ZipRecruiter

Log In

1

Risk Associate Jobs in Boston, MA (NOW HIRING)

USI Insurance Services

Personal Risk Specialist

Boston, MA · On-site

$107K/yr

Personal Risk Specialist The Personal Risk Specialist is an outside sales position focused on ... We also offer employee programs that recognize outstanding achievement and help our associates lead ...

New

USI Insurance Services

Personal Risk Specialist

Braintree, MA · On-site

$104K/yr

Personal Risk Specialist The Personal Risk Specialist is an outside sales position focused on ... We also offer employee programs that recognize outstanding achievement and help our associates lead ...

New

USI Insurance Services

Personal Risk Specialist

Woburn, MA · On-site

$107K/yr

Personal Risk Specialist The Personal Risk Specialist is an outside sales position focused on ... We also offer employee programs that recognize outstanding achievement and help our associates lead ...

New

previous pagenext page

Showing results 21-40

All JobsRisk Associate JobsRisk Associate Jobs in Boston, MA

Risk Associate information

See Boston, MA salary details

$10

$20

$34

How much do risk associate jobs pay per hour?

As of Aug 7, 2026, the average hourly pay for risk associate in Boston, MA is $20.66, according to ZipRecruiter salary data. Most workers in this role earn between $16.44 and $21.92 per hour, depending on experience, location, and employer.

What are some common challenges faced by Risk Associates when working with cross-functional teams?

Risk Associates often collaborate with departments such as compliance, audit, and operations. One common challenge is aligning risk mitigation strategies with the differing priorities and perspectives of each team. Effective communication and adaptability are key, as Risk Associates must explain complex risk concepts in ways that are relevant to each stakeholder. Building strong relationships and fostering a shared understanding of risk helps ensure that policies are implemented consistently across the organization.

What is the difference between Risk Associate vs Credit Analyst?

AspectRisk AssociateCredit Analyst
Required CredentialsBachelor's degree, certifications like FRM or CRM beneficialBachelor's degree, finance or related certifications preferred
Work EnvironmentFinancial institutions, consulting firms, risk management teamsBanks, lending institutions, credit departments
Employer & Industry UsageUsed across banking, insurance, and investment firmsPrimarily in banking and lending sectors
Common Search & ComparisonOften compared for risk management rolesCompared for credit evaluation roles

The main difference between a Risk Associate and a Credit Analyst lies in their focus areas. Risk Associates primarily assess overall risk exposure and develop risk mitigation strategies, while Credit Analysts evaluate the creditworthiness of individual borrowers. Both roles require similar educational backgrounds and certifications, and they are commonly found in financial institutions. Understanding these distinctions helps job seekers identify the right career path within the finance industry.

What are the key skills and qualifications needed to thrive as a Risk Associate?

To thrive as a Risk Associate, you need strong analytical skills, attention to detail, and a background in finance, economics, or a related field—often supported by a relevant degree. Familiarity with risk assessment tools, financial modeling software, and sometimes certifications such as FRM (Financial Risk Manager) or CFA are highly valued. Excellent communication, problem-solving, and teamwork skills help you effectively identify, assess, and communicate risks across various business units. These skills ensure accurate risk evaluation, regulatory compliance, and proactive risk mitigation for organizational stability.
What are the most commonly searched types of Risk jobs in Boston, MA? The most popular types of Risk jobs in Boston, MA are:
What are popular job titles related to Risk Associate jobs in Boston, MA? For Risk Associate jobs in Boston, MA, the most frequently searched job titles are:
What job categories do people searching Risk Associate jobs in Boston, MA look for? The top searched job categories for Risk Associate jobs in Boston, MA are:
Risk Associate jobs near you
Infographic showing various Risk Associate job openings in Boston, MA as of August 2026, with employment types broken down into 1% As Needed, 69% Full Time, 27% Part Time, 1% Temporary, and 2% Contract. Highlights an 97% Physical, 1% Hybrid, and 2% Remote job distribution, with an average salary of $42,964 per year, or $20.7 per hour.

Assoc Dir, Information Security Governance Risk & Compliance

Servier

Boston, MA • On-site

Full-time

Medical, Dental, Vision, Life, Retirement

Posted 8 days ago

Job description

About Servier
Servier in the U.S. is a Boston-based, commercial-stage biopharmaceutical company launched by Servier Group in 2018. As a privately held organization, Servier is uniquely positioned to advance cutting-edge science, tackle underserved therapeutic areas and make patients the focus of every strategic decision.
Role Summary
The Associate Director, Information Security Governance Risk and Compliance serves as the functional leader for Governance, Risk and Compliance across the US affiliate, reporting to the Associate Director, Cybersecurity. This role establishes and leads the GRC operating model, governance framework, risk methodology, strategic priorities, and maturity roadmap. The role provides oversight of information security risk management, policy governance, compliance, third-party risk management, control assurance, audit readiness, and risk reporting while directing operational execution through subordinate managers, analysts, contractors, and service providers. This position partners closely with Global Information Security, IT, Legal, Privacy, Procurement, Quality, Internal Audit, and business stakeholders to ensure risks are identified, assessed, communicated, and managed in alignment with enterprise requirements. The role serves as the primary GRC advisor and enables risk-informed decision making by translating information security risk into business, operational, regulatory, and financial impact. This is a high visibility leadership role with the opportunity to build and scale a modern GRC capability aligned to Servier's global cybersecurity strategy, enterprise risk expectations, regulatory obligations, and business growth.
Primary Responsibilities
Cyber Risk Management and Governance
  • Establish and lead the US information security risk management framework across the affiliate
  • Define risk assessment methodologies, risk taxonomy, scoring models, reporting standards, and escalation criteria
  • Provide oversight and challenge of risk assessments performed by the GRC team
  • Ensure information security risks are clearly defined, consistently assessed, and aligned to Group methodology and enterprise risk expectations
  • Review material risks, treatment recommendations, mitigation strategies, and risk acceptance proposals before escalation
  • Drive risk-based prioritization of remediation activities, investment recommendations, and control improvement initiatives

Local Risk Coordinator and GRC Program Leadership
  • Serve as the senior US GRC leader responsible for coordinating information security risk governance across the affiliate
  • Act as the primary US liaison to Global Information Security for GRC-related risk, compliance, policy, and assurance activities
  • Establish governance routines, program cadences, reporting expectations, and execution standards for the US GRC function
  • Ensure alignment between US affiliate execution and Global risk management methodology, policy baselines, and governance expectations
  • Escalate material risks, systemic issues, overdue remediation, and governance concerns through US and Global governance channels

Governance, Policy and Control Assurance
  • Establish governance expectations for information security policies, standards, procedures, control requirements, and exception management
  • Sponsor the local information security policy lifecycle, ensuring alignment with Global baselines, US business requirements, and regulatory obligations
  • Define the control assurance approach used to evaluate control design, implementation, effectiveness, and maturity
  • Oversee control monitoring, compliance validation, gap analysis, and continuous improvement activities
  • Define and monitor KPIs and KRIs measuring policy adoption, control maturity, security posture, remediation progress, and governance effectiveness

Third-Party Risk and Enterprise Risk Integration
  • Establish the strategic direction for third-party information security risk management across the US vendor ecosystem
  • Define governance requirements, risk acceptance criteria, assessment standards, and escalation paths for third-party engagements
  • Partner with Procurement, Legal, Privacy, IT, and business stakeholders to ensure vendor security risks are appropriately assessed and managed
  • Oversee integration of third-party security risk into enterprise risk management, procurement processes, contractual reviews, and business decision making
  • Drive cross-domain alignment across Information Security, IT, Legal, Privacy, Procurement, Quality, and business functions

Audit, Compliance and Assurance Oversight
  • Oversee information security audit readiness across internal audits, external audits, regulatory engagements, and assurance activities
  • Establish governance over evidence collection, control validation, audit response, remediation tracking, and management reporting
  • Ensure audit findings, compliance gaps, and control deficiencies are translated into clear risk treatment plans with defined owners, timelines, and measurable outcomes
  • Partner with Internal Audit, Quality, Legal, Privacy, and Global Information Security to support assurance activities and regulatory expectations

Executive Engagement and Cross-Functional Influence
  • Act as a trusted advisor on information security governance, risk, compliance, and assurance matters
  • Translate complex information security risks into business, operational, regulatory, financial, and reputational impact
  • Deliver executive-level reporting on information security risk posture, governance maturity, compliance status, control effectiveness, and remediation progress
  • Support governance committees, leadership forums, business reviews, and strategic planning discussions with clear risk-based recommendations
  • Represent US GRC priorities in Global information security and enterprise risk forums, influencing alignment where appropriate

Organizational Leadership and Capability Building
  • Lead and develop the US Information Security Governance Risk and Compliance function
  • Manage GRC managers, analysts, contractors, consultants, managed service providers, and supporting resources
  • Define the GRC organizational structure, operating procedures, quality standards, workforce strategy, and capability development roadmap
  • Build scalable and repeatable GRC processes aligned to information security maturity objectives and organizational growth
  • Identify opportunities to improve efficiency through automation, process standardization, documentation quality, tooling, and operating model maturity

Education and Required Skills
  • Minimum of 8+ years of experience in information security GRC, IT risk management, cybersecurity, compliance, audit, security operations, or related disciplines
  • Minimum of 3+ years in a leadership role with responsibility for program ownership, people leadership, functional leadership, or management of managers
  • Bachelor's degree preferred in Cybersecurity, Information Technology, Information Systems, Business, Risk Management, or a related field
  • Deep expertise in information security risk frameworks and governance models, including NIST CSF 2.0, ISO 27001, PCI, SOX, FAIR, or similar methodologies
  • Experience leading policy governance, third-party risk management, compliance oversight, audit readiness, control assurance, and remediation governance programs
  • Strong executive communication skills with the ability to influence senior stakeholders in a global, matrixed organization
  • Relevant certifications such as CISSP, CISM, CRISC, CISA, CGRC, FAIR, or equivalent preferred

Travel and Location
  • Onsite in Boston preferred 1-2 days hybrid; Remote considered with occasional travel to Boston
  • Estimated travel required: 5-10%

Servier's Commitment
Servier is committed to modeling diversity, equity, and inclusion within the industry. We are dedicated to fostering an environment that maintains equitable treatment for all and we welcome applicants who are passionate, committed, and innovative individuals. We encourage candidates to apply to our open roles as we are always willing to consider experiences and skills beyond what is listed in the job description.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
Salary Range
The salary range for this role is $179,000-$212,000. An employee's pay position within the salary range will be based on several factors including, but not limited to, relevant education, qualifications, certifications, experience, skills, geographic location, performance, and business or organizational needs. We may ultimately pay more or less than the posted range, and the range may be modified in the future. Employees in this position are also eligible for Short-Term and Long-Term incentive programs. Servier also offers a competitive and comprehensive benefits package that includes benefits such as medical, dental, vision, flexible time off (Servier provides unlimited sick time and flex time, and does not accrue time off), 401(k), life and disability insurance, recognition programs among other great benefits (all benefits are subject to eligibility requirements). For more information on our benefits, please visit this link.

Apply