Risk Analyst

i2c Inc.; Lahore; On-site; PKR 1,800,000 - 3,200,000; Full time

Job summary

i2c Inc. in Lahore, Pakistan, is seeking a Risk Assessment Executive to support enterprise risk management activities.

The role involves coordinating risk assessments with department heads, maintaining the risk register in the GRC platform, and assisting with risk monitoring and reporting across the organization. You will work with Assurance Champions and Risk Owners to ensure consistent scoring, timely input, and proper categorization of risks.

Qualifications

• Bachelor’s degree in business, Finance, Risk Management, or a related field.
• 3–5 years of enterprise risk management experience in a related field.

Responsibilities

• Assist in execution of risk assessments across all departments.
• Coordinate risk assessment sessions with Department Heads and Assurance Champions.
• Document risk findings, control assessments, and risk response plans in the GRC platform.
• Maintain and update enterprise risk register in the GRC platform.
• Track risk response plans and actions with Risk Owners.
• Perform periodic register reviews for gaps in coverage.
• Support collection and reporting of key risk data on a regular cycle.
• Assist with administration and upkeep of the risk management platform.
• Prepare materials for risk governance meetings and status reports.
• Coordinate ERM program calendar and stakeholder updates.

Skills

Enterprise risk management

GRC platforms

Project management

Data analysis

Communication skills

Cross-functional coordination

Independent work

Risk scoring

Attention to detail

Education

Bachelor's degree in business/finance/risk management

Tools

GRC platforms (RSA Archer, ServiceNow GRC, MetricStream)

Job description

Job Description:

Risk Assessment Execution

• Assist in the execution of risk assessments across all departments in coordination with the VP, Compliance & Risk Management.
• Facilitate risk assessment sessions with Department Heads and Assurance Champions, using the approved risk scoring methodology.
• Document risk findings, control assessments, and risk response plans in the GRC platform, ensuring all entries are complete, consistently scored, and properly categorized.
• Coordinate with Assurance Champions in each department to schedule assessments, gather required input, and follow up on outstanding items.

Risk Register Maintenance

• Maintain and update the unified enterprise risk register in the GRC platform, ensuring all entries reflect current risk status, control effectiveness ratings, and risk owner assignments.
• Process newly identified risks by classifying, scoring, and routing them for appropriate review prior to inclusion in the risk register.
• Track risk response plans and action items; follow up with Risk Owners on progress and update risk register entries accordingly.
• Perform periodic register reviews to identify stale entries, scoring inconsistencies, or gaps in coverage.

Risk Monitoring and Reporting

• Support the collection and tracking of key risk data from across the organization on a regular reporting cycle.
• Maintain risk monitoring data in the GRC platform.
• Maintain risk monitoring documentation and support preparation of periodic risk status reporting.
• Coordinate with departments to define and confirm risk monitoring metrics and data sources

Risk Management Platform Support

• Assist with the administration and upkeep of the risk management platform, including register structure, user access, and workflow configuration.
• Support the development and maintenance of risk dashboards, reporting templates, and assessment workflows.
• Troubleshoot platform issues and liaise with vendor support as needed.
• Support onboarding of stakeholders to the risk management platform as needed.

Reporting and Documentation

• Support preparation of risk committee reporting materials, including risk register status, monitoring summaries, and action plan tracking.
• Prepare supporting materials for risk governance meetings, including data summaries and risk rating updates.
• Maintain accurate records of risk register changes, assessment results, and escalation decisions.

Program Administration

• Maintain the ERM program calendar and coordinate scheduling across departments.
• Coordinate logistics for risk assessment sessions and stakeholder engagement activities.
• Support leadership tracking of ERM program progress and preparing periodic status updates for internal stakeholders.
• Contribute to continuous improvement of the ERM program as it develops and matures.
• Support development and delivery of risk awareness training for Department Heads, Risk Owners, and Assurance Champions.
• Experience with GRC platforms preferred; familiarity with risk register management, dashboard reporting, and workflow configuration in any major GRC platform (e.g., RSA Archer, ServiceNow GRC, MetricStream, or similar) considered.
• Experience executing risk assessments and maintaining risk registers in a structured ERM or operational risk program.
• Experience supporting or contributing to the build-out of a risk assurance program, including stakeholder engagement, risk register development, or monitoring and reporting activities, is a plus.
• Familiarity with COSO ERM (2017) and/or ISO 31000:2018 frameworks preferred; formal training or certification a plus.
• Experience in fintech, payments, or a technology-driven financial services environment strongly preferred; prior exposure to a SaaS, card processing, or third-party service provider model is a plus. Candidates from regulated technology, Big 4 risk or IT audit, or adjacent industries with a compliance or risk function will also be considered.
• CRMA (Certification in Risk Management Assurance), PMI-RMP, or equivalent professional certification is a plus.
• Strong data organization and reporting skills; ability to compile, summarize, and present risk data clearly for management audiences.

What we are Looking For:

• Education: Bachelor’s degree in business, Finance, Risk Management, or a related field
• Experience: 3-5 Years of experience in enterprise risk management, operational risk, compliance, or a related field.

Skills

• Working knowledge of enterprise risk management principles, including risk assessment methodologies and risk register frameworks.
• Familiarity with GRC platforms — specifically the ability to navigate and maintain risk registers, support dashboard reporting, and assist with workflow management.
• Strong organizational and project management skills; ability to manage multiple concurrent workstreams, track deliverables, and meet deadlines independently.
• Strong analytical capabilities with attention to detail, including data integrity, trend analysis, and risk scoring consistency.
• Effective written and verbal communication skills; ability to interact professionally with Department Heads, Assurance Champions, and senior leadership.
• Collaborative working style; comfortable coordinating across multiple departments and functions without direct authority.
• Ability to work independently with limited oversight; self-directed and proactive in identifying and resolving issues.
• Intellectual curiosity and willingness to learn.

Location : Lahore (Onsite)