Senior Risk Analyst

Victoria's Secret & Co.; Reynoldsburg (OH); On-site; USD 90,000 - 130,000; Full time

Job summary

Victoria's Secret & Co. seeks a Senior Risk Analyst to support Enterprise Risk Management (ERM) and Business Continuity Management (BCM) programs, assisting with risk assessments, BIAs, and plan development.

You will develop reporting and analytics that inform management and Board-level decisions, driving consistency and accountability across the organization. This role partners with Internal Audit, Compliance, and other assurance functions, maintains risk registers and dashboards, and supports

Qualifications

• Experience supporting ERM programs and risk assessments.
• Ability to develop executive risk reporting and dashboards.
• Experience with BCM planning and BIAs.
• Develop and maintain risk dashboards and metrics.

Responsibilities

• Support the maintenance and execution of the ERM program framework.
• Maintain ERM methodologies, risk assessment templates, scoring criteria, and supporting documentation.
• Support periodic reviews and enhancements of ERM processes to align with organizational needs and industry best practices.
• Facilitate enterprise risk assessments and assist risk owners with risk identification, evaluation, mitigation planning, and reporting.
• Monitor and track key risk indicators (KRIs) and risk mitigation activities.
• Develop and prepare executive-level and Board reporting materials, including risk dashboards.
• Coordinate with Internal Audit, Compliance, and other assurance functions to support risk assessments, issue remediation tracking, and reporting efforts.
• Facilitate and maintain Business Impact Analyses (BIAs) and support Business Continuity Plans (BCPs).
• Track remediation items and support tabletop exercises and after-action reviews.
• Develop dashboards, scorecards, and risk reporting metrics; identify trends and operational insights.

Skills

ERM risk assessment

Board reporting

Dashboards

Data analytics

KRIs tracking

Job description

Description

Your Role:

The Senior Risk Analyst will serve as a key contributor to the Enterprise Risk Management (ERM) and Business Continuity Management (BCM) programs by assisting with risk assessments, business continuity plan development and maintenance. In addition, this position will develop reporting and analytics that support management and Board-level decision-making. This role will help drive consistency, accountability, and program sustainability across the organization. This role will report directly to the Director of ERM and BCM.

Your Impact:

Enterprise Risk Management (ERM)

• Support the maintenance and execution of the ERM program framework.
• Maintain ERM methodologies, risk assessment templates, scoring criteria, and supporting documentation.
• Support periodic reviews and enhancements of ERM processes to align with organizational needs and industry best practices.
• Facilitate enterprise risk assessments and assist risk owners with risk identification, evaluation, mitigation planning, and reporting.
• Monitor and track key risk indicators (KRIs) and risk mitigation activities.
• Monitor emerging risks, industry trends, and regulatory developments; provide analysis and recommendations regarding potential impacts to the organization.
• Maintain risk registers and supporting documentation.
• Develop and prepare executive-level and Board reporting materials, including risk dashboards.
• Support risk governance activities, including committee meeting coordination, agenda development, and action item tracking.
• Coordinate with Internal Audit, Compliance, and other assurance functions to support risk assessments, issue remediation tracking, and reporting efforts.

Business Continuity & Resilience

• Facilitate and maintain Business Impact Analyses (BIAs) in partnership with business units.
• Analyze BIA results and recommend recovery priorities, dependencies, and resiliency improvements.
• Partner with business units to develop, update, and maintain Business Continuity Plans (BCPs).
• Establish processes for ongoing plan reviews, testing, and validation.
• Support and coordinate tabletop exercises and after-action reviews.
• Track remediation items resulting from testing and continuity assessments.
• Support ongoing administration of the enterprise Risk and Resiliency Program, including project tracking, milestone management, issue resolution, and status reporting.
• Support efforts to strengthen organizational risk awareness and a resiliency culture.

Data Analytics and Reporting

• Develop and maintain dashboards, scorecards, and risk reporting metrics.
• Utilize data analytics tools to identify trends, emerging risks, and operational insights.
• Automate recurring reports and improve reporting efficiency.