Risk Analyst

Panza Jobs; Ciudad de México; Presencial; MXN 450.000 - 800.000; Jornada completa

Descripción de la vacante

The Cervantes Group seeks a Risk Analyst to support IT risk management, third-party vendor risk assessments, and monitoring/reporting. You will oversee onboarding of third parties that require expedited or sensitive handling and present findings to executives with strong communications.

Responsibilities include tracking risk indicators, aligning with risk frameworks, and facilitating training across business lines to ensure compliance and timely remediation.

Formación

• Bachelor’s Degree is required.
• 3+ years’ banking experience or relevant industry experience in Audit, Technology, Risk, Vendor Risk Analysis, Operations, or public accounting.
• Deep knowledge in Third-Party Risk Management (TPRM), TPRM Metrics Design and Implementation, and TPRM Policy and Procedures development.

Responsabilidades

• Ensure transparency of business results, finance and processes and track goals accomplishment; collect and provide data to managers.
• Challenge stratification of third-party risk-based assessments and refresh regularly to allocate resources to high-risk relationships.
• Monitor inventory of third-party relationships including outsourcing partners, suppliers of goods/services, and fourth parties; track exceptions to policy.
• Ensure awareness of risk frameworks, policies, and standards across the business line and with SLoD.
• Facilitate training and two-way communications to provide risk-framework awareness.
• Monitor Key Risk Indicators and report negative trends; maintain risk tolerance within appetite.
• Liaise with the Business Line for exam activities and regulatory reviews.

Conocimientos

Third-Party Risk Management

Vendor Risk Analysis

Agile/Scrum

Project Governance

Educación

Bachelor’s degree

Descripción del empleo

Risk Analyst The Cervantes Group August 17th, 2026

remote

Jr Data Analyst The Cervantes Group July 28th, 2026

IT Project Manager The Cervantes Group July 28th, 2026

Programmer Analyst The Cervantes Group July 28th, 2026

Business Systems Analyst, Core Banking Platform The Cervantes Group July 28th, 2026

Mexico

remote

System Application Analyst The Cervantes Group July 13th, 2026

Jr IT Help Desk Administrator The Cervantes Group June 12th, 2026

Integration Architect The Cervantes Group June 12th, 2026

Network Engineer The Cervantes Group June 12th, 2026

remote

CX Business Analyst The Cervantes Group May 11th, 2026

Talent Acquisition Specialist, Global Operations The Cervantes Group April 10th, 2026

Jr. IT Infrastructure Administrator The Cervantes Group April 9th, 2026

remote mid level Ciudad de México, Mexico

Role

The Risk Analyst will be supporting and driving various activities relating to IT risk management, 3 rd party vendor risk-based assessments monitoring and reporting. This person will be monitoring inventory of third-party relationships to develop teams to oversee and facilitate onboarding of 3 rd- Parties that require expedition or additional sensitivity based on services provided. The ideal person for this role will have experience presenting to executives and upper management and excellent communication skills.

Job Duties:

• Ensure transparency of business results, finance and processes and track goals accomplishment, collect and process data and provides managers with all necessary company management data and information.
• Challenge stratification of third-party risk-based assessments and refreshed regularly to efficiently allocate resources to relationships posing the highest risk.
• Monitor inventory of third-party relationships including outsourcing partners, suppliers of goods and services (including third-party administrators), distribution partners, entity relations (associates, affiliates, joint ventures) and important fourth parties (sub-contractors).
• Ensure capture of the full lifecycle and range of third-party relationships, identify, monitor and track exceptions to policy.
• Ensure awareness in the Business Line of risk frameworks, policies and standards.
• Maintain two-way communications with SLoD (Second Line of Defense) and facilitate training for Business Lines to provide awareness of risk frameworks, policies, programs, processes, etc.
• Facilitate Business Line awareness of and adherence to risk frameworks, policies, and standards in addition to reporting and escalating exceptions and facilitate Business Line corrective actions.
• Continuously monitor all sources of risk existing within the Business Line and externally.
• Monitor Key Risk Indicators and report on negative/adverse trends in Business Line. Monitor risk profile to maintain tolerance within Risk Appetite.
• Engage and hold Business Line process owners accountable to identify and assess risks. Support Business Lines in risk identification (e.g. NPBA, change management, etc.) Ensure all issues (Self-Identified, IA, Credit Risk Review or Regulatory) pertaining to the Business Line are resolved within established timelines.
• Liaison with the Business Line for all exam related activities including regulatory, Internal Audit and Credit Risk Review.

Education & Requirements:

• Bachelor’s Degree is required
• 3+ years’ banking experience or relevant industry experience, preferably in areas such as Audit, Technology, Risk, Vendor Risk Analysis, Operations, and/or public accounting
• Must have deep knowledge in key domains of Third-Party Risk Management (TPRM), TPRM Metrics Design and Implementation and TPRM Policy and Procedures development
• Experience in Vendor Management, Risk Management, Internal Controls, Auditing, relevant line of business experience and/or legal or regulatory experience
• Proven success within Agile/Scrum environments, Project Management Office governance procedures within digital project settings

Plus:

• Industry certifications are preferred, such as CRISC, CGEIT, CISA