ZipRecruiter

Log In

1

Enterprise Risk Analyst Jobs (NOW HIRING)

True Anomaly

Enterprise Risk Analyst

Denver, CO · On-site

Your Mission We are seeking a driven and detail-oriented Enterprise Risk Analyst to support two distinct but interconnected lines of effort: Enterprise Risk Management (ERM) and Third-Party Vendor ...

BECU

Enterprise Risk Analyst - AI Risk

OR · On-site +1

$68K - $127K/yr

As an Enterprise Risk Analyst - AI Risk, you'll help shape how BECU responsibly adopts and manages artificial intelligence across the organization. You'll play a critical role in identifying ...

BECU

Enterprise Risk Analyst - AI Risk

$68K - $127K/yr

As an Enterprise Risk Analyst - AI Risk, you'll help shape how BECU responsibly adopts and manages artificial intelligence across the organization. You'll play a critical role in identifying ...

Northwest Community Bank

RISK ANALYST

Canton, CT · On-site

Risk Analyst Enterprise Risk Management | Banking ----- This position does not offer remote access. It is an in-office position located in Canton, CT. Summary of the Role The Risk Analyst is a detail ...

Northwest Community Bank

RISK ANALYST

Canton, CT · On-site

Risk Analyst Enterprise Risk Management | Banking ----- This position does not offer remote access. It is an in-office position located in Canton, CT. Summary of the Role The Risk Analyst is a detail ...

SCCU

Sr. Risk Analyst

Melbourne, FL · On-site

$75K/yr

This role independently executes enterprise and functional risk assessments, analyzes risk trends ... The Senior Risk Analyst partners closely with business leaders and provides guidance and mentorship ...

SCCU

Sr. Risk Analyst

Melbourne, FL · Hybrid

$75K/yr

This role independently executes enterprise and functional risk assessments, analyzes risk trends ... The Senior Risk Analyst partners closely with business leaders and provides guidance and mentorship ...

The Bachrach Group

Risk Analyst

Woodbury, NY · On-site

$32 - $35/hr

Third-Party Risk Analyst II The Third-Party Risk Analyst II supports the Enterprise Risk Management team by assessing and monitoring risks associated with current and prospective third-party vendors.

BECU

Enterprise Risk Analyst - Ops Risk Management

$68K - $127K/yr

As an Enterprise Risk Analyst supporting Operational Risk Management, you'll play a key role in strengthening BECU's risk management practices and operational resilience. You'll partner with teams ...

BECU

Enterprise Risk Analyst - Ops Risk Management

OR · On-site +1

$68K - $127K/yr

As an Enterprise Risk Analyst supporting Operational Risk Management, you'll play a key role in strengthening BECU's risk management practices and operational resilience. You'll partner with teams ...

Vast Bank

Risk Analyst

Tulsa, OK · On-site

Summary Of Role The Risk Analyst supports the Enterprise Risk Management Department and is responsible for identifying, assessing, and monitoring risks that could impact the Bank's strategy ...

Vast Bank

Risk Analyst

Tulsa, OK · On-site +1

Summary Of Role The Risk Analyst supports the Enterprise Risk Management Department and is responsible for identifying, assessing, and monitoring risks that could impact the Bank's strategy ...

next page

Showing results 1-20

All JobsEnterprise Risk Analyst Jobs

Enterprise Risk Analyst information

See salary details

$20

$50

$74

How much do enterprise risk analyst jobs pay per hour?

As of Aug 27, 2026, the average hourly pay for enterprise risk analyst in the United States is $50.27, according to ZipRecruiter salary data. Most workers in this role earn between $35.82 and $62.50 per hour, depending on experience, location, and employer.

What is an enterprise risk analyst?

An Enterprise Risk Analyst is a professional responsible for identifying, assessing, and mitigating risks that could affect an organization's operations, reputation, or financial performance. They work closely with different departments to analyze potential risks, develop risk management strategies, and ensure compliance with regulatory requirements. Their main goal is to help organizations make informed decisions and minimize potential losses due to unforeseen events or threats.

What are the key skills and qualifications needed to thrive as an enterprise risk analyst?

To thrive as an Enterprise Risk Analyst, you need a solid background in quantitative analysis, risk assessment, and business or finance, often supported by a relevant degree such as finance, accounting, or risk management. Familiarity with risk modeling software, statistical analysis tools like SAS or R, and certifications such as FRM or CRM are commonly required. Strong analytical thinking, attention to detail, and effective communication skills help you interpret complex data and present findings to stakeholders. These competencies are crucial for identifying, evaluating, and mitigating risks that could impact organizational objectives.

What are some common challenges faced by enterprise risk analysts when collaborating with cross-functional teams?

Enterprise Risk Analysts often work closely with departments like finance, IT, operations, and compliance to assess and manage organizational risks. A common challenge is aligning risk priorities and language across teams with different objectives and expertise. Effective communication and relationship-building are essential to ensure all stakeholders understand risk assessments and mitigation strategies. Analysts must balance technical risk models with practical business considerations, fostering a collaborative environment where all voices are heard.

What is the difference between Enterprise Risk Analyst vs Risk Management Specialist?

AspectEnterprise Risk AnalystRisk Management Specialist
CredentialsBachelor's degree in finance, risk management, or related field; certifications like FRM or CRMBachelor's degree; certifications such as CRM or FRM are common
Work EnvironmentCorporate offices, financial institutions, consulting firmsFinancial institutions, corporations, consulting firms
Industry UsageUsed across industries to assess enterprise-wide risksFocused on specific risk areas within organizations
Primary FocusIdentifying, analyzing, and mitigating overall enterprise risksManaging specific risk types like credit, operational, or market risks

While both roles involve risk assessment and management, the Enterprise Risk Analyst focuses on a broad, organization-wide perspective, whereas the Risk Management Specialist concentrates on specific risk areas within a company.

How much do enterprise risk analysts get paid?

Enterprise risk analysts typically earn a median annual salary of around $75,000 to $100,000, depending on experience, education, and location. Professionals with specialized skills in risk assessment, data analysis, and certifications like FRM or CRM may earn higher salaries, especially in larger organizations or financial sectors.

How much do enterprise risk analysts make?

Enterprise risk analysts typically earn a median annual salary of around $75,000 to $100,000, depending on experience, education, and location. Professionals with advanced certifications or specialized skills in risk management tools may earn higher salaries, especially in larger organizations or financial sectors.

Is enterprise risk management a good career?

Enterprise risk management (ERM) is a growing field that involves identifying, assessing, and mitigating risks across organizations. Risk analysts typically require strong analytical skills, knowledge of industry standards, and certifications such as FRM or CRM. It offers opportunities for advancement in various industries and a stable career path focused on strategic decision-making.

What does an enterprise risk analyst do?

An enterprise risk analyst identifies, assesses, and monitors risks that could impact an organization’s objectives. They analyze data, develop risk mitigation strategies, and often use tools like risk management software to help senior management make informed decisions about potential threats and opportunities.
More about Enterprise Risk Analyst jobs

What cities are hiring for Enterprise Risk Analyst jobs?

Cities with the most Enterprise Risk Analyst job openings:

What states have the most Enterprise Risk Analyst jobs?

States with the most job openings for Enterprise Risk Analyst jobs include:

What job categories do people searching Enterprise Risk Analyst jobs look for?

The top searched job categories for Enterprise Risk Analyst jobs are:

Enterprise Risk Analyst jobs near you
Infographic showing various Enterprise Risk Analyst job openings in the United States as of August 2026, with employment types broken down into 1% As Needed, 88% Full Time, 8% Part Time, and 3% Contract. Highlights an 87% Physical, 5% Hybrid, and 8% Remote job distribution, with an average salary of $104,555 per year, or $50.3 per hour.

Enterprise Risk Analyst

True Anomaly

Denver, CO • On-site

Full-time

Medical, Dental, Vision, Retirement, PTO

Re-posted 4 days ago

Job description

Space is a warfighting domain. True Anomaly seeks those with the talent and ambition to build the technology that secures it.
OUR MISSION
True Anomaly delivers decisive capabilities for space superiority. We build autonomous spacecraft, advanced payloads, mission software, and space-based interceptors - enabling the U.S. and its Allies to secure the space environment and counter threats from the ultimate high ground.
OUR VALUES
  • Be the offset. We create asymmetric advantages with creativity and ingenuity.
  • What would it take? We challenge assumptions to deliver ambitious results.
  • It's the people. Our team is our competitive advantage and we are better together.

Your Mission
We are seeking a driven and detail-oriented Enterprise Risk Analyst to support two distinct but interconnected lines of effort: Enterprise Risk Management (ERM) and Third-Party Vendor Risk Management (TPVRM). Reporting to the Senior Enterprise Risk Manager, you will play a hands-on role in executing risk assessments, maintaining program documentation, tracking remediation activities, and building the data foundation that powers executive-level risk decision-making.
This role is ideal for a mid-career risk professional who is fluent in frameworks such as NIST RMF and CMMC, is developing practical experience with risk quantification methodologies like FAIR and OCTAVE, and is eager to grow within a fast-paced aerospace and defense SaaS environment. You will work closely with engineering, security, legal, compliance, and operations teams to help identify, document, and track risk across the enterprise and its third-party supply chain.
Responsibilities:
Enterprise Risk Management
  • Support the design, execution, and continuous improvement of the enterprise risk management program under the direction of the Senior Enterprise Risk Manager.
  • Assist in conducting structured risk assessments using OCTAVE or similar threat-and-asset-centric methodologies, documenting findings, threat profiles, and recommended mitigations.
  • Support the application of FAIR methodology to help quantify risks in financial terms and contribute to risk prioritization analyses for leadership.
  • Maintain and update the enterprise risk register, ensuring accuracy of risk ratings, ownership assignments, remediation status, and residual risk tracking.
  • Build and maintain program dashboards, KPI/KRI reports, and status tracking using tools such as Jira, Confluence, enterprise GRC platforms, and MS Project.
  • Assist with audit readiness activities including evidence collection, pre-assessment preparation, control documentation, and post-audit remediation tracking.
  • Support POA&M management for IL5 and IL6 environments, tracking open items to closure and escalating blockers to the Enterprise Risk Manager.
  • Contribute to the development and maintenance of risk policies, standards, and guidelines aligned to NIST SP 800-53 Rev. 5, NIST SP 800-171, RMF, and CMMC Level 3.
  • Coordinate and track internal audit schedules, findings, and corrective action plans across business units.

Third-Party Vendor Risk Management
  • Execute vendor risk assessments as part of the onboarding and periodic review lifecycle, including security questionnaire administration, documentation review, and risk scoring.
  • Maintain the vendor risk inventory and lifecycle tracking records, ensuring all vendors are appropriately tiered and assessed on schedule.
  • Monitor vendor risk signals including cybersecurity advisories, regulatory actions, and contractual compliance status, escalating material changes to the Enterprise Risk Manager.
  • Support contract and procurement teams by providing vendor risk assessment findings and recommended risk mitigation language.
  • Assist in ensuring TPVRM program alignment with CMMC supply chain requirements, DFARS clauses, and ITAR/export control considerations for critical suppliers.
  • Develop and maintain vendor risk reporting inputs and dashboard content to support executive-level visibility into third-party risk exposure.

Cross-Functional Collaboration
  • Serve as a reliable day-to-day point of contact for risk-related inquiries from internal stakeholders across engineering, security, operations, and legal teams.
  • Track program milestones, action items, and deliverables, proactively communicating status and flagging risks or dependencies to the Enterprise Risk Manager.
  • Continuously improve risk program workflows, documentation templates, and reporting processes to support scalable and repeatable execution.
  • Support the preparation of materials for internal leadership briefings, external assessor interactions, and government partner reviews.

Qualifications
  • 5+ years of experience in enterprise risk management, GRC, cybersecurity risk, compliance, or a closely related discipline.
  • Working knowledge of NIST SP 800-53, NIST SP 800-171, DoD RMF (IL5/IL6), and CMMC, with direct experience supporting assessments or audits under one or more of these frameworks.
  • Familiarity with risk assessment methodologies including FAIR and/or OCTAVE, with a desire to deepen applied expertise in risk quantification.
  • Experience supporting or executing third-party/vendor risk assessments, including questionnaire administration, documentation review, and risk tracking.
  • Hands-on experience with program management and GRC documentation tools including Jira, Confluence (Atlassian suite), MS Project, enterprise GRC platforms, and MS Visio or Lucidchart.
  • Strong written and verbal communication skills, with the ability to clearly document findings and translate risk concepts for both technical and non-technical audiences.
  • Highly organized, self-directed, and comfortable managing multiple workstreams simultaneously in a fast-paced, regulated environment.
  • Active or ability to obtain SECRET, TS/SCI security clearance.
  • Must be a U.S. citizen, lawful permanent resident, or protected individual per ITAR requirements (8 U.S.C. 1324b(a)(3)).

Preferred Qualifications
  • Background in startup, aerospace, defense technology, or SaaS companies operating in regulated government markets.
  • Industry certifications such as:
  • Certified in Risk and Information Systems Control (CRISC)
  • Certified Information Systems Auditor (CISA)
  • Open FAIR Certification (The Open Group)
  • CompTIA Security+ or equivalent
  • Certified ScrumMaster (CSM) or similar Agile certification
  • Experience with cloud environments, particularly Azure Government and/or AWS GovCloud.
  • Familiarity with POA&M management, SSP documentation, and audit evidence collection in DoD authorization contexts.
  • Working knowledge of ITAR, EAR, DFARS, and export control considerations as they relate to vendor and supply chain risk.
  • Familiarity with Agile/Scrum and hybrid project delivery models.

Compensation
  • Base Salary: Denver - $105,000 to $150,000, Long Beach - $115,000 to $160,000, Washington, DC - $115,000 to $160,000, SF Bay Area - $125,000 to $175,000
  • Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave

Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, location, and experience.
Additional Requirements
  • Work Location: This role will be onsite at one of our office locations: Centennial, CO, Long Beach, CA, SF Bay Area, or Washington, DC #LI-Onsite
  • Work Environment: Standard office setting, working at a desk or in a production factory environment
  • Physical Demands: May include frequent standing, sitting, walking, bending, and lifting or carrying items up to 20 lbs.

This position will be open until it is successfully filled.
To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR), you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.
We value diversity of experience, knowledge, backgrounds, and perspectives and harness these qualities to create extraordinary impact. True Anomaly is committed to equal employment opportunity regardless of sex, race, religion or belief, ethnic or national origin, disability, age, citizenship, marital, domestic or civil partnership status, sexual orientation, gender identity, pregnancy, maternity or related condition (including breastfeeding) or any other basis as protected by applicable law. If you have a disability or additional need that requires accommodation, please do not hesitate to let us know.
To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.
True Anomaly is committed to equal employment opportunity on any basis protected by applicable state and federal laws. If you have a disability or additional need that requires accommodation, please do not hesitate to let us.

Apply