Jobs › Risk Analyst
Risk Analyst Jobs
Risk Analyst roles across governance, risk, compliance, and AI governance.
Open Risk Analyst roles (6)
Senior Model Risk Analyst
Enterprise Risk Analyst
Insider Risk Analyst - SkillBridge Intern
Staff ML Risk Analyst
Foreign Investment Risk Analyst
Risk Analyst (Margin Models)
About the Risk Analyst role
The Risk Analyst identifies, measures, and tracks the risks a business faces, then helps leadership decide what to do about them. Analysts build and maintain risk assessments, monitor key risk indicators, and support the controls that keep exposure within appetite. As organizations adopt AI, model risk and algorithmic risk are fast-growing parts of the job.
What a Risk Analyst does
- Build and maintain risk assessments and risk registers
- Monitor key risk indicators and report on trends
- Support the design and testing of risk controls
- Analyze loss events and near misses for root cause
- Help quantify operational, technology, and model risk
- Track emerging risks, including AI and algorithmic risk
Core skills
- Analytical thinking and comfort with quantitative data
- Understanding of risk frameworks and risk appetite
- Clear reporting and data visualization
- Attention to detail and intellectual honesty
- Curiosity about how things fail
- Basic grasp of IT and security risk
Certifications that help
Train for these through the GRC Careers certification guides.
Where it sits on the career ladder
Risk Analyst (Entry) · Risk Manager →
How to break into this role
Risk Analyst roles favor people who are comfortable with data and structured thinking. Backgrounds in finance, data, audit, or operations transfer well. Fluency with a risk framework such as COSO ERM or ISO 31000 gives you a credible start, and quantitative comfort sets you apart.
BLS put the 2024 median at $78,420. In 2026, market trackers show averages from roughly $99,000 to $120,000, with the top quartile above $160,000. Financial centers and senior governance roles sit at the top of that range.
Sources: BLS, 2024 median
FAQ
Yes. It is one of the most common entry points into governance, risk, and compliance, and it builds skills that transfer into management and specialized tracks like model risk.
Model risk is the risk that a model produces wrong or misused outputs. As organizations deploy AI, analyzing and monitoring model and algorithmic risk has become a fast-growing part of the risk function.
CRISC is the most directly relevant from the risk side; CISA and CGEIT also help for technology and governance risk. Many start with framework knowledge while building the experience hours certs require.
All GRC jobs · Job alerts