Risk Identification & Assessment
• Conduct enterprise-wide risk assessments across financial, operational, compliance, cyber, and strategic risk categories
• Identify emerging risks, vulnerabilities, and control gaps across business processes
• Maintain and update risk registers, documenting findings, severity, ownership, and remediation status
• Prioritize risks and recommend mitigation strategies aligned with business objectives
Quantitative Modeling & Analysis
• Build and maintain quantitative risk models using Python, R, SAS, SQL, or Excel
• Perform stress testing, sensitivity analysis, and scenario modeling for operational or financial exposures
• Utilize methodologies such as Value at Risk (VaR), Monte Carlo simulations, regression analysis, and forecasting models
• Analyze trends, anomalies, and incident patterns to proactively identify risk exposure
Compliance & Regulatory Oversight
• Monitor adherence to regulatory and compliance frameworks such as SOX, Basel III, Dodd-Frank, PCI-DSS, GDPR, HIPAA, or industry-specific standards
• Support internal and external audits, examinations, and compliance reviews
• Prepare quarterly, annual, and ad hoc compliance and risk reports for regulators, auditors, and leadership teams
• Ensure policies, controls, and documentation remain audit-ready and compliant
Controls Testing & Monitoring
• Test and validate internal controls for effectiveness and compliance
• Monitor incidents, escalations, and remediation activities through governance and risk platforms
• Partner with IT and security teams on cyber risk, access control, vendor risk, and operational resilience reviews
• Ensure remediation efforts are documented, tracked, and completed on schedule
Reporting & Executive Communication
• Build dashboards and reporting frameworks using Tableau, Power BI, Looker, or similar BI tools
• Prepare clear, concise reports summarizing key exposures, incidents, trends, and recommendations
• Present findings and risk insights to executives, leadership teams, and governance committees
• Translate complex risk concepts into actionable business recommendations
Cross-Functional Collaboration
• Work closely with finance, operations, legal, compliance, IT, and business leaders to strengthen risk management practices
• Support business units in embedding risk awareness into operational decision-making
• Contribute to policy development, governance initiatives, and process improvement efforts