Risk Analyst

Key Responsibilities

• Support the third-party risk assessment process through the utilization of GRC tools by identifying, documenting, evaluating, and rating risks, controls, and mitigation activities.
• Prepare regular reports, dashboards, and summaries for leadership to communicate key risk trends, monitoring results, and notable developments.
• Maintain accurate documentation of risk incidents, mitigation actions, control assessments, and internal risk records including materials for internal audits, regulatory inquiries, and risk committee reviews.
• Partner with cross-functional stakeholders, including operations, compliance, legal, product, and risk owners, to understand risk exposure and support effective control design and monitoring.
• Research risk topics, regulatory developments, and industry trends to help inform the broader risk strategy to contribute to process improvement initiatives that strengthen risk management practices, reporting, and tool maturity.
• Respond to due diligence requests from internal stakeholders and clients by gathering, organizing, and communicating accurate third-party risk information and supporting documentation.
• Apply knowledge of AI and AI agent capabilities to assist workflow efficiency, support risk analysis and documentation efforts, and enhance reporting and monitoring processes.

Required Qualifications

• Bachelor’s degree or equivalent practical experience in risk management, compliance, analytics, information security risk, or a related field.
• Demonstrated experience in third-party risk management, financial services, technology, or a similarly regulated environment with the ability to work independently in a remote environment.
• Strong analytical, organizational, and time management skills, with the ability to interpret data and follow structured processes. Includes a working knowledge of third-party risk assessments, controls, and risk treatment concepts such as mitigation, acceptance, and avoidance.
• Strong written and verbal communication skills, including the ability to prepare clear reports and work effectively with stakeholders across the business.

Preferred Qualifications

• Experience applying risk and control frameworks such as NIST, ISO, COSO, COBIT, SCF, or FFIEC.
• Experience with GRC platforms such as ProcessUnity, Sastrify and ZIP.
• Familiarity with Jira, Confluence, or other workflow and documentation tools.
• Exposure to banking, digital banking, financial services regulations, or software development environments.
• Relevant certifications in risk, business continuity, security, or compliance are a plus.