Senior Risk Advisor

Senior Risk Advisor |

Location:

Bronx, NY | Contract To Hire | Hourly Pay Range: $70-$89

Our Governance, Risk & Compliance (GRC) organization seeks a Risk Advisor to provide strategic guidance on enterprise risk posture and facilitate risk assessments across business and technology functions. This role involves supporting the organization’s Third-Party Risk Management (TPRM) program, including vendor risk assessments, escalations, and remediation activities, within a federated environment. The ideal candidate will influence risk decisions at the executive level and drive continuous improvement in risk processes.

• Advise leadership on enterprise risk posture, tradeoffs, and risk acceptance, delivering clear, actionable recommendations.
• Identify systemic and emerging risks, influencing prioritization and investment decisions.
• Lead risk and gap assessments across business processes and technology environments from initiation through treatment planning.
• Own escalation of material risks and recommend mitigation, treatment, or acceptance strategies.
• Maintain and update the enterprise risk register, tracking remediation efforts and monitoring SLA adherence.
• Integrate risk data into executive reports and governance metrics.
• Support and contribute to the organization’s Third-Party Risk Management (TPRM) program, including vendor risk assessments during onboarding, reassessment, and renewal phases.
• Collaborate with business owners and procurement teams on third-party risk decisions and remediation activities.
• Contribute to the ongoing development and maturity of the TPRM program.

• Bachelor’s degree in Information Technology, Computer Science, Information Systems, Cybersecurity, Business Administration, or related field, or equivalent experience.
• 7+ years of experience in risk management, including advisory or leadership roles.
• Deep understanding of enterprise risk management frameworks and advising executive leadership.
• Proven experience performing third-party/vendor risk assessments throughout the vendor lifecycle.
• Strong communication skills with experience preparing risk documentation, reports, and governance presentations.
• Working knowledge of security and risk frameworks such as NIST CSF, NIST 800-53, PCI DSS, HIPAA, or SOC 2.
• Experience with GRC and vendor risk platforms like Tru Ops, Prevalent, One Trust, Process Unity, or Service Now.
• Demonstrated stakeholder management skills with the ability to influence decisions across decentralized organizations.
• Ability to leverage analytics, automation, and AI to improve risk management processes.

• Certifications such as CRISC, CISA, PMI-RMP, CTPRP, CTPRA, CISM, or CISSP.
• Experience building or maturing a Third-Party Risk Management (TPRM) program.
• Familiarity with federated, matrixed, or multi-business enterprise environments.
• Knowledge of AI governance and emerging technology risks.
• Experience supporting executive risk committees and governance forums.

Delphi-US is a national IT Services firm based in Newport, Rhode Island. We attract top-tier technical and professional talent, positioning leading employers to enhance their competitive edge. Our expertise spans Data Intelligence, AI/ML, Dev Ops & Cloud, Health IT, and Energy Management, serving critical sectors including energy, finance, biomed, government, and Fortune 500 companies. Our dedicated consultants leverage a proprietary matching process to deliver high-quality, tailored project teams.

We are committed to excellence, professionalism, and delivering lasting results for our clients.

6242