Sr Enterprise Risk Analyst (Remote)

First American•Fort Mill, SC

2d•$92,300 - $100,000•Remote

About The Position

The Senior Enterprise Risk Analyst supports ServiceMac’s Enterprise Risk Management program by identifying, assessing, monitoring, and reporting on risks associated with mortgage subservicing operations and the achievement of strategic objectives. The position is seated within the second line of defense, providing independent risk analysis, oversight, and constructive challenge to the business owners responsible for managing risks and implementing corrective actions. The role also maintains and enhances risk documentation, methodologies, procedures, job aids, and tools that promote consistent and effective risk management practices.

Requirements

Bachelor’s degree in business, accounting or finance, or equivalent work experience
5+ years of financial services experience, including enterprise risk, operational risk, third-party risk, compliance risk, controls, or related risk-management experience. Banking or mortgage servicing experience is strongly preferred.
Experience conducting risk assessments, evaluating internal controls, analyzing business processes, and documenting findings and recommendations.
Demonstrated knowledge of enterprise and operational risk management principles, including inherent and residual risk, control effectiveness, risk indicators, risk appetite, and issue remediation.
Strong analytical and problem-solving skills, with the ability to evaluate information from multiple sources, identify patterns, and develop practical recommendations.
Ability to interpret regulatory requirements, industry standards, and internal procedures and assess their relevance to business processes and controls.
Strong written and verbal communication skills, including the ability to present complex findings clearly and collaborate effectively across business functions.
Ability to prioritize effectively and manage multiple assignments independently, meet deadlines, and handle confidential information appropriately.
Self-directed, accountable, and able to operate effectively with limited supervision with strong communication, interpersonal, relationship-building and teamwork skills
Working knowledge of risk management practices, including risk identification, assessment, controls, mitigation, monitoring, remediation, and reporting
Familiarity with ERM frameworks such as COSO ERM, ISO 31000, or similar frameworks
Proven ability to evaluate risk mitigation strategies, challenge proposed corrective actions, and support effective risk and process improvement initiatives
Ability to establish and maintain effective working relationships at the senior management level across functional groups and business units while providing oversight of existing processes and mitigating risk against future firm impact
Strong stakeholder management, organizational, analytical, and consultative skills
Skilled at balancing long-term projects with immediate, high-priority issues in fast-paced environments and escalate risk matters when appropriate
Proficient in Microsoft Office and capable of effectively using approved AI-enabled tools to enhance research, analyze information, identify risk trends, and improve the quality and efficiency of risk reporting and deliverables.

Nice To Haves

Banking or mortgage servicing experience is strongly preferred.

Responsibilities

Plan and perform enterprise, operational, and third-party risk assessments, including process walkthroughs, risk identification, control evaluation, and assessment of inherent and residual risk.
Document conclusions, challenge risk assessments where appropriate, and recommend risk responses consistent with established methodologies and risk appetite.
Evaluate mortgage servicing risks and controls. Review servicing processes, procedures, and supporting systems to identify control gaps, operational inefficiencies, and potential borrower, client, operational, financial, regulatory, or reputational impacts. Evaluate control design and, where within ERM's scope, independently assess control execution and effectiveness through documentation review, evidence analysis, monitoring, and risk-based testing.
Assess regulatory and procedural alignment. Collaborate with Compliance, Legal, and business stakeholders to evaluate whether processes and controls address applicable federal and state regulatory requirements, industry standards, investor and agency requirements, and internal policies and procedures.
Analyze and report risk information. Review operational data, KRIs, incidents, losses, complaints, fraud events, audit and examination findings, control exceptions, and business changes to identify trends, recurring issues, and emerging risks. Prepare clear, accurate reports and presentations that communicate findings, risk implications, and recommended actions to management.
Support risk issue management and remediation. Work with business owners to identify root causes and evaluate the adequacy of proposed corrective actions. Monitor remediation progress, escalate overdue or significant issues, and assess supporting evidence to validate corrective actions, as assigned.
Maintain risk inventories and assessment records. Update the enterprise risk register, risk and control documentation, assessment results, and issue records within the company’s risk management tools. Promote consistent documentation, accurate risk information, and clearly identified business ownership.
Evaluate third-party and business-change risks. Assess risks associated with service providers, new or changing client requirements, technology implementations, process changes, and significant business initiatives. Identify potential control gaps and recommend appropriate mitigation and monitoring activities.
Maintain procedures and tools. Develop and update Enterprise Risk Management procedural manuals, job aids, assessment templates, reporting tools, and related documentation. Recommend improvements that strengthen consistency, usability, and efficiency.
Collaborate with business stakeholders. Provide guidance on risk assessment methods, control documentation, and issue escalation. Communicate concerns constructively, support informed decision-making, and maintain independent judgment.