering respective plans and working relationships with those groups to deliver engaging awareness activities, communications, and videos.
• Coordinate annual Payment Card Industry (PCI) assessment certifications and biannual HIPAA assessment reviews to keep Altria compliant. Improve PCI and HIPAA requirements and documentation periodically.
• Lead the annual training schedule development, plan creation, selection of appropriate trainings and monitor for completion compliance.
• Lead technical analyst on integration of additional security tool data into Cyber Risk Scoring tool and operational ownership of improving the enterprise scores with creative learning activities.
• Lead the Governance Risk Compliance (GRC) platform, integrations, changes and support, including:
• Lead 3rd party support of GRC tools to support needs of ITRM
• Perform technical analyst of integration of GRC modules
• Responsible for ongoing operations of GRC tools and improving those environments
• Perform limited recertifications, control reviews and occasional other compliance related activities.
• Leads efforts and exercises independent judgment and ensures adherence to overall role strategic plans.
• Become knowledge manager for IS, provide compliance assistance to other subsidiary IS and monitor overall compliance of IS personnel
• Lead contractors that assist in the development and execution of some of the activities.
• Provide some Issue Management assistance until transitioned to new group

We want you to have:

• 5-7 years of professional experience – preferably in compliance, controls, auditing, risk management or related field.
• Experience with IT, compliance, and/or communications. Cybersecurity (a plus)
• Demonstrated experience in partner engagement, influencing and providing strategic perspective.
• Strong leadership and relationship management skills with ability to meet goals and timelines.
• Strong interpersonal and written/verbal communication skills to work with internal and external partners, at all levels of organizations.