Principal Risk Analyst (Hybrid)

First American•Santa Ana, CA

1d•$97,700 - $130,300•Hybrid

About The Position

First American is seeking a Principal Risk Analyst to serve as a senior risk expert and strategic partner in strengthening our enterprise risk and control environment. An ideal candidate has deep risk management expertise, strong analytical and problem-solving skills, and the ability to navigate complex business and regulatory challenges. This highly visible role will lead to complex risk assessments, identify emerging risks and control gaps, perform root cause analysis, and develop actionable recommendations that influence business decisions and strengthen operational effectiveness. We’re looking for someone who can work independently, provide thoughtful challenges, influence stakeholders across the organization, and help shape and mature risk management practices while driving meaningful, sustainable improvements. This is a hybrid position requiring in-office attendance three days per week: Monday, Tuesday, and Thursday.

Requirements

Bachelor’s degree in Business, Accounting, Finance, Risk Management, or a related field, or equivalent education and experience.
8+ years of relevant experience in financial services, enterprise risk management, audit, compliance, business analysis, or related disciplines, including 3+ years of direct risk management experience.
Advanced knowledge of ERM practices, including risk identification and assessment, controls, KRIs, risk appetite, mitigation, monitoring, issue management, and governance.
Experience applying recognized risk frameworks such as COSO ERM, ISO 31000, or similar frameworks.
Demonstrated experience leading enterprise risk reporting and synthesizing complex information across multiple business units for senior management and governance audiences.
Strong analytical and problem-solving skills with the ability to evaluate complex and interconnected risks and develop fact-based recommendations.
Demonstrated ability to provide effective review and challenge, exercise independent judgment, influence stakeholders, and appropriately escalate significant risk matters.
Strong data analysis and visualization skills with the ability to translate quantitative and qualitative information into meaningful risk insights.
Ability to independently lead complex assignments, manage competing priorities, and drive improvements across processes and programs.
Strong executive communication, presentation, facilitation, and relationship-management skills with the ability to influence across our business and functional areas.
Excellent organizational skills, attention to detail, and commitment to data integrity and quality.

Nice To Haves

Title insurance, mortgage, settlement services, banking, insurance, or another regulated financial services industry.
Risk Appetite frameworks, Top Risk reporting, KRIs, thresholds, breach management, and executive or governance-level risk reporting.
Working within a second-line risk function and providing independent review and challenge to business leaders and risk owners.
Leading complex risk assessments, process reviews, workshops, and remediation activities with management-level stakeholders.
Designing or enhancing ERM methodologies, governance practices, reporting processes, procedures, and supporting tools.
Automating or standardizing risk reporting, data collection, analytics, and other ERM processes.
Power BI, Power Query, or similar data analysis and visualization tools.
GRC platforms such as AuditBoard, ServiceNow, or similar systems, including implementation, configuration, or enhancement.
Professional certifications in risk management, audit, compliance, controls, or financial services.

Responsibilities

Serve as a senior subject matter expert and strategic advisor on enterprise and operational risk, providing guidance on complex and emerging risks, controls, and mitigation strategies.
Own the end-to-end ERM reporting cycle, including Risk Appetite metrics, Top Risk scorecards, breach reporting, and other executive and governance reporting.
Lead the collection, validation, and analysis of enterprise risk data, identifying trends, emerging risks, changes in exposure, and matters requiring management attention.
Translate complex risk information into actionable insights through executive-ready dashboards, scorecards, presentations, and reporting for senior management and governance committees.
Lead complex risk assessments and process reviews to evaluate risks, controls, dependencies, accountabilities, and opportunities to strengthen the control environment.
Partner with business leaders and risk owners while providing effective second-line review and challenge of risk assessments, mitigation strategies, issues, and management action plans.
Monitor significant risk issues and remediation activities, challenge progress and supporting evidence, and escalate material concerns to ERM leadership.
Drive enhancements to ERM methodologies, processes, reporting, analytics, governance, GRC technology, and tools, including opportunities for standardization and automation.
Independently lead complex, high-priority initiatives requiring significant judgment, cross-functional coordination, and management of competing priorities.
Provide ERM expertise, guidance, knowledge sharing, and functional support to business partners and less experienced team members.