Risk Analyst

Risk Analyst / Risk Manager – Remote

Enterprise Risk | Compliance | Governance | Financial & Operational Risk

Position Type: Full-Time, Remote

Working Hours: U.S. Client Business Hours (with flexibility for reporting cycles, audits, and incident response)

About the Role

At Pavago, we’re hiring on behalf of one of our clients for a Risk Analyst / Risk Manager to identify, assess, monitor, and mitigate financial, operational, compliance, and enterprise risks across the organization.

This is a high-impact role where you’ll help safeguard the business by developing risk frameworks, analyzing emerging threats, strengthening internal controls, and delivering actionable insights that support strategic decision-making.

You’ll work closely with Finance, Operations, Compliance, Legal, IT, and Executive Leadership to ensure the organization remains compliant, resilient, and prepared for evolving business risks.

If you’re analytical, detail-oriented, and enjoy translating complex risk data into practical business recommendations, this role is built for you.

What You’ll OwnEnterprise Risk Assessment

• Conduct enterprise-wide risk assessments across:

• Financial risk

• Operational risk

• Compliance risk

• Market risk

• Cybersecurity risk

• Maintain and update:

• Risk registers

• Control matrices

• Risk assessments

• Remediation trackers

• Identify emerging risks and prioritize mitigation activities.

• Partner with business leaders to strengthen proactive risk management practices.

Risk Modeling & Analytics

• Build and maintain quantitative risk models using:

• SQL

• Excel

• Python

• R

• SAS

• Perform:

• Stress testing

• Scenario analysis

• Sensitivity analysis

• Regression analysis

• Monte Carlo simulations

• Value at Risk (VaR) modeling

• Analyze trends, anomalies, and key risk indicators (KRIs).

• Deliver data-driven recommendations to leadership.

Compliance & Regulatory Oversight

• Support compliance with applicable frameworks such as:

• SOX

• Basel III

• Dodd-Frank

• GDPR

• HIPAA

• PCI-DSS

• Industry-specific regulations

• Prepare quarterly and annual compliance reports.

• Support internal and external audits.

• Maintain audit-ready documentation and evidence.

• Track remediation activities and regulatory deadlines.

Internal Controls & Governance

• Test and evaluate internal controls.

• Monitor incidents, exceptions, and risk events through Governance, Risk & Compliance (GRC) platforms.

• Support governance committees with reporting and documentation.

• Partner with IT and Security teams on:

• Cyber risk

• Vendor risk

• Operational resilience

• Recommend improvements to governance processes and internal controls.

Reporting & Executive Communication

• Build dashboards and reports using:

• Power BI

• Tableau

• Looker

• Excel

• Present risk trends and mitigation recommendations to leadership.

• Translate technical risk findings into clear business insights.

• Maintain accurate documentation for executive reporting and audit purposes.

Cross-Functional Collaboration

• Work closely with:

• Finance

• Operations

• Compliance

• Legal

• IT & Security

• Executive Leadership

• Embed risk awareness into business processes.

• Support continuous improvement of enterprise risk management frameworks.

Requirements

Must-Have QualificationsExperience

• 3+ years of experience in:

• Risk Management

• Enterprise Risk

• Compliance

• Audit

• Governance

• Experience working within regulated or compliance-driven environments.

Core Skills

• Strong proficiency in:

• SQL

• Microsoft Excel

• Data analysis

• Experience using Governance, Risk & Compliance (GRC) platforms such as:

• Archer

• ServiceNow

• LogicManager

• Or similar solutions

• Strong understanding of:

• Enterprise Risk Management (ERM)

• Internal controls

• Regulatory compliance

• Experience creating executive dashboards and risk reports.

• Excellent written and verbal English communication skills.

Nice to Have

• Professional certifications such as:

• FRM

• CFA

• CPA

• CCEP

• Experience with:

• VaR

• Monte Carlo simulations

• Stress testing

• Background in:

• Financial Services

• Healthcare

• SaaS

• Enterprise Technology

• Experience supporting board reporting or executive governance committees.

• Knowledge of:

• Cyber risk

• Vendor risk

• Operational resilience

• Experience using:

• Tableau

• Power BI

• Looker

What Makes You a Strong Fit

• Strong analytical and quantitative mindset.

• Exceptional attention to detail.

• Able to simplify complex risk concepts for business stakeholders.

• Proactive in identifying issues before they become significant risks.

• Strong balance of technical expertise and business judgment.

• Comfortable managing multiple priorities in a fast-paced environment.

Tools & Technologies

• SQL

• Microsoft Excel

• Python

• R

• SAS

• Power BI

• Tableau

• Looker

• Archer

• ServiceNow

• LogicManager

• Enterprise Risk Management (ERM) platforms

What a Typical Day Looks Like

• Review dashboards for emerging operational, financial, or compliance risks.

• Run quantitative risk analyses and stress tests.

• Update risk registers and remediation trackers.

• Test internal controls and validate governance processes.

• Prepare executive reports and compliance documentation.

• Collaborate with business teams to strengthen risk mitigation strategies.

• Track remediation progress and regulatory deadlines.

In short: You serve as the organization’s early-warning system—identifying, assessing, and mitigating risks before they impact the business.

Key Metrics for Success (KPIs)

• Timely and accurate risk reporting.

• Internal controls tested and validated on schedule.

• Early identification and mitigation of business risks.

• Zero missed regulatory or audit deadlines.

• High-quality executive reporting and dashboards.

• Positive audit outcomes and leadership confidence.

Why Join Us?

• Make a direct impact on enterprise risk strategy.

• Work closely with executive leadership and cross-functional teams.

• Influence governance, compliance, and operationa