2

Remote Risk Analyst Jobs in Tennessee (NOW HIRING)

We are looking for a Risk Adjustment Analyst to join our team to train AI models. You will measure ... Benefits Full-time or part-time remote position Choose which projects you want to work on Flexible ...

We are looking for a Risk Adjustment Analyst to join our team to train AI models. You will measure ... Benefits Full-time or part-time remote position Choose which projects you want to work on Flexible ...

Partner with (coach) analyst i's, senior analysts and/or associates to complete assignments Our ... Remote -Atlanta, GA, Charlotte, NC, Nashville, TN, Raleigh, NC If this resonates with you, we ...

For candidates not in those locations, we would consider fully remote work for a highly qualified ... data analysis * Working knowledge of the federal, state, and local regulations / ordinances ...

For candidates not in those locations, we would consider fully remote work for a highly qualified ... data analysis * Working knowledge of the federal, state, and local regulations / ordinances ...

Senior Conflicts Analyst

Nashville, TN · On-site +1

$100K - $120K/yr

About the Role The Senior Conflicts Analyst will play a key role in supporting the firm's Risk ... Hybrid and remote-friendly arrangements available. * Professional Environment: Collaborative ...

Senior Conflicts Analyst

Nashville, TN · On-site +1

$100K - $120K/yr

About the Role The Senior Conflicts Analyst will play a key role in supporting the firm's Risk ... Hybrid and remote-friendly arrangements available. * Professional Environment: Collaborative ...

next page

Showing results 1-20

Remote Risk Analyst information

See Tennessee salary details

$13

$36

$59

How much do remote risk analyst jobs pay per hour?

As of May 28, 2026, the average hourly pay for remote risk analyst in Tennessee is $36.75, according to ZipRecruiter salary data. Most workers in this role earn between $27.07 and $44.71 per hour, depending on experience, location, and employer.

What is a Remote Risk Analyst job?

A Remote Risk Analyst is responsible for identifying, analyzing, and mitigating financial, operational, or security risks for a company while working remotely. They assess data, monitor trends, and develop strategies to minimize potential threats. This role often involves working with risk management software, conducting audits, and ensuring compliance with industry regulations. Remote Risk Analysts collaborate with teams virtually using digital communication and reporting tools. They are commonly employed in industries such as finance, insurance, cybersecurity, and consulting.

What are the key skills and qualifications needed to thrive in the Remote Risk Analyst position, and why are they important?

To thrive as a Remote Risk Analyst, you need strong analytical skills, attention to detail, and a degree in finance, economics, or a related field. Familiarity with risk assessment tools, data analysis software (such as Excel, SQL, or SAS), and relevant certifications like FRM or CFA are highly beneficial. Proven abilities in communication, problem-solving, and self-motivation are critical for effective remote collaboration and independent work. These skills help identify, analyze, and report on risks, allowing organizations to make informed decisions and maintain compliance in a virtual environment.

What are the typical daily responsibilities of a Remote Risk Analyst?

As a Remote Risk Analyst, your typical day involves analyzing data to identify potential risks, preparing risk reports, and providing recommendations to management. You will use digital tools to monitor trends, evaluate risk models, and ensure policies and procedures are being followed. Collaboration with other departments—such as compliance, finance, and operations—is common and often occurs via virtual meetings and shared documents. While the role is independent, frequent communication and teamwork are essential to stay aligned with organizational goals and respond quickly to emerging risks.
What are the most commonly searched types of Risk Analyst jobs in Tennessee? The most popular types of Risk Analyst jobs in Tennessee are:
What cities in Tennessee are hiring for Remote Risk Analyst jobs? Cities in Tennessee with the most Remote Risk Analyst job openings:
Infographic showing various Remote Risk Analyst job openings in Tennessee as of May 2026, with employment types broken down into 100% Full Time. Highlights an 100% Remote job distribution, with an average salary of $76,430 per year, or $36.7 per hour.

Senior Governance Risk and Compliance (GRC) Analyst and Team Lead

C2 Labs, Inc

Knoxville, TN • On-site, Remote

Full-time

Posted 18 days ago


Job description

C2 Labs [www.c2labs.com] partners with clients on their IT transformation journey via data-driven IT strategic planning, application rationalization and redevelopment, and innovative research and development of new industry standards and technologies. C2 Labs provides specialized products and services that allow our clients to innovate with speed and scale seamlessly while maintaining a robust and effective security posture. C2 has a unique approach to client success enablement that is empowered by ART (Application Rationalization and Transformation) and SCIENCE (Strategic Client Interview and Engineering to assess, design, and implement Cloud Ecosystems) to couple creative new approaches/technologies with proven methodologies that deliver rapid results.
Must be a US Citizen and capable of passing a Public Trust background investigation.
Job Summary:
As a Senior Governance Risk and Compliance (GRC) Analyst and Team Lead at C2 Labs you will lead a team of security analysts and engineers to implement regulatory frameworks such as the Federal Information Security Modernization Act (FISMA), the Federal Risk Authorization Management Program (FedRAMP) and the State Risk Authorization Management Program (StateRAMP). You will leverage GRC tools to develop security authorization package documentation such as the System Security Plan (SSP), Security Assessment Plan (SAP), Security Assessment Report (SAR), and the Plan of Actions & Milestones (POA&M) in human readable and machine-readable formats. You will serve as a Subject Matter Expert (SME) at key stakeholder meetings and will develop and maintain client relationships. You will draft security control implementation statements with enough detail to facilitate the testing of the controls and will develop supporting documentation including the Contingency Plan (CP), Incident Response Plan (IRP), and Configuration Management Plan (CMP). As a Senior GRC Analyst your primary responsibility will be to ensure the timely development of the security authorization package in accordance with C2 Labs quality standards. You will be expected to lead multiple teams and will work on up to 2 packages at a time.
Job Responsibilities:
Categorize systems in accordance with Federal Information Processing Standards (FIPS) 199 and National Institute of Standards and Technology (NIST) Special Publication (SP) 800-60. Select and tailor security controls by applying scoping guidance in accordance with NIST SP 800-53 and FedRAMP specific guidance. Document the implementation characteristics for security controls with enough detail to permit the testing of the security control by an independent assessor/Third Party Assessment Organization (3PAO).
  • Develop, review, and update security authorization package documentation to include the System Security Plan (SSP), Security Assessment Plan (SAP), Security Assessment Report (SAR), and Plan of Actions and Milestones (POA&M).
  • Develop, review, and update supporting documentation including the Contingency Plan (CP), Incident Response Plan (IRP), and Configuration Management Plan (CMP).
  • Conduct Security Impact Assessments (SIAs) on changes to information systems.
  • Create the Control Implementation Summary (CIS)/Customer Responsibility Matrix (CRM) workbook outline Cloud Service Provider (CSP) and customer responsibilities.
  • Develop, review, and update policies and procedures to support the implementation of the NIST 800-53 control families.
  • Leverage the next generation of Governance Risk and Compliance (GRC) tools to automate the creation of the SSP.
  • Review current security assessment and authorization processes and provide recommendations for improvement.
  • Develop Risk Assessment Reports (RAR).
  • Provide guidance on NIST 800-53, FedRAMP, and StateRAMP control requirements.
  • Develop and deliver training to educate stakeholders on the various tasks and activities associated with the RMF.

Qualifications:
  • Minimum 8 years' experience in IT consulting specializing in Governance, Risk, and Compliance using the RMF.
  • CISSP, CISM, or CAP certification, or equivalent preferred
  • Excellent communication and interpersonal skills, with the ability to build a rapport and trust with clients.
  • Knowledge of the cybersecurity industry to include regulatory frameworks such as the National Institute of Standards in Technology (NIST) Risk Management Framework (RMF), Federal Risk Authorization Management Program (FedRAMP), Department of Defense (DoD) Impact Levels (2-6), and the State Risk Authorization Management Program (StateRAMP).
  • Possesses an in-depth understanding of the FedRAMP authorization process and associated templates and deliverables.
  • Must have extensive experience creating security authorization package documentation (i.e., SSP, SAP. SAR, & POA&M) and managing system authorization artifacts for a FedRAMP authorized cloud environment.

Working knowledge of:
  • NIST SP 800-53 Security and Privacy Controls for Federal Information Systems and Organizations
  • FedRAMP Security Controls Baselines (i.e., Low, Moderate, High, and Li-SaaS)
  • StateRAMP Security Control Baselines (i.e., Low Impact Ready, Low Impact Authorized, Moderate Impact Ready, Moderate Impact Authorized)
  • NIST SP 800-37 Guide for Applying the Risk Management Framework to Federal Information Systems
  • Must have strong technical writing skills.
  • Must be able to work independently under only general direction.
  • Must be able to interpret and provide consulting expertise on FedRAMP security requirements.
  • Will serve as an RMF Subject Matter Expert (SME) at key stakeholder meetings.
  • Must have extensive knowledge in reviewing, analyzing, and documenting the secure implementation of logical controls, physical controls, environmental controls, personnel security, and incident handling.
  • Experience preparing monthly continuous monitoring deliverables (e.g., vulnerability scans, POA&Ms, and asset inventory) for submission to the FedRAMP PMO.
  • Must be a US Citizen and capable of passing a Public Trust background investigation.