[Hiring] Senior Enterprise Risk Analyst @First American

Role Description

The Senior Enterprise Risk Analyst supports ServiceMac’s Enterprise Risk Management program by identifying, assessing, monitoring, and reporting on risks associated with mortgage subservicing operations and the achievement of strategic objectives. The position is seated within the second line of defense, providing independent risk analysis, oversight, and constructive challenge to the business owners responsible for managing risks and implementing corrective actions. The role also maintains and enhances risk documentation, methodologies, procedures, job aids, and tools that promote consistent and effective risk management practices.

• Plan and perform enterprise, operational, and third-party risk assessments, including process walkthroughs, risk identification, control evaluation, and assessment of inherent and residual risk.
• Document conclusions, challenge risk assessments where appropriate, and recommend risk responses consistent with established methodologies and risk appetite.
• Evaluate mortgage servicing risks and controls. Review servicing processes, procedures, and supporting systems to identify control gaps, operational inefficiencies, and potential borrower, client, operational, financial, regulatory, or reputational impacts.
• Assess regulatory and procedural alignment. Collaborate with Compliance, Legal, and business stakeholders to evaluate whether processes and controls address applicable federal and state regulatory requirements, industry standards, investor and agency requirements, and internal policies and procedures.
• Analyze and report risk information. Review operational data, KRIs, incidents, losses, complaints, fraud events, audit and examination findings, control exceptions, and business changes to identify trends, recurring issues, and emerging risks.
• Support risk issue management and remediation. Work with business owners to identify root causes and evaluate the adequacy of proposed corrective actions.
• Maintain risk inventories and assessment records. Update the enterprise risk register, risk and control documentation, assessment results, and issue records within the company’s risk management tools.
• Evaluate third-party and business-change risks. Assess risks associated with service providers, new or changing client requirements, technology implementations, process changes, and significant business initiatives.
• Maintain procedures and tools. Develop and update Enterprise Risk Management procedural manuals, job aids, assessment templates, reporting tools, and related documentation.
• Collaborate with business stakeholders. Provide guidance on risk assessment methods, control documentation, and issue escalation.

Qualifications

• Bachelor’s degree in business, accounting or finance, or equivalent work experience.
• 5+ years of financial services experience, including enterprise risk, operational risk, third-party risk, compliance risk, controls, or related risk-management experience. Banking or mortgage servicing experience is strongly preferred.
• Experience conducting risk assessments, evaluating internal controls, analyzing business processes, and documenting findings and recommendations.
• Demonstrated knowledge of enterprise and operational risk management principles, including inherent and residual risk, control effectiveness, risk indicators, risk appetite, and issue remediation.
• Strong analytical and problem-solving skills, with the ability to evaluate information from multiple sources, identify patterns, and develop practical recommendations.
• Ability to interpret regulatory requirements, industry standards, and internal procedures and assess their relevance to business processes and controls.
• Strong written and verbal communication skills, including the ability to present complex findings clearly and collaborate effectively across business functions.
• Ability to prioritize effectively and manage multiple assignments independently, meet deadlines, and handle confidential information appropriately.

Requirements

• Self-directed, accountable, and able to operate effectively with limited supervision with strong communication, interpersonal, relationship-building and teamwork skills.
• Working knowledge of risk management practices, including risk identification, assessment, controls, mitigation, monitoring, remediation, and reporting.
• Familiarity with ERM frameworks such as COSO ERM, ISO 31000, or similar frameworks.
• Proven ability to evaluate risk mitigation strategies, challenge proposed corrective actions, and support effective risk and process improvement initiatives.
• Ability to establish and maintain effective working relationships at the senior management level across functional groups and business units while providing oversight of existing processes and mitigating risk against future firm impact.
• Strong stakeholder management, organizational, analytical, and consultative skills.
• Skilled at balancing long-term projects with immediate, high-priority issues in fast-paced environments and escalate risk matters when appropriate.
• Proficient in Microsoft Office and capable of effectively using approved AI-enabled tools to enhance research, analyze information, identify risk trends, and improve the quality and efficiency of risk reporting and deliverables.

Benefits

• Comprehensive benefits package including medical, dental, vision, 401k, PTO/paid sick leave.
• Employee stock purchase plan.