Senior Risk Analyst

About the role

You will design, implement, and mature a risk framework that spans information security, AI, and operational risk—building toward a program that is quantitative-leaning, connected to live data sources, and actionable at every altitude from service owner to executive leadership. You will establish risk identification and scoring methodologies, own the enterprise risk register, and produce risk intelligence that drives real decisions.

What you'll do

• Risk Program Design & Maturation
• Design and implement a structured risk management program, including risk taxonomy, scoring methodology, risk appetite statements, and escalation thresholds
• Align the program with ISO 27005, NIST RMF, or ISO 31000 as appropriate
• This is largely greenfield work—you will help define the architecture and continuously mature the discipline as the company scales
• Build and maintain the enterprise risk register as a living operational tool, not a compliance artifact

What you need

• 4–7 yrs of experience
• Reporting
• Risk management
• Compliance
• Audit
• Data privacy
• ISO 27001
• Any graduate

Good to have

• SOX
• CISA
• CISM
• CISSP
• ServiceNow
• LLMs