Risk Analyst

Risk Analyst / Risk Manager – Financial Risk, Compliance & GRC | Remote

Position Type: Full-Time, Remote
Working Hours: U.S. Business Hours
About the Role

At Pavago , one of our clients is hiring a highly analytical Risk Analyst / Risk Manager to identify, assess, monitor, and mitigate financial, operational, compliance, technology, and enterprise risks.

This is a hands-on risk management role focused on enterprise risk management (ERM), internal controls, regulatory compliance, financial risk analysis, GRC, and audit readiness .

You’ll partner cross-functionally with Finance, Operations, IT, Legal, Compliance, and leadership to strengthen controls, maintain regulatory compliance, monitor emerging risks, and provide actionable insights that support risk-aware business decisions.

If you have experience across risk management, compliance, audit, GRC, financial risk, or internal controls , this role is a strong fit.
What You’ll Own
Enterprise Risk Assessment

- Conduct risk assessments across:

- Financial risk

- Operational risk

- Compliance risk

- Vendor risk

- Technology risk

- Maintain:

- Risk registers

- Mitigation plans

- Incident trackers

- Evaluate risks based on:

- Likelihood

- Business impact

- Control effectiveness

- Identify emerging risks and potential control gaps

- Prioritize mitigation initiatives based on business impact

- Escalate material risks to appropriate stakeholders

- Monitor mitigation activities through resolution

Financial Risk Modeling & Analysis

- Analyze financial, market, and operational risk exposures

- Build and maintain risk models using:

- SQL

- Python

- R

- SAS

- Perform:

- Stress testing

- Scenario analysis

- Trend analysis

- Forecasting

- Apply quantitative techniques such as:

- Value at Risk (VaR)

- Monte Carlo simulations

- Regression analysis

- Probability modeling

- Interpret quantitative findings and translate them into practical business insights

Compliance & Regulatory Risk

- Support compliance with applicable frameworks and regulations, including:

- SOX

- Basel III

- Dodd-Frank

- GDPR

- HIPAA

- PCI-DSS

- Prepare risk and compliance reports

- Maintain documentation supporting regulatory requirements

- Support internal and external audits

- Track compliance requirements, findings, and remediation activities

- Keep governance and compliance records organized and audit-ready

- Help ensure regulatory and audit deadlines remain visible and on track

Internal Controls & GRC

- Test and validate internal controls and operational safeguards

- Identify and document control deficiencies

- Monitor incidents, control gaps, and risk events

- Work with GRC platforms such as:

- Archer

- ServiceNow

- LogicManager

- Support:

- Vendor risk assessments

- Cyber risk assessments

- Operational control testing

- Partner with IT and security teams to strengthen risk controls

- Track remediation activities and ensure identified gaps receive appropriate follow-up

Risk Reporting & Dashboards

- Build dashboards and reporting using:

- Power BI

- Tableau

- Looker

- Track key risk indicators and mitigation progress

- Monitor risk trends and emerging areas of exposure

- Prepare clear reports for leadership and stakeholders

- Translate complex quantitative or regulatory findings into practical business recommendations

- Provide stakeholders with visibility into risk status, control effectiveness, and remediation progress

Requirements

-
3+ years of experience in one or more of the following:

- Risk Analysis

- Risk Management

- Compliance

- Audit

- Governance / GRC

- Strong proficiency with SQL

- Advanced Excel or Google Sheets skills

- Experience with GRC platforms such as:

- Archer

- ServiceNow

- LogicManager

- Similar GRC platforms

- Strong understanding of:

- Enterprise risk management

- Internal controls

- Regulatory compliance

- Governance processes

- Strong analytical and problem-solving abilities

-