ERM / Risk Management Analyst

About the Role

Support and drive the Enterprise Risk Management (ERM) program by executing risk assessments, maintaining the risk register, and enabling governance reporting across the organization. This role collaborates with the VP, Compliance & Risk Management, Department Heads, and Assurance Champions to ensure risk information is complete, current, and effectively actioned. What You'll Do

• Assist in the execution of risk assessments across all departments, coordinating with Department Heads and Assurance Champions; apply the approved risk scoring methodology.

• Facilitate risk assessment sessions and document risk findings, control assessments, and risk response plans in the GRC platform, ensuring entries are complete, consistently scored, and properly categorized.

• Maintain and update the unified enterprise risk register in the GRC platform; reflect current risk status, control effectiveness ratings, and risk owner assignments.

• Process newly identified risks by classifying, scoring, and routing them for review prior to inclusion in the risk register.

• Track risk response plans and action items; follow up with Risk Owners on progress and update risk entries accordingly.

• Support risk monitoring by collecting key risk data, maintaining monitoring data and documentation in the GRC platform, and coordinating with departments to define monitoring metrics and data sources.

• Assist with the administration and upkeep of the risk management platform, including register structure, user access, and workflow configuration; support dashboards, reporting templates, and assessment workflows; troubleshoot platform issues and onboard stakeholders.

• Prepare materials for risk committee reporting and governance meetings, including risk status summaries and action plan tracking; maintain records of risk register changes, assessments, and escalation decisions.

• Maintain the ERM program calendar, coordinate scheduling across departments, and support periodic status updates; contribute to continuous improvement and risk awareness training. What We're Looking For

• Education: Bachelor’s degree in business, Finance, Risk Management, or a related field.

• Experience: 3-5 years in enterprise risk management, operational risk, compliance, or a related field.

• Skills: Working knowledge of enterprise risk management principles, risk assessment methodologies, and risk register frameworks; familiarity with GRC platforms and ability to navigate risk registers, dashboards, and workflows; strong organizational, project management, analytical, and communication skills; collaborative mindset and ability to work across departments.

• Additional: Ability to work independently with limited oversight; strong attention to data integrity, trend analysis, and risk scoring consistency; willingness to learn and adapt. Nice to Have

• Familiarity with COSO ERM (2017) and ISO 31000:2018 frameworks; formal training or certification a plus.

• Experience in fintech, payments, or a technology-driven financial services environment; exposure to SaaS, card processing, or third-party service provider models a plus.

• Certification such as CRMA or PMI-RMP, or equivalent.