Risk and Compliance Analyst

Who We Are

Inovalon was founded in 1998 on the belief that technology, and data specifically, would empower the transformation of the entire healthcare ecosystem for the better, improving both outcomes and economics. At Inovalon, we believe that when our customers are successful in their missions, healthcare improves. Therefore, we focus on empowering them with data-driven solutions. And the momentum is building. Together, as ONE Inovalon, we are a united force delivering solutions that address healthcare’s greatest needs. Through our mission-based culture of inclusion and innovation, our organization brings value not just to our customers, but to the millions of patients and members they serve.

Who You Are

As a Risk and Compliance Analyst, you support Inovalon’s Security Governance, Risk and Compliance department by helping assess, document, and strengthen controls across applications, infrastructure, business processes, and third-party vendors. You partner with Technology, business groups, project teams, and external auditors to deliver risk and compliance activities that support enterprise security initiatives and industry certifications. In this role, you translate assessment results into business risk, develop clear documentation, and help foster a strong control environment across the organization.

What You'll Do

• Support cross-functional risk and compliance initiatives by partnering with Technology, business teams, and project stakeholders across the enterprise.

• Identify, assess, document, test, and help remediate IT risks across applications, business processes, information systems, and third-party vendors.

• Plan and execute risk-based assessments and audit activities for compliance programs and certifications, including HIPAA, SOC 1, SOC 2, HITRUST, EHNAC, PCI DSS, data integrity reviews, technical compliance reviews, and information security risk assessments.

• Lead and support responses to prospective client RFPs, client inquiries, security questionnaires, control assessments, and other third-party requests by developing accurate, well-supported responses with cross-functional stakeholders.

• Prepare and present risk and compliance reports that summarize issues, trends, root causes, and recommendations for management and senior leadership.

• Develop, draft, edit, and manage the review and approval of policies, procedures, standards, technical documentation, and other compliance artifacts.

• Gather technical and operational information from subject matter experts and internal teams to create thorough, accurate, and user-friendly documentation.

• Organize, maintain, and track compliance documentation, evidence, policies, procedures, project artifacts, auditor requests, and remediation activities.

• Research risk, security, and compliance issues, document observations, identify root causes, and escalate concerns as appropriate.

• Build collaborative relationships with internal teams, external partners, auditors, and stakeholders to drive change and support a strong control environment.

What You'll Need

• 2+ years of experience collaborating in teams and working within Internal Audit, Technology Governance, Risk Assurance, and/or Internal Controls.

• Bachelor’s degree in Business, Technology, and/or equivalent work experience, or equivalent combination of education and experience required.

• In-depth understanding of core information technology processes and controls, as well as current trends in corporate information technology and emerging themes in the marketplace.

• Excellent written and verbal communication skills, including the ability to tailor materials for audiences ranging from technical teams to senior executives.

• Proven ability to manage multiple projects, workstreams, documents, and deadlines concurrently in a fast-paced environment.

• Strong skills in Excel, Word, PowerPoint, and flowcharting tools.

• Strong analytical skills, including experience researching issues, analyzing findings, and supporting cybersecurity documentation.

• Strong organizational skills, attention to detail, self-motivation, and the ability to work effectively in a multitasking environment.

• Demonstrate growth potential and learning agility by quickly building knowledge of evolving compliance frameworks, technologies, and business operations, and applying that learning to improve documentation, assessments, and controls.

• Demonstrate leadership by influencing cross-functional stakeholders, building trusted working relationships, and helping drive risk and compliance improvements across teams and levels of management.

• Demonstrate adaptability by adjusting priorities, managing changing deadlines, and remaining effective in ambiguous or fast-moving compliance and audit environments.

• Demonstrate creative thinking by finding practical ways to improve documentation, streamline evidence collection, and strengthen responses to audits, questionnaires, and risk issues.

• Demonstrate analytical skills by interpreting assessment results, identifying patterns and root causes, and translating technical findings into clear business risk insights.

• Nice to have: Security or audit-related certifications such as CISA, CCSFP, CISSP, or CRISC; healthcare industry experience; familiarity with the COSO and COBIT internal control frameworks.

Our Shared Commitments

• Maintain compliance with Inovalon’s policies, procedures and mission statement;

• Adhere to all confidentiality and HIPAA requirements as outlined within Inovalon’s Operating Policies and Procedures in all ways and at all times with respect to any aspect of the data handled or services rendered in the undertaking of the position; and

• Fulfill those responsibilities and/or duties that may be reasonably provided by Inovalon for the purpose of achieving operational and financial success of Employer.

Work Environment

• This is primarily a computer-based role performed in a remote, hybrid, or office environment. The role requires prolonged periods of computer use and frequent communication and interaction with others, either virtually and/or in person. The role may occasionally require transporting or moving work-related equipment weighing up to 10 pounds, such as a laptop and related materials. Some travel may be required, depending on the needs of the role. Reasonable accommodations may be provided to enable qualified individuals with disabilities to perform the essential functions of the position, consistent with applicable law.

This position is not eligible for immigration sponsorship (e.g. H-1B, TN, or E-3). Applicants must be authorized to work in the United States as a condition of employment. (This is only applicable for US-based positions)

If you don’t meet every qualification listed but are excited about our mission and the work described, we encourage you to apply. Inovalon is most interested in finding the best candidate for the job, and you may be just the right person for this or other roles.

By embracing inclusion, we enhance our work environment and drive business success. Inovalon strives to provide equal opportunities to the communities where we operate and to our clients and everyone whom we serve. We endeavor to create a culture of inclusion in which our associates feel empowered to bring their full, authentic selves to work and pursue their professional goals in an equitable setting. We understand that by fostering this type of culture, and welcoming different perspectives, we generate innovation and growth.

Inovalon is proud to be an equal opportunity workplace. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirement.

To review the legal requirements, including all labor law posters, please visit this link

To review the California Consumer Privacy Statement: Disclosures for California Residents, please visit this link

Work Location: If the US position is listed as remote, employees who reside within a 40-mile radius of one of our office locations in Tampa, FL; Canonsburg, PA; or Bowie, MD will follow a hybrid work schedule and are expected to work in the office two days per week (Tuesdays and Wednesdays).