Senior Risk Analyst, Enterprise Risk Management

Location: For Those Who Work At Home, North Carolina Job Summary This role supports a Director in the Enterprise Risk Management function, including execution and facilitation of enterprise risk programs, GRC strategy, AI‑enabled risk transformation, forward‑looking risk reporting, and special projects for the office of the Chief Risk Officer. The role operates across disciplines including program execution, analytics, transformation, and executive communication; driving effectiveness and efficiency while supporting modernization across risk processes. Essential Functions Second Line of Defense Business Risk Team Support of ERM Risk Program Execution – Provide 2LOD Business Risk Team support to 2LOD teams through facilitation and execution of risk activities owned within the 2LOD including: risk and control self‑assessment (RCSA), business unit risk profile coordination, issues management, third party risk management, and regulatory change management. Assists the Director with the design and execution of ongoing risk monitoring routines and reporting within 2LOD. Forward‑Looking Risk Indicators & Board Reporting - Contribute to the quarterly refresh and enhancement of the CRO Forward‑Looking Indicator Dashboard, including data sourcing, trend analysis, construction, and review of executive‑ready visualizations for Board Risk Management Reports and CRO regulatory update materials. AI Integration for Risk Management - Support the design, prototyping, testing, and deployment of GenAI use cases for risk workflows, including tool design, prompt engineering, output validation, and human‑in‑the‑loop governance aligned to enterprise AI Risk Management standards. Strategic Risk Transformation Projects - Assist in facilitation and execution of transformation initiatives, including cross‑LOD stakeholder coordination, use case identification and design, dependency analysis, milestone tracking, and leadership status reporting. GRC Strategy, Layout & Archer Administration - Partner with Director and stakeholders on GRC platform strategy and reporting including business requirements, testing coordination, report development, and cross-team consulting. Policy, Procedure & Program Document Management - Draft, redline, and maintain enterprise risk program artifacts for all relevant activities, ensuring alignment to OCC Heightened Standards and internal governance requirements. Executive & Regulatory Communication – Assist in the production concise, board‑ready written and visual deliverables for the CRO, ELT, Board Risk Committee, OCC, and FRB, including top risk narratives, memos, and supervisory update materials. Cross‑Functional Coordination & Analytical Support – Support the team serving as integration point across ERM, Operational, Risk Compliance Risk, Credit Risk, Treasury Risk, Model Risk, Technology Risk, Strategy Risk, Internal Audit, and 1LOD partners on shared deliverables and enterprise campaigns relative to 2LOD-owned risks, controls, metrics, and findings. Portfolio & Priority Management - Independently manage a portfolio of concurrent workstreams with varying cadences maintaining clear status, dependencies, and stakeholder alignment.

Bachelor's degree required (Accounting, Finance, MIS, Business, or related field). 7+ years of progressive experience in enterprise risk management, operational risk, risk execution, or internal audit, in a large financial institution. Demonstrated working knowledge of internal control frameworks (COSO), risk taxonomies, RCSA methodology, and issues management lifecycles. Hands‑on experience with Archer GRC (or equivalent enterprise GRC platform) across risk register, controls, findings, remediation plans, and reporting modules. Proven ability to draft, edit, and manage risk policies, programs, standards, and procedures aligned to regulatory expectations (OCC, FRB, FDIC). Strong executive communication skills - concise written narratives,