Risk Analyst

Risk Analyst / Risk Manager – Remote

Enterprise Risk | Compliance | Governance | Financial & Operational Risk

Position Type: Full-Time, Remote

Working Hours: U.S. Client Business Hours (with flexibility for reporting cycles, audits, and incident response)

About the Role

At Pavago, we’re hiring on behalf of one of our clients for a Risk Analyst / Risk Manager to identify, assess, monitor, and mitigate financial, operational, compliance, and enterprise risks across the organization.

This is a high-impact role where you’ll help safeguard the business by developing risk frameworks, analyzing emerging threats, strengthening internal controls, and delivering actionable insights that support strategic decision-making.

You’ll work closely with Finance, Operations, Compliance, Legal, IT, and Executive Leadership to ensure the organization remains compliant, resilient, and prepared for evolving business risks.

If you’re analytical, detail-oriented, and enjoy translating complex risk data into practical business recommendations, this role is built for you.

What You’ll Own

Enterprise Risk Assessment

• Conduct enterprise-wide risk assessments across:

  • Financial risk
  • Operational risk
  • Compliance risk
  • Market risk
  • Cybersecurity risk

• Maintain and update:

  • Risk registers
  • Control matrices
  • Risk assessments
  • Remediation trackers

• Identify emerging risks and prioritize mitigation activities.

• Partner with business leaders to strengthen proactive risk management practices.

Risk Modeling & Analytics

• Build and maintain quantitative risk models using:

  • SQL
  • Excel
  • Python
  • R
  • SAS

• Perform:

  • Stress testing
  • Scenario analysis
  • Sensitivity analysis
  • Regression analysis
  • Monte Carlo simulations
  • Value at Risk (VaR) modeling

• Analyze trends, anomalies, and key risk indicators (KRIs).

• Deliver data-driven recommendations to leadership.

Compliance & Regulatory Oversight

• Support compliance with applicable frameworks such as:

  • SOX
  • Basel III
  • Dodd-Frank
  • GDPR
  • HIPAA
  • PCI-DSS
  • Industry-specific regulations

• Prepare quarterly and annual compliance reports.

• Support internal and external audits.

• Maintain audit-ready documentation and evidence.

• Track remediation activities and regulatory deadlines.

Internal Controls & Governance

• Test and evaluate internal controls.

• Monitor incidents, exceptions, and risk events through Governance, Risk & Compliance (GRC) platforms.

• Support governance committees with reporting and documentation.

• Partner with IT and Security teams on:

  • Cyber risk
  • Vendor risk
  • Operational resilience

• Recommend improvements to governance processes and internal controls.

Reporting & Executive Communication

• Build dashboards and reports using:

  • Power BI
  • Tableau
  • Looker
  • Excel

• Present risk trends and mitigation recommendations to leadership.

• Translate technical risk findings into clear business insights.

• Maintain accurate do…