{"id":3161350,"url":"https://alion.io/job/mayo-clinic-principal-risk-analyst","title":"Principal Risk Analyst","company":{"id":35609,"name":"Mayo Clinic","domain":"mayoclinic.org","url":"https://alion.io/company/mayo-clinic","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"A","score":88,"open_postings":103,"ghost_share":0,"stale_share":0.66,"repost_share":0.049,"time_to_fill_p50_days":7,"computed_at":"2026-11-02T06:13:15Z"}},"role":"Finance","role_family":"Finance","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Rochester, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":84000,"max_usd":186000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":600},"experience_years_min":7,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"LLM","optional":false},{"name":"Microsoft Office","optional":true}],"status":"live","first_seen_at":"2026-10-23T14:36:11Z","employer_posted_date":"2026-10-23","last_verified_at":"2026-11-02T14:56:49Z","board_verified":true,"closed_at":null,"days_open":10,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":10},"description":"The Privacy Third Party Risk Management Principal Risk Analyst leads and supports complex risk business operations, special projects, compliance and privacy initiatives, mitigation development, and stakeholder education. This role provides day-to-day guidance and project support, participants in multidisciplinary workgroups and projects, partners with Legal, Supply Chain, Office of Information Security, Third-Party Risk Management (TPRM), TPRM Risk domains, and business stakeholders, and helps design policies, procedures, and operational processes that support Mayo Clinic’s risk tolerance. Responsibilities may include third-party privacy risk assessments, Data Protection Impact Assessments, review of de-identified data sets, development of SBARs and executive summaries, peer review of work unit documentation, support for AI/LLM and Consumer Data Protection Agile Leadership Team (CDPALT) workgroups, and communication of actionable risk guidance to leadership and business partners.\nThe Principal Risk Analyst will lead risk business operations, special projects, investigations, legal litigation, mitigation development, non-employee access and end user awareness/education. Incumbent will provide guidance to the RD unit for day-to-day operational support, including project management. Incumbent will demonstrate leadership and represent the RD on project teams, committees, strike teams and workgroups.\nJob Duties and Responsibilities: Supports and develops RD initiatives. Responsible for the design of enterprise business operations, including operational growth and development. Leads multi-disciplinary workgroups and projects. Responsible for development of policies and procedures to support the organization's risk tolerance. Gathers and organizes information from a cross-functional investigative team. Works directly with Legal and Human Resources on high risk internal and external investigations. Works directly with Legal and External Counsel on policy, regulatory and/or litigation matters (using eDiscovery protocols). Completes documentation to support findings including legal reports, SBARs, and executive summaries. Responsible for peer review of work unit documentation. Develops and presents Risk training(s) geared towards Mayo Clinic leadership.\nHas extensive experience in regulatory compliance and investigations that includes:\nDeep subject matter expertise in relevant compliance laws and regulations such as privacy compliance, investigations, revenue cycle compliance, device manufacturing compliance, general compliance, conflict of interest; \nUnderstanding of and ability to apply the Seven Elements of an Effective Compliance Program;\nAbility to carry out audits, assessments and investigations; and \nAbility to use relevant compliance tools including GRC software, monitoring tools, and issue management software,\nAbility to follow and apply legal holds and execute proper preservation of evidence and chain of custody protocols. Depending on role this may include the ability to follow proper computer forensic evidence handling, advanced knowledge of data preservation, acquisition of computing and storage devices either fixed or mobile and more technical forensic investigations. \nMust have technical and nontechnical communication skills (verbal and written), analytical aptitude and project management skills. Demonstrates high level integrity and ability to use discretion and maintain confidential information. Other functions and projects as assigned. Some travel may be required to other Mayo Clinic sites and/or training conferences.\nDuring the selection process you may participate in an OnDemand (pre-recorded) interview that you can complete at your convenience. During the OnDemand interview, a question will appear on your screen, and you will have time to consider each question before responding. You will have the opportunity to re-record your answer to each question - Mayo Clinic will only see the final recording. The complete interview will be reviewed by a Mayo Clinic staff member and you will be notified of next steps.\nThis vacancy is not eligible for sponsorship/ we will not sponsor or transfer visas for this position. Also, Mayo Clinic DOES NOT participate in the F-1 STEM OPT extension program.\n Bachelor’s degree and 7 years’ experience in business analysis, compliance, privacy, insider threat, information security, human resources, risk management, information science, business administration, law enforcement, health or science-related fields OR Master’s degree and 5 years’ experience in business analysis, compliance, privacy, insider threat, information security, human resources, risk management, information science, business administration, law enforcement, health or science-related fields. Masters of Healthcare Administration, Business Administration, or Science preferred. Certified Fraud Examiner (CFE), Certification in Healthcare Compliance (CHC) or Healthcare Privacy Compliance (CHPC) preferred.\nAdditional Preferred Qualifications:\nDemonstrates professional leadership skills. Ability to maintain highest level of confidentiality. Advanced analytical and problem-solving skills. Investigation and audit experience. Ability to work with limited management involvement. Effective training and presentation skills. Knowledge of operational risk best practices, effectiveness evaluations and resources. Demonstrated ability to set priorities and to respond to changing demands from multiple sources. Ability to follow-through, meet regulatory deadlines, anticipate requirements, and build relationships. Ability to communicate effectively with diverse groups including attorneys, physicians, patients, allied health staff, researchers, and vendors. Ability to work collaboratively in a team environment with minimal supervision. Advanced Microsoft Office skills including: Excel, Word, Visio, and Power Point. Some roles require specialized skills e.g. forensic accounting, forensic tools, insider threat, data loss prevention. Incumbent must be able to obtain government security clearances on behalf of the organization.\nJD or Masters Degree preferred. or certified as CHC, CHPC, CCEP, CISSP, CISM, CITPM or relevant equivalent certification; or will obtain certification within 2 years of hire is preferred.","description_format":"text","description_chars":6307,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Health Care","Hospitals & Health Systems","Research Institutes","Medical Education & Training"],"lifecycle":[{"event":"open","at":"2026-10-23T16:15:23Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 479 · green card filings: 4","filings_12m":479,"filings_prev_12m":557,"green_card_filings_12m":4,"median_offered_wage_usd":89115,"route":null,"cap_exempt":true,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":29,"band":"fade","label":"Fading","p_open":1,"p_active":0.527,"p_room":0.55,"age_days":9,"expected_fill_days":7,"reasons":["conf:5","stale_co","velocity","win:tail","comp:brand"],"computed_at":"2026-11-02T06:13:15Z"},"pay":null,"html_url":"https://alion.io/job/mayo-clinic-principal-risk-analyst","json_url":"https://alion.io/job/mayo-clinic-principal-risk-analyst.json","meta":{"generated_at":"2026-11-02T15:33:47Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":21627,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":35609},"rest":"https://alion.io/mcp/rest/get_company?id=35609"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmayo-clinic-principal-risk-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmayo-clinic-principal-risk-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmayo-clinic-principal-risk-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/mayo-clinic-principal-risk-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmayo-clinic-principal-risk-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3161350}},{"tool":"search_jobs","arguments":{"company":"mayoclinic.org","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3161350},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}