Risk Analyst

Risk Analyst / Risk Manager – Financial Risk, Compliance & GRC | Remote

Position Type: Full-Time, Remote Working Hours: U.S. Business Hours

About the Role

At Pavago, one of our clients is hiring a highly analytical Risk Analyst / Risk Manager to identify, assess, monitor, and mitigate financial, operational, compliance, technology, and enterprise risks.

This is a hands-on risk management role focused on enterprise risk management (ERM), internal controls, regulatory compliance, financial risk analysis, GRC, and audit readiness.

You’ll partner cross-functionally with Finance, Operations, IT, Legal, Compliance, and leadership to strengthen controls, maintain regulatory compliance, monitor emerging risks, and provide actionable insights that support risk-aware business decisions.

If you have experience across risk management, compliance, audit, GRC, financial risk, or internal controls, this role is a strong fit.

What You’ll Own

Enterprise Risk Assessment

• Conduct risk assessments across:

• Financial risk

• Operational risk

• Compliance risk

• Vendor risk

• Technology risk

• Maintain:

• Risk registers

• Mitigation plans

• Incident trackers

• Evaluate risks based on:

• Likelihood

• Business impact

• Control effectiveness

• Identify emerging risks and potential control gaps

• Prioritize mitigation initiatives based on business impact

• Escalate material risks to appropriate stakeholders

• Monitor mitigation activities through resolution

Financial Risk Modeling & Analysis

• Analyze financial, market, and operational risk exposures

• Build and maintain risk models using:

• SQL

• Python

• R

• SAS

• Perform:

• Stress testing

• Scenario analysis

• Trend analysis

• Forecasting

• Apply quantitative techniques such as:

• Value at Risk (VaR)

• Monte Carlo simulations

• Regression analysis

• Probability modeling

• Interpret quantitative findings and translate them into practical business insights

Compliance & Regulatory Risk

• Support compliance with applicable frameworks and regulations, including:

• SOX

• Basel III

• Dodd-Frank

• GDPR

• HIPAA

• PCI-DSS

• Prepare risk and compliance reports

• Maintain documentation supporting regulatory requirements

• Support internal and external audits

• Track compliance requirements, findings, and remediation activities

• Keep governance and compliance records organized and audit-ready

• Help ensure regulatory and audit deadlines remain visible and on track

Internal Controls & GRC

• Test and validate internal controls and operational safeguards

• Identify and document control deficiencies

• Monitor incidents, control gaps, and risk events

• Work with GRC platforms such as:

• Archer

• ServiceNow

• LogicManager

• Support:

• Vendor risk assessments

• Cyber risk assessments

• Operational control testing

• Partner with IT and security teams to strengthen risk controls

• Track remediation activities and ensure identified gaps receive appropriate follow-up

Risk Reporting & Dashboards

• Build dashboards and reporting using:

• Power BI

• Tableau

• Looker

• Track key risk indicators and mitigation progress

• Monitor risk trends and emerging areas of exposure

• Prepare clear reports for leadership and stakeholders

• Translate complex quantitative or regulatory findings into practical business recommendations

• Provide stakeholders with visibility into risk status, control effectiveness, and remediation progress

Requirements

• 3+ years of experience in one or more of the following:

• Risk Analysis

• Risk Management

• Compliance

• Audit

• Governance / GRC

• Strong proficiency with SQL

• Advanced Excel or Google Sheets skills

• Experience with GRC platforms such as:

• Archer

• ServiceNow

• LogicManager

• Similar GRC platforms

• Strong understanding of:

• Enterprise risk management

• Internal controls

• Regulatory compliance

• Governance processes

• Strong analytical and problem-solving abilities

• Excellent written and verbal English communication skills

• Strong documentation and reporting discipline

• Ability to manage risk initiatives independently

• Ability to work effectively with cross-functional stakeholders

• Ability to work independently in a remote environment

• Availability during U.S. business hours

• Preferred Qualifications

• Certifications such as:

• FRM

• CFA

• CPA

• CCEP

• Experience with Value at Risk (VaR), stress testing, or financial risk modeling

• Experience with Python, R, or SAS

• Experience within:

• Financial services

• Fintech

• SaaS

• Healthcare

• Experience supporting:

• Board-level risk reporting

• Enterprise governance

• Regulatory audits

• Audit preparation

• Familiarity with cybersecurity risk

• Experience with third-party or vendor risk management

• Tools & Technology

• SQL | Excel | Google Sheets | Python | R | SAS | Power BI | Tableau | Looker | Archer | ServiceNow | LogicManager | GRC & Compliance Reporting Platforms

• What Makes You a Strong Fit

You’ll likely thrive in this role if you:

• Are highly analytical and comfortable working with complex risk scenarios

• Have a strong understanding of risk, governance, compliance, and internal controls

• Can identify potential risks before they become larger business issues

• Are comfortable working with both quantitative data and regulatory frameworks

• Maintain strong attention to detail and documentation discipline

• Can translate technical risk findings into clear business recommendations

• Proactively identify control weaknesses and recommend practical solutions

• Communicate effectively across Finance, IT, Legal, Compliance, and leadership

• Can independently own risk assessments and mitigation initiatives

• Understand how effective risk management supports better business decisions

• What a Typical Day Looks Like

• Your day may begin by reviewing risk dashboards, incident reports, open remediation items, and emerging areas of exposure.

• You might then conduct an enterprise or operational risk assessment, analyze financial exposures, update risk registers, test internal controls, or prepare documentation for an upcoming audit.

• Throughout the day, you’ll collaborate with Finance, IT, Legal, Compliance, and other stakeholders to investigate control gaps, track mitigation plans, and ensure risks receive appropriate follow-up.

• You may also build dashboards, analyze risk trends, and prepare reports that translate complex findings into clear recommendations for leadership.

• In short: you identify risks early, strengthen controls, maintain compliance, and give leadership the information needed to make better risk-aware decisions.

• Key Metrics for Success

• Accurate and timely risk reporting

• Reduction in operational and compliance risk exposure

• Strong internal control effectiveness

• Timely identification of material risks and control gaps

• No missed regulatory or audit deadlines

• High-quality, audit-ready governance documentation

• Timely mitigation and remediation of identified risks

• Accurate risk registers and incident tracking

• Clear and actionable reporting to leadership

• Improved visibility into key risk indicators

• Why This Role Stands Out

• Direct impact on organizational risk and governance

• Exposure across Finance, Compliance, Operations, IT, and Cybersecurity

• Opportunity to improve and scale enterprise risk frameworks

• Hands-on exposure to both quantitative risk analysis and GRC

• Direct collaboration with leadership and cross-functional teams

• High ownership in a fully remote environment

• Career growth opportunities into:

• Senior Risk Manager

• Enterprise Risk Lead

• Compliance Leadership

• Governance & Controls Manager

• Risk & Compliance Leadership

• Interview Process

• Initial Application

• Spark Hire One-Way Video Interview

• Recruiter Interview

• Technical / Risk Scenario Discussion

• Final Interview

• Offer & Onboarding

• Spark Hire Video Interview – Required

• As part of the application process, all candidates are required to complete a one-way video interview through Spark Hire.

• After completing the first step of your application, you’ll receive a Spark Hire invitation by email with instructions to record and submit your video responses.

• Completion of the Spark Hire video is required to be considered for the next stage. Please check your inbox as well as your spam or junk folder for the invitation.

• Apply Now

• If you have experience in risk management, GRC, compliance, internal controls, or financial risk and can turn complex risk data into actionable business insights, we’d love to hear from you.

• Apply today and help strengthen the risk frameworks, controls, governance, and compliance processes that support better business decisions.

RiskAnalyst #RiskManager #RiskManagement #GRC #Compliance #FinancialRisk #EnterpriseRisk #InternalControls #Governance #RiskAssessment #SQL #OperationalRisk #Audit #RegulatoryCompliance #RemoteJobs #RemoteWork

LI-AG1