GRC Risk Register Lead

Define end to end governance workflows for: 

o Risk identification and intake

o Risk review and validation

o Risk acceptance mitigation or transfer

o Ongoing monitoring and periodic reassessment

Establish roles and responsibilities for risk owners reviewers and governance bodies.

Design escalation and reporting processes for high risk and accepted risks.

Engage key stakeholders across business technology security and governance functions to validate risk requirements and workflows.

Facilitate working sessions or workshops to socialize the risk register and governance processes.

Support onboarding of initial risks into the enterprise risk register.

Produce clear audit ready documentation covering: 

o Risk register structure and data definitions

o Risk scoring methodology

o Governance workflows and decision authorities

Provide knowledge transfer to designated security staff to ensure sustainability beyond the contract term.

The contractor shall provide the following deliverables during the engagement:

1. Enterprise Risk Register Framework

o Standardized risk register template and taxonomy

2. Risk Scoring and Prioritization Model

o Documented likelihood and impact scales

o Scoring methodology and prioritization logic

3. Risk Governance Model

o Defined workflows for risk intake review acceptance and monitoring

o Roles and responsibilities matrix

4. Initial Population of Risk Register

o Initial set of documented risks reflecting current cybersecurity and technology risk posture

5. Final Documentation Package

o Consolidated guidance and operating procedures for ongoing risk management

Qualifications :

Experience with Risk Register Design and Framework

Experience with Risk Scoring and Prioritization Model

Experience with Governance Processes and Workflows

Experience with Stakeholder and Enablement

Demonstrated skill with documentation and knowledge transfer

Additional Information :

Why Join Us
InstantServe  offers a dynamic work environment where you can make a significant impact on the healthcare industry. We provide competitive compensation opportunities for professional growth and a supportive team culture. All your information will be kept confidential according to EEO guidelines.

Remote Work :

No

Employment Type :

Contract