Risk Analyst / Risk Manager – Financial Risk, Compliance & GRC | Remote

Position Type: Full-Time, Remote
Working Hours: U.S. Business Hours

About the Role

At Pavago, one of our clients is hiring a highly analytical Risk Analyst / Risk Manager to identify, assess, monitor, and mitigate financial, operational, compliance, technology, and enterprise risks.

This is a hands-on risk management role focused on enterprise risk management (ERM), internal controls, regulatory compliance, financial risk analysis, GRC, and audit readiness.

You’ll partner cross-functionally with Finance, Operations, IT, Legal, Compliance, and leadership to strengthen controls, maintain regulatory compliance, monitor emerging risks, and provide actionable insights that support risk-aware business decisions.

If you have experience across risk management, compliance, audit, GRC, financial risk, or internal controls, this role is a strong fit.

What You’ll Own

Enterprise Risk Assessment

• Conduct risk assessments across:
• Financial risk
• Operational risk
• Compliance risk
• Vendor risk
• Technology risk
• Maintain:
• Risk registers
• Mitigation plans
• Incident trackers
• Evaluate risks based on:
• Likelihood
• Business impact
• Control effectiveness
• Identify emerging risks and potential control gaps
• Prioritize mitigation initiatives based on business impact
• Escalate material risks to appropriate stakeholders
• Monitor mitigation activities through resolution

Financial Risk Modeling & Analysis

• Analyze financial, market, and operational risk exposures
• Build and maintain risk models using:
• SQL
• Python
• R
• SAS
• Perform:
• Stress testing
• Scenario analysis
• Trend analysis
• Forecasting
• Apply quantitative techniques such as:
• Value at Risk (VaR)
• Monte Carlo simulations
• Regression analysis
• Probability modeling
• Interpret quantitative findings and translate them into practical business insights

Compliance & Regulatory Risk

• Support compliance with applicable frameworks and regulations, including:
• SOX
• Basel III
• Dodd-Frank
• GDPR
• HIPAA
• PCI-DSS
• Prepare risk and compliance reports
• Maintain documentation supporting regulatory requirements
• Support internal and external audits
• Track compliance requirements, findings, and remediation activities
• Keep governance and compliance records organized and audit-ready
• Help ensure regulatory and audit deadlines remain visible and on track

Internal Controls & GRC

• Test and validate internal controls and operational safeguards
• Identify and document control deficiencies
• Monitor incidents, control gaps, and risk events
• Work with GRC platforms such as:
• Archer
• ServiceNow
• LogicManager
• Support:
• Vendor risk assessments
• Cyber risk assessments
• Operational control testing
• Partner with IT and security teams to strengthen risk controls
• Track remediation activities and ensure identified gaps receive appropriate follow-up

Risk Reporting & Dashboards

• Build dashboards and reporting using:
• Power BI
• Tableau
• Looker
• Track key risk indicators and mitigation progress
• Monitor risk trends and emerging areas of exposure
• Prepare clear reports for leadership and stakeholders
• Translate complex quantitative or regulatory findings into practical business recommendations
• Provide stakeholders with visibility into risk status, control effectiveness, and remediation progress

Requirements

• 3+ years of experience in one or more of the following:
• Risk Analysis
• Risk Management
• Compliance
• Audit
• Governance / GRC
• Strong proficiency with SQL
• Advanced Excel or Google Sheets skills
• Experience with GRC platforms such as:
• Archer
• ServiceNow
• LogicManager
• Similar GRC platforms
• Strong understanding of:
• Enterprise risk management
• Internal controls
• Regulatory compliance
• Governance processes
• Strong analytical and problem-solving abilities
• Excellent written and verbal English communication skills
• Strong documentation and reporting discipline
• Ability to manage risk initiatives independently
• Ability to work effectively with cross-functional stakeholders
• Ability to work independently in a remote environment
• Availability during U.S. business hours

Preferred Qualifications

• Certifications such as:
• FRM
• CFA
• CPA
• CCEP
• Experience with Value at Risk (VaR), stress testing, or financial risk modeling
• Experience with Python, R, or SAS
• Experience within:
• Financial services
• Fintech
• SaaS
• Healthcare
• Experience supporting:
• Board-level risk reporting
• Enterprise governance
• Regulatory audits
• Audit preparation
• Familiarity with cybersecurity risk
• Experience with third-party or vendor risk management

Tools & Technology

SQL | Excel | Google Sheets | Python | R | SAS | Power BI | Tableau | Looker | Archer | ServiceNow | LogicManager | GRC & Compliance Reporting Platforms

What Makes You a Strong Fit

You’ll likely thrive in this role if you:

• Are highly analytical and comfortable working with complex risk scenarios
• Have a strong understanding of risk, governance, compliance, and internal controls
• Can identify potential risks before they become larger business issues
• Are comfortable working with both quantitative data and regulatory frameworks
• Maintain strong attention to detail and documentation discipline
• Can translate technical risk findings into clear business recommendations
• Proactively identify control weaknesses and recommend practical solutions
• Communicate effectively across Finance, IT, Legal, Compliance, and leadership
• Can independently own risk assessments and mitigation initiatives
• Understand how effective risk management supports better business decisions

What a Typical Day Looks Like

Your day may begin by reviewing risk dashboards, incident reports, open remediation items, and emerging areas of exposure.

You might then conduct an enterprise or operational risk assessment, analyze financial exposures, update risk registers, test internal controls, or prepare documentation for an upcoming audit.

Throughout the day, you’ll collaborate with Finance, IT, Legal, Compliance, and other stakeholders to investigate control gaps, track mitigation plans, and ensure risks receive appropriate follow-up.

You may also build dashboards, analyze risk trends, and prepare reports that translate complex findings into clear recommendations for leadership.

In short: you identify risks early, strengthen controls, maintain compliance, and give leadership the information needed to make better risk-aware decisions.

Key Metrics for Success

• Accurate and timely risk reporting
• Reduction in operational and compliance risk exposure
• Strong internal control effectiveness
• Timely identification of material risks and control gaps
• No missed regulatory or audit deadlines
• High-quality, audit-ready governance documentation
• Timely mitigation and remediation of identified risks
• Accurate risk registers and incident tracking
• Clear and actionable reporting to leadership
• Improved visibility into key risk indicators

Why This Role Stands Out

• Direct impact on organizational risk and governance
• Exposure across Finance, Compliance, Operations, IT, and Cybersecurity
• Opportunity to improve and scale enterprise risk frameworks
• Hands-on exposure to both quantitative risk analysis and GRC
• Direct collaboration with leadership and cross-functional teams
• High ownership in a fully remote environment
• Career growth opportunities into:
• Senior Risk Manager
• Enterprise Risk Lead
• Compliance Leadership
• Governance & Controls Manager
• Risk & Compliance Leadership

Interview Process

1. Initial Application
2. Spark Hire One-Way Video Interview
3. Recruiter Interview
4. Technical / Risk Scenario Discussion
5. Final Interview
6. Offer & Onboarding

Spark Hire Video Interview – Required

As part of the application process, all candidates are required to complete a one-way video interview through Spark Hire.

After completing the first step of your application, you’ll receive a Spark Hire invitation by email with instructions to record and submit your video responses.

Completion of the Spark Hire video is required to be considered for the next stage. Please check your inbox as well as your spam or junk folder for the invitation.

Apply Now

If you have experience in risk management, GRC, compliance, internal controls, or financial risk and can turn complex risk data into actionable business insights, we’d love to hear from you.

Apply today and help strengthen the risk frameworks, controls, governance, and compliance processes that support better business decisions.

#RiskAnalyst #RiskManager #RiskManagement #GRC #Compliance #FinancialRisk #EnterpriseRisk #InternalControls #Governance #RiskAssessment #SQL #OperationalRisk #Audit #RegulatoryCompliance #RemoteJobs #RemoteWork

#LI-AG1