Job Summary:
We are seeking an experienced SME Management Analyst to provide senior-level expertise and analytical support for an integrated Governance, Risk, and Process Management Program focused on modernizing IT governance, strengthening management controls, integrating enterprise risk management, and improving business processes through structured process management and continuous improvement.
The ideal candidate will bring strong expertise in business analysis, IT governance, risk management, process improvement, operating-model development, internal controls, and stakeholder management. The SME will work closely with executives, program managers, technical teams, process owners, service owners, and governance bodies to assess complex business environments, identify governance and process gaps, develop practical recommendations, and support strategic and operational decision-making.
The role requires the ability to provide subject matter expertise, independent analysis, and actionable recommendations while developing standardized processes, controls, operating models, roadmaps, documentation, dashboards, and implementation plans.
Key Responsibilities:
Provide subject matter expertise in IT governance, risk management, process management, internal controls, business analysis, and organizational improvement.
Assess current governance, risk management, tasker management, controls, and business processes, including roles, responsibilities, decision rights, workflows, documentation, tools, metrics, and organizational maturity.
Conduct business process discovery and analysis through interviews, workshops, document reviews, observation, data analysis, and system analysis.
Develop current-state and future-state process models and identify fragmentation, duplication, bottlenecks, unnecessary handoffs, rework, control gaps, unclear ownership, and other performance issues.
Develop and support target operating models defining governance structures, process ownership, risk ownership, decision authorities, escalation paths, intake processes, and continuous-improvement responsibilities.
Apply and expand COBIT-aligned governance, management objectives, practices, controls, and performance measures across appropriate IT governance and management functions.
Map governance, risk, tasker, and process controls to applicable COBIT objectives and identify gaps, redundancies, dependencies, and improvement opportunities.
Develop and maintain prioritized transformation and process-improvement roadmaps, including milestones, dependencies, resources, risks, resource requirements, expected outcomes, and completion criteria.
Establish standardized processes for intake, evaluation, prioritization, review, approval, escalation, tracking, closure, and change control.
Develop and maintain governance, risk, issue, tasker, decision, process, and improvement registers, logs, inventories, and backlogs.
Establish and support risk-management frameworks, including risk categories, scoring criteria, likelihood and impact definitions, risk levels, residual-risk measures, escalation thresholds, and risk-acceptance procedures.
Support risk-treatment planning by identifying accountable owners, mitigation activities, milestones, business value, effort, dependencies, organizational readiness, expected outcomes, and completion criteria.
Design future-state processes with clearly defined ownership, activities, decision points, controls, roles, service expectations, escalation paths, and performance measures.
Develop implementation-ready documentation, including process maps, SOPs, work instructions, charters, checklists, templates, RACI/responsibility matrices, control descriptions, decision logs, and reporting formats.
Support the development and operation of a Tasker Tracking System for assignment, ownership, due dates, workflow, notifications, escalations, completion, evidence retention, and reporting.
Develop executive dashboards and recurring reports covering governance activities, decisions, taskers, risk posture, treatment progress, process-improvement initiatives, performance measures, dependencies, and implementation status.
Integrate governance and risk information into strategic planning, portfolio reviews, budget planning, vendor oversight, performance management, and executive decision-making.
Facilitate governance, risk, process-management, and stakeholder working sessions with executives, program managers, technical teams, process owners, service owners, and governance bodies.
Provide expert recommendations on governance structures, process improvements, controls, risk treatment, operating models, and organizational practices.
Support organizational change and adoption through stakeholder coordination, communications, training, readiness reviews, adoption assessments, Communities of Practice, and stabilization activities.
Conduct recurring maturity and effectiveness assessments, lessons-learned reviews, and continuous-improvement activities to enhance governance, risk practices, processes, controls, metrics, tools, and organizational practices.
Serve as a senior advisor to stakeholders by translating complex findings into clear recommendations, decision points, implementation strategies, and actionable outcomes.
Required Qualifications:
Bachelor's degree in Business Administration, Information Technology, Computer Science, Management, or a related field, or equivalent experience.
10+ years of experience in business analysis, management analysis, process management, governance, risk management, or a related discipline.
Demonstrated experience analyzing and improving complex enterprise or IT business processes.
Experience developing current-state/future-state process models, requirements, workflows, SOPs, and operating models.
Strong understanding of IT governance, risk management, internal controls, and process management.
Experience with COBIT or other recognized IT governance/control frameworks.
Experience developing and maintaining risk registers, action trackers, decision logs, process inventories, dashboards, and management reports.
Strong analytical, documentation, facilitation, presentation, and advisory skills.
Demonstrated ability to provide subject matter expertise and recommendations to executive leadership and senior stakeholders.
Ability to work effectively with executive leadership, technical teams, process owners, and cross-functional stakeholders.
Experience identifying process gaps, evaluating improvement opportunities, and developing actionable recommendations.
Strong ability to manage multiple priorities, dependencies, risks, and stakeholders in a complex environment.
PMP certification is required.
Preferred Qualifications:
Experience supporting federal government or public-sector IT organizations.
Experience with COBIT 2019 or comparable governance frameworks.
Knowledge of enterprise risk management, internal controls, and compliance frameworks.
Experience with tasker/action-item management systems and executive reporting.
Experience with organizational change management and stakeholder adoption.
Experience developing or implementing governance operating models, process-management frameworks, or enterprise transformation initiatives.
Relevant certifications such as CBAP, CISM, CRISC, CGEIT, ITIL, or COBIT-related credentials are a plus.
