Risk Analyst at Pavago in Colômbia, São Paulo, BR

Job Title: Risk Analyst / Risk Manager

Position Type: Full-Time, Remote Working Hours: U.S. client business hours (with flexibility for reporting cycles, audits, and incident response)

About the Role

Our client is seeking a Risk Analyst / Risk Manager to identify, assess, monitor, and mitigate financial, operational, compliance, and strategic risks across the organization. This role is responsible for building risk frameworks, conducting quantitative analysis, monitoring exposures, validating controls, and delivering actionable insights to leadership.

The ideal candidate combines strong analytical and quantitative skills with excellent communication and business judgment. You will help ensure the organization operates confidently while minimizing exposure to financial loss, regulatory penalties, operational disruptions, and reputational risk.

This role is highly cross-functional and requires close collaboration with finance, operations, compliance, IT, security, legal, and executive leadership teams.

Responsibilities

Risk Identification & Assessment

• Conduct enterprise-wide risk assessments across financial, operational, compliance, cyber, and strategic risk categories • Identify emerging risks, vulnerabilities, and control gaps across business processes • Maintain and update risk registers, documenting findings, severity, ownership, and remediation status • Prioritize risks and recommend mitigation strategies aligned with business objectives

Quantitative Modeling & Analysis

• Build and maintain quantitative risk models using Python, R, SAS, SQL, or Excel • Perform stress testing, sensitivity analysis, and scenario modeling for operational or financial exposures • Utilize methodologies such as Value at Risk (VaR), Monte Carlo simulations, regression analysis, and forecasting models • Analyze trends, anomalies, and incident patterns to proactively identify risk exposure

Compliance & Regulatory Oversight

• Monitor adherence to regulatory and compliance frameworks such as SOX, Basel III, Dodd-Frank, PCI-DSS, GDPR, HIPAA, or industry-specific standards • Support internal and external audits, examinations, and compliance reviews • Prepare quarterly, annual, and ad hoc compliance and risk reports for regulators, auditors, and leadership teams • Ensure policies, controls, and documentation remain audit-ready and compliant

Controls Testing & Monitoring

• Test and validate internal controls for effectiveness and compliance • Monitor incidents, escalations, and remediation activities through governance and risk platforms • Partner with IT and security teams on cyber risk, access control, vendor risk, and operational resilience reviews • Ensure remediation efforts are documented, tracked, and completed on schedule

Reporting & Executive Communication

• Build dashboards and reporting frameworks using Tableau, Power BI, Looker, or similar BI tools • Prepare clear, concise reports summarizing key exposures, incidents, trends, and recommendations • Present findings and risk insights to executives, leadership teams, and governance committees • Translate complex risk concepts into actionable business recommendations

Cross-Functional Collaboration

• Work closely with finance, operations, legal, compliance, IT, and business leaders to strengthen risk management practices • Support business units in embedding risk awareness into operational decision-making • Contribute to policy development, governance initiatives, and process improvement efforts

What Makes You a Perfect Fit

• Analytical and highly detail-oriented with strong quantitative problem-solving skills • Able to simplify and communicate complex risk concepts clearly to non-technical stakeholders • Proactive in identifying risks before they escalate into material issues • Comfortable managing multiple priorities under deadlines and regulatory pressure • Strong business judgment combined with a compliance and governance mindset • Organized and disciplined with documentation, reporting, and follow-through

Required Experience & Skills

• 3+ years of experience in risk management, compliance, audit, governance, or financial analysis • Strong proficiency in SQL, Excel, and data analysis techniques • Experience using governance, risk, or compliance platforms such as Archer GRC, ServiceNow, LogicManager, or equivalent • Familiarity with enterprise risk frameworks and regulatory requirements • Strong written and verbal communication skills • Ability to analyze complex datasets and generate actionable insights

Ideal Experience & Skills

• Professional certifications such as FRM, CFA, CPA, CCEP, CRISC, or related credentials • Experience with financial risk methodologies including VaR, stress testing, or operational risk analysis • Background in regulated industries such as financial services, healthcare, SaaS, fintech, or insurance • Experience supporting executive or board-level risk reporting • Familiarity with BI and reporting tools such as Tableau, Power BI, or Looker • Exposure to cyber risk, vendor risk, or enterprise governance programs

What Does a Typical Day Look Like?

A Risk Analyst / Risk Manager’s day revolves around identifying exposures, monitoring controls, and advising leadership on risk mitigation strategies. You will:

• Review dashboards and reports for anomalies or emerging risks • Run stress tests, quantitative models, and scenario analyses • Update risk registers and track remediation activities • Conduct control testing and compliance reviews • Collaborate with departments to improve risk mitigation strategies • Prepare reports and presentations for leadership and governance committees • Monitor incidents, escalations, and compliance obligations

In essence: you act as the organization’s early-warning system, ensuring risks are identified, quantified, communicated, and mitigated before they create significant operational or financial impact.

Key Metrics for Success (KPIs)

• Timeliness and accuracy of risk reporting • Percentage of controls tested and validated on schedule • Reduction in unresolved or repeat incidents • Zero missed regulatory deadlines or compliance penalties • Quality and completeness of audit-ready documentation • Executive and auditor satisfaction with reporting and governance processes • Early detection and mitigation of emerging risks

Interview Process

• Initial Phone Screen • Video Interview with Pavago Recruiter • Practical Assessment (Risk Analysis or Reporting Scenario) • Client Interview with Risk/Compliance Leadership • Offer & Background Verification

#RiskManagement #RiskAnalyst #Compliance #Governance #Audit #OperationalRisk #FinancialRisk #GRC #SQL #PowerBI #Tableau #EnterpriseRisk #RemoteWork #InternalControls #RegulatoryCompliance