Risk Analyst

Job Description

Risk Assessment Execution

• Assist in the execution of risk assessments across all departments in coordination with the VP, Compliance & Risk Management.
• Facilitate risk assessment sessions with Department Heads and Assurance Champions, using the approved risk scoring methodology.
• Document risk findings, control assessments, and risk response plans in the GRC platform, ensuring all entries are complete, consistently scored, and properly categorized. 
• Coordinate with Assurance Champions in each department to schedule assessments, gather required input, and follow up on outstanding items.

Risk Register Maintenance

• Maintain and update the unified enterprise risk register in the GRC platform, ensuring all entries reflect current risk status, control effectiveness ratings, and risk owner assignments.
• Process newly identified risks by classifying, scoring, and routing them for appropriate review prior to inclusion in the risk register.
• Track risk response plans and action items; follow up with Risk Owners on progress and update risk register entries accordingly.
• Perform periodic register reviews to identify stale entries, scoring inconsistencies, or gaps in coverage.

Risk Monitoring and Reporting

• Support the collection and tracking of key risk data from across the organization on a regular reporting cycle.
• Maintain risk monitoring data in the GRC platform.
• Maintain risk monitoring documentation and support preparation of periodic risk status reporting.
• Coordinate with departments to define and confirm risk monitoring metrics and data sources

Risk Management Platform Support

• Assist with the administration and upkeep of the risk management platform, including register structure, user access, and workflow configuration.
• Support the development and maintenance of risk dashboards, reporting templates, and assessment workflows.
• Troubleshoot platform issues and liaise with vendor support as needed.
• Support onboarding of stakeholders to the risk management platform as needed.

Reporting and Documentation

• Support preparation of risk committee reporting materials, including risk register status, monitoring summaries, and action plan tracking.
• Prepare supporting materials for risk governance meetings, including data summaries and risk rating updates.
• Maintain accurate records of risk register changes, assessment results, and escalation decisions.

Program Administration

• Maintain the ERM program calendar and coordinate scheduling across departments.
• Coordinate logistics for risk assessment sessions and stakeholder engagement activities.
• Support leadership tracking of ERM program progress and preparing periodic status updates for internal stakeholders.
• Contribute to continuous improvement of the ERM program as it develops and matures.
• Support development and delivery of risk awareness training for Department Heads, Risk Owners, and Assurance Champions.
• Experience with GRC platforms preferred; familiarity with risk register management, dashboard reporting, and workflow configuration in any major GRC platform (e.g., RSA Archer, ServiceNow GRC, MetricStream, or similar) considered.
• Experience executing risk assessments and maintaining risk registers in a structured ERM or operational risk program.
• Experience supporting or contributing to the build-out of a risk assurance program, including stakeholder engagement, risk register development, or monitoring and reporting activities, is a plus.
• Familiarity with COSO ERM (2017) and/or ISO 31000:2018 frameworks preferred; formal training or certification a plus.
• Experience in fintech, payments, or a technology-driven financial services environment strongly preferred; prior exposure to a SaaS, card processing, or third-party service provider model is a plus. Candidates from regulated technology, Big 4 risk or IT audit, or adjacent industries with a compliance or risk function will also be considered.
• CRMA (Certification in Risk Management Assurance), PMI-RMP, or equivalent professional certification is a plus.
• Strong data organization and reporting skills; ability to compile, summarize, and present risk data clearly for management audiences.

What we are Looking For:

• Education: Bachelor’s degree in business, Finance, Risk Management, or a related field
• Experience: 3-5 Years of experience in enterprise risk management, operational risk, compliance, or a related field.

Skills

• Working knowledge of enterprise risk management principles, including risk assessment methodologies and risk register frameworks.
• Familiarity with GRC platforms — specifically the ability to navigate and maintain risk registers, support dashboard reporting, and assist with workflow management.
• Strong organizational and project management skills; ability to manage multiple concurrent workstreams, track deliverables, and meet deadlines independently.
• Strong analytical capabilities with attention to detail, including data integrity, trend analysis, and risk scoring consistency.
• Effective written and verbal communication skills; ability to interact professionally with Department Heads, Assurance Champions, and senior leadership.
• Collaborative working style; comfortable coordinating across multiple departments and functions without direct authority.
• Ability to work independently with limited oversight; self-directed and proactive in identifying and resolving issues.
• Intellectual curiosity and willingness to learn.