Sr. Analyst-Enterprise Risk Management - Project Manager

Lowe's Home Centers•Mooresville, NC

3d•Onsite

About The Position

This position is based at our headquarters in Mooresville, North Carolina. Our corporate office is a space where you can collaborate and do your best work. Take a walk, grab a bite (or a cup of coffee), work out or get a check-up – we invest in you so you can find your inspiration. The Senior Analyst, Enterprise Risk Management (ERM) supports the execution and continuous improvement of the organization's ERM program. This role partners with business leaders across the enterprise to execute key ERM activities, maintain risk information, develop meaningful reporting, and provide analysis that supports risk-informed decision making. Working closely with ERM leadership, this role coordinates recurring ERM activities, including enterprise risk assessments, reporting, mitigation tracking, governance processes, and stakeholder communications. The role applies strong analytical skills, business judgment, and cross-functional collaboration to maintain an accurate view of the organization's enterprise risk profile and support risk informed decision-making.

Requirements

Bachelor’s degree in business, finance, economics, risk management or related or equivalent years of experience in lieu of education requirement, if applicable
5 years of experience in legal, compliance, risk management or related function
2 years of experience supporting ERM activities, including risk assessments, risk reporting, mitigation tracking, risk governance, or maintaining enterprise risk information
1 year of experience providing indirect leadership, including coordinating cross-functional initiatives, facilitating stakeholder activities, managing deliverables, and driving progress across a risk management program
Experience developing executive-level reports, dashboards, presentations, or briefing materials for senior leaders or governance committees
Demonstrated ability to analyze risk data, identify trends, and translate complex information into clear, actionable insights
Experience partnering with business leaders and cross-functional stakeholders to gather information, improve data quality, and support risk-informed decision-making

Nice To Haves

Experience in governance, risk and compliance (GRC) or integrated risk management (IRM) tools

Responsibilities

Support the execution of the ERM program and recurring risk governance activities to enable consistent oversight and risk-informed decision making across the enterprise.
Support the execution of enterprise and business-unit risk assessments by coordinating activities, monitoring progress, and collaborating with risk owners and business stakeholders to ensure timely, complete, and actionable risk assessment results.
Maintain the enterprise risk register and supporting risk information within the organization’s GRC platform, ensuring risk information, ownership, mitigation activities, and documentation remain current and complete to provide a reliable view of the organization’s risk profile.
Develop and maintain executive dashboards, key risk indicators, and recurring risk reporting for leadership and governance committees to provide timely visibility into risk exposure, trends, and mitigation progress.
Analyze risk trends, emerging risks, and business information to support enterprise risk assessments, leadership reporting, and risk-informed decision making.
Develop presentations, reports, training materials, and other program deliverables that support stakeholder communication, ERM governance, and enterprise risk management activities.
Track mitigation plans, action items, and key risk initiatives, following up with stakeholders to monitor progress and identify issues requiring escalation.
Partner with business units to improve the quality and consistency of risk data, documentation, and reporting.
Support the ongoing enhancement of ERM methodologies, processes, and other capabilities that advance the maturity of the ERM program.
Monitor the external risk environment, including industry developments, regulatory changes, and emerging risks to identify potential impacts to the organization's risk profile.