Senior Risk Analyst, Enterprise Risk Management

Location:

Job Summary

This role supports a Director in the Enterprise Risk Management function, including execution and facilitation of enterprise risk programs, GRC strategy, AI‑enabled risk transformation, forward‑looking risk reporting, and special projects for the office of the Chief Risk Officer. The role operates across disciplines including program execution, analytics, transformation, and executive communication; driving effectiveness and efficiency while supporting modernization across risk processes.

Essential Functions

• Second Line of Defense Business Risk Team Support of ERM Risk Program Execution – Provide 2LOD Business Risk Team support to 2LOD teams through facilitation and execution of risk activities owned within the 2LOD including: risk and control self‑assessment (RCSA), business unit risk profile coordination, issues management, third party risk management, and regulatory change management. Assists the Director with the design and execution of ongoing risk monitoring routines and reporting within 2LOD.
• Forward‑Looking Risk Indicators & Board Reporting - Contribute to the quarterly refresh and enhancement of the CRO Forward‑Looking Indicator Dashboard, including data sourcing, trend analysis, construction, and review of executive‑ready visualizations for Board Risk Management Reports and CRO regulatory update materials.
• AI Integration for Risk Management - Support the design, prototyping, testing, and deployment of GenAI use cases for risk workflows, including tool design, prompt engineering, output validation, and human‑in‑the‑loop governance aligned to enterprise AI Risk Management standards.
• Strategic Risk Transformation Projects - Assist in facilitation and execution of transformation initiatives, including cross‑LOD stakeholder coordination, use case identification and design, dependency analysis, milestone tracking, and leadership status reporting.
• GRC Strategy, Layout & Archer Administration - Partner with Director and stakeholders on GRC platform strategy and reporting including business requirements, testing coordination, report development, and cross-team consulting.
• Policy, Procedure & Program Document Management - Draft, redline, and maintain enterprise risk program artifacts for all relevant activities, ensuring alignment to OCC Heightened Standards and internal governance requirements.
• Executive & Regulatory Communication – Assist in the production concise, board‑ready written and visual deliverables for the CRO, ELT, Board Risk Committee, OCC, and FRB, including top risk narratives, memos, and supervisory update materials.
• Cross‑Functional Coordination & Analytical Support – Support the team serving as integration point across ERM, Operational, Risk Compliance Risk, Credit Risk, Treasury Risk, Model Risk, Technology Risk, Strategy Risk, Internal Audit, and 1LOD partners on shared deliverables and enterprise campaigns relative to 2LOD-owned risks, controls, metrics, and findings.
• Portfolio & Priority Management - Independently manage a portfolio of concurrent workstreams with varying cadences maintaining clear status, dependencies, and stakeholder alignment.

Required Qualifications

• Bachelor's degree required (Accounting, Finance, MIS, Business, or related field).
• 7+ years of progressive experience in enterprise risk management, operational risk, risk execution, or internal audit, in a large financial institution.
• Demonstrated working knowledge of internal control frameworks (COSO), risk taxonomies, RCSA methodology, and issues management lifecycles.
• Hands‑on experience with Archer GRC (or equivalent enterprise GRC platform) across risk register, controls, findings, remediation plans, and reporting modules.
• Proven ability to draft, edit, and manage risk policies, programs, standards, and procedures aligned to regulatory expectations (OCC, FRB, FDIC).
• Strong executive communication skills - concise written narratives, board‑ready visualizations, and confident verbal engagement with senior leaders.
• Demonstrated experience managing multiple concurrent priorities under multiple concurrent deadlines.
• Project management proficiency with the ability to influence cross‑functional stakeholders and drive execution without direct authority.

Preferred Qualifications

• Master's degree (MS in MIS, Accounting, Finance, or related) or MBA preferred.
• Professional certifications strongly preferred CPA, CIA, CRMA, FRM.
• Direct experience applying GenAI/agentic tooling to risk management workflows (control design review, control automation analysis, policy compliance mapping, narrative drafting), including prompt engineering and output validation.
• Experience with risk execution transformation initiatives including process redesign, risk program calibration, GRC platform modernization, or AI transformation.
• Experience developing forward‑looking risk indicators, KRI frameworks, or macro/market indicator dashboards.
• Experience preparing CRO‑ or Board‑level risk reporting and regulatory update materials.
• Exposure to third‑party risk, model risk governance, or AI risk governance frameworks (NIST AI RMF, SR 11‑7 / SR 26‑2 principles).

COMPENSATION AND BENEFITS

Please click here for a list of benefits for which this position is eligible.

Key has implemented an approach to employee workspaces which prioritizes in-office presence, while providing flexible options in circumstances where roles can be performed effectively in a mobile environment.

Qualified individuals with disabilities or disabled veterans who are unable or limited in their ability to apply on this site may request reasonable accommodations by emailing HR_Compliance@keybank.com.