Risk Manager

MPHI is a Michigan-based and nationally engaged, non-profit public health institute. We are a team of teams, process and content experts, dedicated to building A world where tomorrow is healthier than today!

Title: Risk Manager

$70,000 - $90,000 / Posted Thru: 12/7/2025

Location: Remote/Virtual - Must live and work in Michigan

Some in-person work required - Okemos, Michigan

Purpose: The position will be very active in leading projects with an agile approach; ensuring that information concerning deliverables, risks, and issues is accurately resolved and passed to and from the project sponsors. The position takes ownership of project outcomes and promptly escalates and manages issue resolution. Additionally, the role will engage in proactive outreach and collaborate with internal teams, business partners, and external stakeholders to align project objectives and share best practices. By fostering strong relationships and open communication channels, the position will facilitate joint problem-solving and resource sharing, enabling the effective achievement of organizational goals.

Risk Management

• Lead projects through completion, serving as a strategic sounding board for the business risk owners as well as the administrator ensuring follow up and task completion
• Assess and identify the potentialrisksthat may hinder the reputation, safety, security and financial prosperity of MPHI in alignment with SOC 2, NIST 800-53 and HIPAA guidance
• Create an effective framework for risk management reporting and risk audit reviews
• Promote development of a positive risk management culture within MPHI by providing professional risk governance and expertise
• Establish networks to facilitate the development of risk management principles as an integral component of MPHI activity
• Develop project plans, recommend and oversee the implementation of strategic projects and service initiatives relating to risk, compliance as well as several IT initiatives.
• Provide technical risk management leadership to MPHI in the identification and response to risk exposures, appropriate loss control measures, and administrative guidance in the review and evaluation of risk management issues
• Assure controls are operating effectively
• Lead projects across the enterprise for both MPHI business units and MPHI Information Technology Department
• Provide research and analytical support
• Will facilitate the Risk and Governance Board to allow the presentation of elevated risk items to the Administrative and Senior Directors Team
• Maintain a vision for technological changes and potential risk on the horizon
• Knowledgeable in cloud computing and environments

Policies and Procedures

• Oversee updating of policies, procedures and supported compliance documentation to ensure compliance with applicable regulations and laws

ORIC

• Provide regulatory and compliance guidance and advice on both an ongoing and ad hoc basis
• Oversee internal monitoring, auditing and surveillance to ensure compliance with regulatory requirements
• Support the development, rollout and monitoring of ORIC initiatives
• All other duties as assigned.
• Always represent the best interests of MPHI.

Education: A bachelor's degree or comparable combination of education and work experience is required. A major in a field related to information technology, finance or accounting. A 4-year degree in economics or business administration may also be suitable. (A college transcript may be required prior to completion of the hiring process.) CISA, CRISC, PMP Certification or other project or risk management certifications preferred

Experience: Minimum of 2 - 5 years' experience or an equivalent combination of education, training, and experience. Previous experience in Enterprise Risk Management, Compliance Risk or Project Management is preferred. Knowledge and execution of IT projects and audits relating to SOC 2 and NIST 800-53 highly preferred.

Important Skills and Characteristics:

• Able to work effectively and efficiently toward goals in a complex, diverse environment with multiple changing demands.
• Strong organizational skills, including leadership, management, process, relationship management. Understands organizational interdependencies and can leverage them to build effective relationships.
• Passion for client satisfaction and authentic relationships.
• Pro-active in developing and implementing strategies that significantly mitigate risk.
• Identify, develop, and initiate innovations and solutions where precedents and procedures may not exist.
• Demonstrate superior inter-personal skills, conflict resolution, and negotiating skills.
• Regularly make decisions and take independent action on matters directly affecting strategic goals.
• Analytical thinker with strong conceptual and problem-solvingskills.
• Meticulous attention to detail with the ability to multi-task.
• Ability to work under pressure and meet deadlines.

Work Environment and Physical Requirements: MPHI is a standard office environment. May require viewing a CRT or VDT screen 25% to 75% of the time. May require a valid vehicle operator's license. May require moderate physical effort, including lifting materials and equipment up to 50 pounds.

IMPACT ON PROJECTS, SERVICES AND OPERATIONS: This position has a direct impact on the quality of services provided by MPHI to MDHHS.The Risk Manager will have direct contact with many staff at MPHI. The quality of the work and the professionalism exhibited by the Risk Manager directly impacts the reputation and perceived value of MPHI's services. Backup for this position is the Director of Information Security and Risk.

For purposes of employment standards, this classification is "Exempt" from overtime provisions of the fair Labor Standards Act.

MPHI works with you to promote health for everyone. Together, we will build a world where tomorrow is healthier than today!

MPHI is an EEO employer that participates with e-verify.