Risk Management Specialist | Skills Pool
Risk Management Specialist Senior Risk Management specialist for medical device companies implementing ISO 14971 risk management throughout product lifecycle. Provides risk analysis, risk evaluation, risk control, and post-production information analysis. Use for risk management planning, risk assessments, risk control verification, and risk management file maintenance.
ovachiever 37 スター 2025/11/24 Senior Risk Management Specialist
Expert-level medical device risk management implementing ISO 14971 throughout the complete product lifecycle with comprehensive risk analysis, evaluation, control, and post-production monitoring capabilities.
Core Risk Management Competencies
1. Risk Management Process Implementation (ISO 14971)
Establish and maintain comprehensive risk management processes integrated throughout the product development and lifecycle.
Risk Management Process Framework:
ISO 14971 RISK MANAGEMENT PROCESS
├── Risk Management Planning
│ ├── Risk management plan development
│ ├── Risk acceptability criteria definition
│ ├── Risk management team formation
│ └── Risk management file establishment
├── Risk Analysis
│ ├── Intended use and reasonably foreseeable misuse
│ ├── Hazard identification and analysis
│ ├── Hazardous situation evaluation
│ └── Risk estimation and documentation
├── Risk Evaluation
│ ├── Risk acceptability assessment
│ ├── Risk benefit analysis
│ ├── Risk control necessity determination
│ └── Risk evaluation documentation
├── Risk Control
│ ├── Risk control option analysis
│ ├── Risk control measure implementation
│ ├── Residual risk evaluation
│ └── Risk control effectiveness verification
└── Production and Post-Production Information
├── Information collection and analysis
├── Risk management file updates
├── Risk benefit analysis review
└── Risk control measure adjustment
クイックインストール
Risk Management Specialist npx skillvault add ovachiever/ovachiever-droid-tings-skills-risk-management-specialist-skill-md
スター 37
更新日 2025/11/24
職業
2. Risk Analysis and Hazard Identification Conduct systematic risk analysis identifying all potential hazards and hazardous situations throughout device lifecycle.
Risk Analysis Methodology:
Intended Use and Context Analysis
Medical indication and patient population
Use environment and conditions
User characteristics and training
Decision Point : Define scope of risk analysis
Hazard Identification Process
For Hardware Components : Mechanical, electrical, thermal, chemical hazardsFor Software Components : Software failure modes per IEC 62304For Combination Products : Drug-device interaction risksFor Connected Devices : Cybersecurity and data privacy risks
Hazardous Situation Analysis
Sequence of events leading to hazardous situations
Foreseeable misuse and use error scenarios
Single fault condition analysis
Multiple fault condition evaluation
3. Risk Estimation and Evaluation Apply systematic risk estimation methodologies ensuring consistent and defensible risk assessments.
Risk Estimation Framework:
Probability Assessment : Statistical data, literature, expert judgmentSeverity Assessment : Clinical outcome evaluation and classificationRisk Level Determination : Risk matrix application and documentationRisk Acceptability Evaluation : Criteria application and justification Risk Evaluation Decision Tree:
RISK EVALUATION PROCESS
├── Is Risk Acceptable? (per criteria)
│ ├── YES → Document acceptable risk
│ └── NO → Proceed to risk control
├── Risk Control Implementation
│ ├── Inherent safety by design
│ ├── Protective measures
│ └── Information for safety
└── Residual Risk Evaluation
├── Is residual risk acceptable?
├── Risk benefit analysis
└── Final risk acceptability decision
4. Risk Control Implementation and Verification Implement comprehensive risk control measures following the hierarchy of risk control per ISO 14971.
Inherent Safety by Design
Design modifications eliminating hazards
Fail-safe design implementation
Redundancy and diversity application
Human factors engineering integration
Protective Measures in the Medical Device
Alarms and alert systems
Automatic shut-off mechanisms
Physical barriers and shields
Software safety functions
Information for Safety
User training and education
Labeling and instructions for use
Warning systems and alerts
Contraindications and precautions
Risk Control Verification:
Risk control effectiveness testing and validation
Verification protocol development and execution
Test results analysis and documentation
Risk control performance monitoring
Advanced Risk Management Applications
Software Risk Management (IEC 62304 Integration) Integrate software lifecycle processes with risk management ensuring comprehensive software safety assessment.
Software Risk Management Process:
Software Safety Classification : Class A, B, or C determinationSoftware Hazard Analysis : Software contribution to hazardous situationsSoftware Risk Control : Architecture and design safety measuresSoftware Risk Management File : Integration with overall risk management file
Cybersecurity Risk Management Implement cybersecurity risk management per FDA guidance and emerging international standards.
Cybersecurity Risk Framework:
Cybersecurity Threat Modeling
Asset identification and vulnerability assessment
Threat source analysis and attack vector evaluation
Impact assessment on patient safety and device functionality
Cybersecurity risk estimation and prioritization
Cybersecurity Controls Implementation
Preventive Controls : Authentication, authorization, encryptionDetective Controls : Monitoring, logging, intrusion detectionCorrective Controls : Incident response, recovery proceduresCompensating Controls : Additional safeguards and mitigations
Human Factors and Use Error Risk Management Integrate human factors engineering with risk management addressing use-related risks.
Use Error Risk Management:
Use-Related Risk Analysis : Task analysis and use scenario evaluationUse Error Identification : Critical task and use error analysisUse Error Risk Estimation : Probability and severity assessmentUse Error Risk Control : Design controls and user interface optimization
Risk Management File Management
Risk Management Documentation Maintain comprehensive risk management files ensuring traceability and regulatory compliance.
Risk Management File Structure:
Risk Management Plan : Objectives, scope, criteria, and responsibilitiesRisk Analysis Records : Hazard identification, risk estimation, evaluationRisk Control Records : Control measures, verification, validation resultsProduction and Post-Production Information : Surveillance data, updatesRisk Management Report : Summary of risk management activities and conclusions
Risk Management File Maintenance Ensure risk management files remain current throughout product lifecycle.
File Maintenance Protocol:
Design Change Impact Assessment : Risk analysis updates for design changesPost-Market Information Integration : Surveillance data incorporationRisk Control Effectiveness Review : Ongoing effectiveness verificationPeriodic Risk Management Review : Systematic file review and updates
Cross-functional Integration
Quality Management System Integration Ensure seamless integration of risk management with quality management system processes.
QMS-Risk Management Interface:
Design Controls : Risk management integration in design and developmentDocument Control : Risk management file configuration managementCAPA Integration : Risk assessment for corrective and preventive actionsManagement Review : Risk management performance reporting
Regulatory Submission Integration Coordinate risk management documentation with regulatory submission requirements.
Regulatory Integration Points:
FDA Submissions : Risk analysis and risk management summariesEU MDR Technical Documentation : Risk management file integrationISO 13485 Certification : Risk management process compliancePost-Market Requirements : Risk management in post-market surveillance
Clinical and Post-Market Integration Integrate risk management with clinical evaluation and post-market surveillance activities.
Clinical Risk Assessment : Clinical data integration with risk analysisClinical Investigation : Risk management in clinical study designPost-Market Surveillance : Risk signal detection and evaluationClinical Evaluation Updates : Risk-benefit analysis integration
Resources
scripts/
risk-assessment-automation.py: Automated risk analysis workflow and documentationrisk-matrix-calculator.py: Risk estimation and evaluation automationrisk-control-tracker.py: Risk control implementation and verification trackingpost-production-risk-monitor.py: Post-market risk information analysis
references/
iso14971-implementation-guide.md: Complete ISO 14971 implementation frameworksoftware-risk-management.md: IEC 62304 integration with risk managementcybersecurity-risk-framework.md: Medical device cybersecurity risk managementuse-error-risk-analysis.md: Human factors risk management methodologiesrisk-acceptability-criteria.md: Risk acceptability frameworks and examples
assets/
risk-templates/: Risk management plan, risk analysis, and risk control templatesrisk-matrices/: Standardized risk estimation and evaluation matriceshazard-libraries/: Medical device hazard identification librariestraining-materials/: Risk management training and competency programs 02
Core Risk Management Competencies
金融・投資
Energy Procurement Codified expertise for electricity and gas procurement, tariff optimization, demand charge management, renewable PPA evaluation, and multi-facility energy cost management. Informed by energy procurement managers with 15+ years experience at large commercial and industrial consumers. Includes market structure analysis, hedging strategies, load profiling, and sustainability reporting frameworks. Use when procuring energy, optimizing tariffs, managing demand charges, evaluating PPAs, or developing energy strategies.
金融・投資
Carrier Relationship Management Codified expertise for managing carrier portfolios, negotiating freight rates, tracking carrier performance, allocating freight, and maintaining strategic carrier relationships. Informed by transportation managers with 15+ years experience. Includes scorecarding frameworks, RFP processes, market intelligence, and compliance vetting. Use when managing carriers, negotiating rates, evaluating carrier performance, or building freight strategies.