Senior Analyst, Enterprise Risk Management

Role Summary

Location: Madrid

Hybrid

Full-Time

The Enterprise Risk Management (ERM) function supports Payoneer’s enterprise-wide risk governance, risk reporting, risk event management, issues management, risk assessments, controls, and oversight processes.

The Senior Analyst, Enterprise Risk Management will lead assigned ERM initiatives and act as a risk business partner to key departments across Payoneer. The role will develop a strong understanding of each department’s strategy, activities, processes, dependencies, and unique risk profile, helping business leaders identify, assess, monitor, and manage their most significant risks.

The role will conduct stakeholder interviews, facilitate risk assessments and workshops, analyze risk information, and translate business discussions into clear risk insights, assessments, and management actions. The successful candidate will combine ERM knowledge, business curiosity, analytical thinking, and strong communication skills to provide effective Second Line oversight and constructive challenge.

This is a hands-on role for someone who is comfortable engaging with stakeholders at different levels, leading defined workstreams, and operating in a fast-paced, global fintech environment.

What You'll do

• Act as the ERM business partner for assigned departments, building strong relationships with business leaders, risk owners, and other key stakeholders.
• Develop a detailed understanding of assigned departments, including their objectives, products, services, processes, dependencies, regulatory obligations, and risk exposures.
• Lead stakeholder interviews, risk assessment sessions, and risk deep dives to identify and evaluate current, emerging, and strategic risks.
• Support and lead core ERM initiatives, including enterprise risk assessments, risk monitoring, risk appetite and KRI activities, risk event analysis, issue tracking, and management reporting.
• Support inherent and residual risk levels assessments and provide constructive Second Line challenge regarding risk ratings, control effectiveness, mitigation plans, and risk acceptance decisions.
• Analyze risk assessments, risk events, issues, KRIs, audit findings, control information, and other relevant data to identify trends, concentrations, recurring themes, and emerging concerns.
• Translate stakeholder discussions and complex business information into clear, concise, and actionable risk insights for management and governance forums.
• Monitor changes in business strategy, products, processes, technology, organizational structure, and the external environment to identify potential changes to the company’s risk profile.
• Partner with other Second Line functions, including Compliance, Information Security, Legal, and Audit, to develop an integrated view of risk and support coordinated oversight.
• Prepare risk reports, dashboards, presentations, and governance materials for senior management, risk committees, and other key stakeholders.
• Monitor agreed risk mitigation activities and stakeholder commitments, identify delays or concerns, and support appropriate follow-up and escalation.
• Support the continuous improvement of ERM methodologies, assessment tools, reporting templates, data quality, guidance materials, and operating processes.
• Promote risk awareness and support the development of a strong risk culture through stakeholder engagement, training, and practical guidance.
• Lead assigned ERM projects and workstreams, coordinating stakeholders, managing timelines, and ensuring high-quality and timely delivery.
• Support broader ERM and company-wide risk management initiatives as needed.

Who you are

• Strong understanding of enterprise risk management and Second Line responsibilities, including independent oversight, constructive challenge, risk aggregation, monitoring, and reporting.
• Working knowledge of core risk management concepts, including inherent and residual risk, control effectiveness, risk appetite, KRIs, risk events, issues, and mitigation planning.
• Strong business acumen and curiosity, with the ability to understand different departments, business models, processes, and risk profiles.
• Ability to conduct effective interviews, facilitate risk discussions, ask relevant questions, and constructively challenge stakeholders.
• Strong analytical and critical-thinking skills, with the ability to identify patterns, connect information from multiple sources, and develop meaningful risk insights.
• Ability to build trusted relationships and work effectively with business leaders, subject matter experts, and other risk and control functions.
• Ability to lead defined initiatives and manage deliverables from planning and stakeholder engagement through analysis, reporting, and follow-up.
• Strong organization and project management skills, with the ability to manage multiple priorities and meet deadlines.
• Ability to work independently while collaborating effectively within a global and cross-functional team.
• Comfortable operating in a fast-paced, evolving, and regulated business environment.