Risk Analyst

i2c Inc; Lahore; On-site; PKR 150,000 - 210,000; Full time

Job summary

i2c Inc. is seeking a Risk Management professional to drive enterprise risk assessments across departments, coordinating with the VP to follow the approved scoring methodology.

You will document findings, maintain the risk register, and ensure entries are properly categorized. Strong data, presentation, and stakeholder engagement skills are essential for reporting to senior leadership.

Qualifications

• Bachelor’s degree in business, Finance, Risk Management, or a related field.
• 3–5 years of enterprise risk management experience.
• Experience with GRC platforms and risk registers.
• Strong data organization and reporting skills.
• Excellent communication with senior leadership.

Responsibilities

• Assist in the execution of risk assessments across all departments in coordination with the VP, Compliance & Risk Management.
• Facilitate risk assessment sessions with Department Heads and Assurance Champions, using the approved risk scoring methodology.
• Document risk findings, control assessments, and risk response plans in the GRC platform, ensuring all entries are complete, consistently scored, and properly categorized.
• Coordinate with Assurance Champions in each department to schedule assessments, gather input, and follow up on outstanding items.
• Maintain and update the unified enterprise risk register in the GRC platform, ensuring all entries reflect current risk status, control effectiveness ratings, and risk owner assignments.

Skills

GRC platforms

Risk assessment

Stakeholder coordination

Data analysis

Documentation

Education

Bachelor’s degree in business, Finance, Risk Management

Tools

RSA Archer

ServiceNow GRC

MetricStream

Job description

• Assist in the execution of risk assessments across all departments in coordination with the VP, Compliance & Risk Management.
• Facilitate risk assessment sessions with Department Heads and Assurance Champions, using the approved risk scoring methodology.
• Document risk findings, control assessments, and risk response plans in the GRC platform, ensuring all entries are complete, consistently scored, and properly categorized.
• Coordinate with Assurance Champions in each department to schedule assessments, gather required input, and follow up on outstanding items.
• Maintain and update the unified enterprise risk register in the GRC platform, ensuring all entries reflect current risk status, control effectiveness ratings, and risk owner assignments.
• Process newly identified risks by classifying, scoring, and routing them for appropriate review prior to inclusion in the risk register.
• Track risk response plans and action items; follow up with Risk Owners on progress and update risk register entries accordingly.
• Perform periodic register reviews to identify stale entries, scoring inconsistencies, or gaps in coverage.

Risk Monitoring and Reporting

• Support the collection and tracking of key risk data from across the organization on a regular reporting cycle.
• Maintain risk monitoring data in the GRC platform.
• Maintain risk monitoring documentation and support preparation of periodic risk status reporting.
• Coordinate with departments to define and confirm risk monitoring metrics and data sources.
• Assist with the administration and upkeep of the risk management platform, including register structure, user access, and workflow configuration.
• Support the development and maintenance of risk dashboards, reporting templates, and assessment workflows.
• Troubleshoot platform issues and liaise with vendor support as needed.
• Support onboarding of stakeholders to the risk management platform as needed.

Reporting and Documentation

• Support preparation of risk committee reporting materials, including risk register status, monitoring summaries, and action plan tracking.
• Prepare supporting materials for risk governance meetings, including data summaries and risk rating updates.
• Maintain accurate records of risk register changes, assessment results, and escalation decisions.

Program Administration

• Maintain the ERM program calendar and coordinate scheduling across departments.
• Coordinate logistics for risk assessment sessions and stakeholder engagement activities.
• Support leadership tracking of ERM program progress and preparing periodic status updates for internal stakeholders.
• Contribute to continuous improvement of the ERM program as it develops and matures.
• Support development and delivery of risk awareness training for Department Heads, Risk Owners, and Assurance Champions.
• Experience with GRC platforms preferred; familiarity with risk register management, dashboard reporting, and workflow configuration in any major GRC platform (e.g., RSA Archer, ServiceNow GRC, MetricStream, or similar) considered.
• Experience executing risk assessments and maintaining risk registers in a structured ERM or operational risk program.
• Experience supporting or contributing to the build-out of a risk assurance program, including stakeholder engagement, risk register development, or monitoring and reporting activities, is a plus.
• Familiarity with COSO ERM (2017) and/or ISO 31000:2018 frameworks preferred; formal training or certification a plus.
• Experience in fintech, payments, or a technology-driven financial services environment strongly preferred; prior exposure to a SaaS, card processing, or third‑party service provider model is a plus. Candidates from regulated technology, Big 4 risk or IT audit, or adjacent industries with a compliance or risk function will also be considered.
• CRMA (Certification in Risk Management Assurance), PMI-RMP, or equivalent professional certification is a plus.
• Strong data organization and reporting skills; ability to compile, summarize, and present risk data clearly for management audiences.

What we are Looking For:

• Education: Bachelor’s degree in business, Finance, Risk Management, or a related field
• Experience: 3-5 Years of experience in enterprise risk management, operational risk, compliance, or a related field.

Skills

• Working knowledge of enterprise risk management principles, including risk assessment methodologies and risk register frameworks.
• Familiarity with GRC platforms — specifically the ability to navigate and maintain risk registers, support dashboard reporting, and assist with workflow management.
• Strong organizational and project management skills; ability to manage multiple concurrent workstreams, track deliverables, and meet deadlines independently.
• Strong analytical capabilities with attention to detail, including data integrity, trend analysis, and risk scoring consistency.
• Effective written and verbal communication skills; ability to interact professionally with Department Heads, Assurance Champions, and senior leadership.
• Collaborative working style; comfortable coordinating across multiple departments and functions without direct authority.
• Ability to work independently with limited oversight; self‑directed and proactive in identifying and resolving issues.
• Intellectual curiosity and willingness to learn.