Compliance Risk and Audit Controls Analyst

Our goal at FedPoint is to foster an engaging environment for our employees that promotes career growth and supports a work-life balance. From professional development to wellness programs to volunteer opportunities, we have created a culture that puts our employees on a positive pathway to success.

About Fed Point
FedPoint creates and operates digital benefits marketplaces that make it easy forour millions of federal and military customers to understand, select, and use their benefits.

A subsidiary of John Hancock Life & Health Insurance Company, FedPoint was founded in 2002 and is headquartered in Portsmouth, NH.

Our mission
Create and deliver world-class benefits experiences for our customers, clients, and business partners.

Are you passionate about risk management, audit readiness, and building strong control environments that protect an organization?

FedPoint is seeking a Compliance Risk & Audit Controls Analyst to play a critical role in advancing our enterprise risk management and audit programs. This is an opportunity to move beyond routine compliance work and become a trusted partner in strengthening governance, improving controls, supporting audit activities, and enabling organizational integrity.

In this role, you'll collaborate across business units, Compliance, Privacy, Security, and key stakeholders to support control testing, risk assessments, corrective action plans, audit preparation, and enterprise risk management initiatives. Your work will directly contribute to ensuring FedPoint remains audit-ready, compliant, and aligned with enterprise risk management standards.

• Support internal and external audit activities by preparing audit‑grade documentation, evidence repositories, control narratives, and testing materials.
• Assist with control testing activities, documentation reviews, sample selection, and reporting.
• Maintain and improve risk and control documentation across the organization.
• Support enterprise risk management processes, including KRIs, risk reporting, CAP management, and regulatory compliance activities.
• Partner with business leaders to strengthen control environments and improve risk management practices.
• Participate in risk reviews for projects involving privacy, security, vendor relationships, system changes, and operational processes.
• Track audit findings and corrective actions to completion while ensuring documentation quality and transparency.

• 3-5 years of experience in compliance, audit, risk management, internal controls, or a related regulated environment.
• Experience with risk assessments, control testing, audits, or evidence management.
• Strong documentation and analytical skills.
• Knowledge of risk management concepts, control frameworks, remediation activities, and audit readiness.
• Proficiency with Microsoft Office and SharePoint.
• Experience with workflow or governance tools such as Service Now, Chorus, or JIRA is a plus.
• Exposure to HIPAA, privacy programs, vendor oversight, government contracts, or highly regulated industries is preferred.

• Naturally curious and detail‑oriented.
• Able to identify process gaps, risks, and improvement opportunities.
• Comfortable working cross‑functionally and influencing without authority.
• Strong organizational skills with the ability to manage competing priorities.
• Professional communicator who can translate complex compliance requirements into practical business solutions.

Schedule: 40 hours per week Monday
- Friday, Hybrid - 2 days per week on site

Location:
Portsmouth, NH

Compensation: The typical starting salary would be between $72,250-$85,000/yr based on qualifications and experience as it relates to our requirements. Final…