Business Risk Analyst

Who We Are: CBORD and Transact have come together as industry leaders in integrated technology solutions, powering housing, access, foodservice, nutrition, eCommerce, card systems, and innovative payment, mobile credential, and commerce solutions. Our technology supports K-12 and higher education, healthcare, senior living, and business campuses, creating connected campus experiences that simplify operations and enhance lives. With a mobile-centric ecosystem and partnerships with over 1,750 institutions, we are dedicated to improving the student experience across all aspects of campus life.

We are currently searching for qualified candidates for a Business Risk Analyst. Please see the details for the position below.

Title: Business Risk Analyst

Location: Remote within the US

Job Description: We are seeking an experienced detail-oriented and proactive Business Risk Analyst to support the organization’s information security compliance and risk management initiatives. This role will play a key part in maintaining adherence to regulatory frameworks, assisting with security control KPIs, coordinating audit activities, and managing risk issues and action plans. The ideal candidate will have experience performing risk assessments, developing and or managing business continuity plans, working with external auditors and cybersecurity frameworks.

Key Responsibilities:

• Track compliance status, action items, and report progress via KPIs to management on a regular basis
• Prepare risk reports and dashboards for senior leadership and internal committees
• Assist with the develop and maintenance of risk registers and track mitigation plans
• Support the execution of risk assessments and security control reviews across business units and IT environments
• Assist in compliance efforts of evidence collection and control testing projects with third-party auditors and internal assessments
• Maintain organized documentation for audit readiness and compliance tracking
• Coordinate with internal teams to gather responses to auditor inquiries and remediate identified gaps
• Assist and evaluate third-party vendor and partner workflows and document initial and ongoing third-party due diligence
• Help evaluate the effectiveness of technical and administrative security controls
• Assist with the development and maintenance of compliance-related policies, standards, and procedures
• Works independently with clear direction and flags issues early to maintain momentum.
• Work closely with IT, Legal, Product, and Engineering teams to align risk strategies with business objectives

Qualifications:

• 4+ years of experience in information security, risk management, or compliance.
• Working knowledge of SOC 2, PCI DSS, HIPAA, GovRAMP, NIST CSF or similar frameworks.
• Prior experience managing process workflows within TPRM due diligence cycles and vendor/partner onboarding.
• Experience tracking and analyzing external audits, KPIs, and compliance evidence collection with attention to detail.
• Strong analytical, communication, and project management skills.
• Ability to communicate clearly with technical and non-technical stakeholders.
• Familiarity with AuditBoard or similar GRC platforms and documentation tools is a plus.

Planning for the Future:

• Employer paid Life Insurance / AD&D / Short-Term
• Voluntary Long-Term Disability Insurance / Term Life Insurance / AD&D 
• Access to FSA Plans & Commuter Benefit Plans 
• 401(k) Savings Plan where the Company Match of $0.50 for each $1 you contribute on the first 8% of pay.
• Both your contribution and the company contribution are immediately 100% vested.
• Access to the Roper Employee Stock Purchase Plan 
• Paid Parental Leave Program.

Base salary offers for this position may vary based on factors such as location, skills, and relevant experience. Some positions may include additional compensation in the form of bonus, equity, or commissions.

Transact + CBORD is an equal employment opportunity employer and considers qualified applicants for employment without regard to race, gender, age, color, religion, national origin, marital status, disability, sexual orientation, protected military/veteran status, or any other protected factor.

As of Aug. 20, 2024, Transact and CBORD have merged to drive innovation and operational excellence across education, healthcare, and corporate markets. You can read more about the merger here: Transact News or CBORD Newsroom.

This position will be responsible for the handling of PHI (personal health information) and/or other types of SPI (sensitive personal information) and will be expected to comply with all applicable laws and internal policies with regards to handling of PHI/SPI.

https://illinoisjoblink.illinois.gov/

CBORD Employment Candidate Privacy Notice

Transact Employment Candidate Privacy Notice