Sr Enterprise Risk Analyst (Remote)

Who We Are

ServiceMac is a new sub-servicing entity backed by some of the leading practitioners of the mortgage servicing industry. ServiceMac is focused on providing superior technology, products, and services for the mortgage and real estate industries backed by highly personalized service and support. Through continuous innovation and acquisition, our offerings comprise of personalized solutions that span the mortgage continuum and enhance security, compliance, customer satisfaction, and profitability. Our inclusive, people-first culture has earned our company numerous accolades, including being named to the Fortune 100 Best Companies to Work For® list for eleven consecutive years. We have also earned awards as a best place to work for women, diversity and LGBTQ employees, and have been included on more than 50 regional best places to work lists. First American will always strive to be a great place to work, for all.

What We Do

The Senior Enterprise Risk Analyst supports ServiceMac’s Enterprise Risk Management program by identifying, assessing, monitoring, and reporting on risks associated with mortgage subservicing operations and the achievement of strategic objectives. The position is seated within the second line of defense, providing independent risk analysis, oversight, and constructive challenge to the business owners responsible for managing risks and implementing corrective actions. The role also maintains and enhances risk documentation, methodologies, procedures, job aids, and tools that promote consistent and effective risk management practices.

How You'll Contribute

• Plan and perform enterprise, operational, and third-party risk assessments, including process walkthroughs, risk identification, control evaluation, and assessment of inherent and residual risk.
• Document conclusions, challenge risk assessments where appropriate, and recommend risk responses consistent with established methodologies and risk appetite.
• Evaluate mortgage servicing risks and controls. Review servicing processes, procedures, and supporting systems to identify control gaps, operational inefficiencies, and potential borrower, client, operational, financial, regulatory, or reputational impacts. Evaluate control design and, where within ERM's scope, independently assess control execution and effectiveness through documentation review, evidence analysis, monitoring, and risk-based testing.
• Assess regulatory and procedural alignment. Collaborate with Compliance, Legal, and business stakeholders to evaluate whether processes and controls address applicable federal and state regulatory requirements, industry standards, investor and agency requirements, and internal policies and procedures.
• Analyze and report risk information. Review operational data, KRIs, incidents, losses, complaints, fraud events, audit and examination findings, control exceptions, and business changes to identify trends, recurring issues, and emerging risks. Prepare clear, accurate reports and presentations that communicate findings, risk implications, and recommended actions to management.
• Support risk issue management and remediation. Work with business owners to identify root causes and evaluate the adequacy of proposed corrective actions. Monitor remediation progress, escalate overdue or significant issues, and assess supporting evidence to validate corrective actions, as assigned.
• Maintain risk inventories and assessment records. Update the enterprise risk register, risk and control documentation, assessment results, and issue records within the company’s risk management tools. Promote consistent documentation, accurate risk information, and clearly identified business ownership.
• Evaluate third-party and business-change risks. Assess risks associated with service providers, new or changing client requirements, technology implementations, process changes, and significant business initiatives. Identify potential control gaps and recommend appropriate mitigation and monitoring activities.
• Maintain procedures and tools. Develop and update Enterprise Risk Management procedural manuals, job aids, assessment templates, reporting tools, and related documentation. Recommend improvements that strengthen consistency, usability, and efficiency.
• Collaborate with business stakeholders. Provide guidance on risk assessment methods, control documentation, and issue escalation. Communicate concerns constructively, support informed decision-making, and maintain independent judgment.
  
  

What You'll Bring

Education, Experience, Licensure & Certifications

• Bachelor’s degree in business, accounting or finance, or equivalent work experience
• 5 years of financial services experience, including enterprise risk, operational risk, third-party risk, compliance risk, controls, or related risk-management experience. Banking or mortgage servicing experience is strongly preferred.
• Experience conducting risk assessments, evaluating internal controls, analyzing business processes, and documenting findings and recommendations.
• Demonstrated knowledge of enterprise and operational risk management principles, including inherent and residual risk, control effectiveness, risk indicators, risk appetite, and issue remediation.
• Strong analytical and problem-solving skills, with the ability to evaluate information from multiple sources, identify patterns, and develop practical recommendations.
• Ability to interpret regulatory requirements, industry standards, and internal procedures and assess their relevance to business processes and controls.
• Strong written and verbal communication skills, including the ability to present complex findings clearly and collaborate effectively across business functions.
• Ability to prioritize effectively and manage multiple assignments independently, meet deadlines, and handle confidential information appropriately.
  

Knowledge, Skills, & Abilities (KSAs)

• Self-directed, accountable, and able to operate effectively with limited supervision with strong communication, interpersonal, relationship-building and teamwork skills
• Working knowledge of risk management practices, including risk identification, assessment, controls, mitigation, monitoring, remediation, and reporting
• Familiarity with ERM frameworks such as COSO ERM, ISO 31000, or similar frameworks
• Proven ability to evaluate risk mitigation strategies, challenge proposed corrective actions, and support effective risk and process improvement initiatives
• Ability to establish and maintain effective working relationships at the senior management level across functional groups and business units while providing oversight of existing processes and mitigating risk against future firm impact
• Strong stakeholder management, organizational, analytical, and consultative skills
• Skilled at balancing long-term projects with immediate, high-priority issues in fast-paced environments and escalate risk matters when appropriate
• Proficient in Microsoft Office and capable of effectively using approved AI-enabled tools to enhance research, analyze information, identify risk trends, and improve the quality and efficiency of risk reporting and deliverables.
  

What We Offer

By choice, we don’t simply accept individuality – we embrace it, we support it, and we thrive on it! Our People First culture is inclusive for all employees - not just because it's the right thing to do, but because it's the key to our success. We are proud to foster an authentic and inclusive workplace For All. You are free and encouraged to bring your entire, unique self to work. First American is an equal opportunity employer in every sense of the term.

Based on eligibility, First American offers a comprehensive benefits package including medical, dental, vision, 401k, PTO/paid sick leave and other great benefits like an employee stock purchase plan.

Pay Range: $85,000.00 - $113,300.00 Annually

This hiring range is a reasonable estimate of the base pay range for this position at the time of posting. Pay is based on a number of factors which may include job-related knowledge, skills, experience, business requirements and geographic location.