About the job
Founded in 1998, Inovalon is driven by the conviction that technology and data have the power to transform the healthcare landscape, enhancing both patient outcomes and economic efficiency. Our mission is to empower our customers with innovative, data-driven solutions, fostering their success and, ultimately, improving healthcare for everyone.
As a unified entity, we at Inovalon are committed to delivering solutions that meet the most pressing needs within healthcare. Our culture of innovation and inclusion allows us to provide value not just to our clients, but also to the millions of patients and members they serve.
Overview: We are seeking a dedicated Risk and Compliance Analyst to join our Enterprise Risk and Compliance department. This role collaborates closely with Technology, business units, and project teams to execute risk and compliance activities across applications, infrastructure, and third-party vendors. The Analyst will support our enterprise security, risk management, and compliance initiatives to enhance Inovalon's security posture and control systems. This position will also involve liaising with our external audit firm and promoting a strong control environment throughout the organization. Ideal candidates will have the ability to build relationships and drive change across various management levels, clearly articulating how assessment results translate into business risks.
Duties and Responsibilities:
- Engage in cross-functional teams and business units for enterprise risk and compliance initiatives.
- Identify, document, test, assess, and remediate potential IT risk areas related to applications, business processes, and requirements integrated into Inovalon products and information systems.
- Assist in executing risk-based IT assessments and SOC compliance activities, including data integrity reviews, information security risk assessments, and technical compliance evaluations in conjunction with the HIPAA vendor management program.
- Prepare comprehensive reports for Risk and Compliance management and senior leadership detailing issues, trends, and identified risks from IT internal control work and assurance activities.
- Develop compliance documents and project artifacts, identify root causes of risk incidents, and escalate issues as necessary for resolution.
- Collaborate effectively with various departments to foster a culture of compliance and risk awareness.