Principal Enterprise Risk Management Analyst

What You'll Do

• Serve as a senior ERM subject matter expert, providing independent oversight and effective challenge of enterprise, technology, transformation, and operational risks.
• Lead complex risk assessments for significant initiatives, including technology implementations, digital transformation efforts, major process changes, strategic programs, and third-party enabled solutions.
• Evaluate project governance, risk assessments, mitigation plans, issue management practices, and residual risk decisions to ensure alignment with enterprise risk appetite and governance standards.
• Evaluate operational readiness, control effectiveness, and risk management practices associated with major business and technology initiatives.
• Identify, assess, and communicate emerging risks related to technology, artificial intelligence, cloud services, operational resilience, third-party providers, and enterprise transformation efforts.
• Develop and enhance risk frameworks, methodologies, assessment approaches, escalation criteria, and governance standards used across the organization.
• Establish and monitor key risk indicators (KRIs), risk trends, and risk appetite metrics to support proactive risk identification and decision-making.
• Provide independent risk advisory support to governance committees, executive leadership, and cross-functional working groups.
• Prepare and deliver executive-level reporting on enterprise risk exposures, emerging risks, control effectiveness, and significant initiatives.
• Partner with Technology, Information Security, Compliance, Business Continuity, Internal Audit, and business leaders to strengthen risk management capabilities while maintaining appropriate second line independence.
• Support regulatory examinations, audits, and independent reviews through risk analysis, documentation, and subject matter expertise.
• Drive continuous improvement of enterprise risk management practices, reporting, governance processes, and risk oversight capabilities.

Essential Skills

• Required Education: Bachelors degree in field relevant to role (or 4 additional years of relevant experience in lieu of a degree)
• Required Experience: 8-12 years of relevant experience
• Deep knowledge of enterprise risk management practices, governance frameworks, and risk assessment methodologies.
• Experience evaluating large-scale business, technology, or transformation initiatives within a regulated environment.
• Strong understanding of operational risk, technology risk, information security principles, and resilience concepts.
• Ability to provide independent challenge and influence stakeholders across all levels of the organization.
• Experience developing risk methodologies, governance standards, executive reporting, and key risk indicators.
• Strong analytical, problem-solving, facilitation, and communication skills.
• Ability to translate complex risks into clear business impacts and actionable recommendations.
• Experience supporting regulatory examinations, audits, and governance reviews.
• Financial services or credit union experience preferred.
• Preferred certifications include: CRISCCISACISSPCGEITPMPCERM or equivalent risk, audit, governance, or technology certifications.