Senior Risk Management and Internal Controls Analyst

Viveo

. Support the design, development, and maintenance of the Enterprise and Strategic Risk Management (ERM) process, including the identification, assessment, prioritization, treatment, and monitoring of the Company’s key risks; .

Posted 10/8/2026full-timeSão Paulo • BrazilSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Enterprise Risk Management (ERM) processes, including risk identification, assessment, and mitigation strategies. Proficient in developing risk matrices and dashboards, with strong analytical skills to support executive decision-making and enhance organizational risk culture.

Highest-signal resume keywords

Enterprise Risk Management (ERM)Risk Assessment and MitigationCOSO ERM FrameworkKey Risk Indicators (KRIs)Microsoft Excel and PowerPoint

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk MappingRisk Matrix DevelopmentRisk Management MethodologiesRisk Appetite and ToleranceData Analysis and VisualizationRisk Control AnalysisRisk ReportingRisk MonitoringRisk TaxonomyRisk Treatment Strategies

Soft Skills

Analytical SkillsCommunication SkillsInfluencing SkillsCollaborationStructured Thinking

Tools & Technologies

Microsoft OfficePower BI

Industry Keywords

Enterprise Risk ManagementISO 31000COSO Internal Control FrameworkGovernanceRisk Culture

About the role

Key responsibilities & impact

Support the design, development, and maintenance of the Enterprise and Strategic Risk Management (ERM) process, including the identification, assessment, prioritization, treatment, and monitoring of the Company’s key risks;
Develop, consolidate, and maintain up-to-date Enterprise Risk Maps and Risk Matrices, covering risks, causes, consequences, controls and mitigation mechanisms, owners, and response strategies;
Conduct periodic risk assessments, considering impact, likelihood, inherent and residual exposure, criticality, and the evolution of the Company’s key risks;
Support the definition and enhancement of the Risk Management methodology, including assessment criteria, impact and likelihood scales, risk taxonomy, risk appetite and tolerance, and prioritization criteria;
Conduct interviews, meetings, and workshops with business areas and leadership teams to identify, assess, review, and prioritize enterprise and strategic risks;
Develop and monitor Key Risk Indicators (KRIs), exposure limits, and other monitoring mechanisms, identifying trends, deviations, and material changes in the risk profile;
Work with risk owners to track the progress of key risks and their corresponding response and mitigation plans, assessing their impact on residual exposure;
Analyze key controls and mitigation mechanisms associated with material risks, contributing to the identification of gaps and opportunities to strengthen the control environment;
Prepare dashboards, reports, and executive presentations on the Company’s risk profile, supporting discussions and decision-making by the Executive Board, Executive Leadership, and governance forums;
Promote the integration of Risk Management with Internal Controls, Internal Audit, Compliance, and other governance functions, strengthening an integrated view of risks and avoiding overlapping responsibilities;
Develop and deliver training and risk culture initiatives, fostering greater accountability among managers for identifying, assessing, and managing risks within their areas;
Serve as a technical reference in Risk Management, supporting business areas in applying the methodology and contributing to the advancement of the Company’s ERM maturity based on frameworks and best practices, particularly COSO ERM.

Requirements

What you’ll need

Bachelor’s degree in Business Administration, Accounting, Economics, Engineering, Information Technology, or a related field;
Significant experience in Enterprise Risk Management (ERM), preferably in large organizations or highly complex corporate environments;
Practical knowledge of developing, reviewing, and maintaining risk matrices and risk maps, including the identification of causes, consequences, controls, response plans, and owners;
Strong knowledge of the processes for identifying, assessing, prioritizing, treating, and monitoring enterprise and strategic risks;
Knowledge of Risk Management methodologies and frameworks, particularly COSO ERM; knowledge of ISO 31000 and the COSO Internal Control framework is a plus;
Experience defining or monitoring KRIs, risk appetite and tolerance, inherent and residual exposure, and mitigation plans;
Ability to conduct interviews and workshops with business areas and leadership teams, translating qualitative discussions into structured, measurable, and monitorable risks;
Strong analytical and synthesis skills, with the ability to consolidate complex information and produce dashboards, reports, and executive presentations for different levels of governance;
Experience at a Big Four firm or in consulting firms specializing in Risk Management is a plus;
Advanced proficiency in Microsoft Office, particularly Excel and PowerPoint; knowledge of Power BI or other data analysis and visualization tools is a plus;
Analytical, structured, and inquisitive profile, with strong communication and influencing skills and the ability to interact with leaders at different levels;
Ability to work collaboratively with business areas while preserving Risk Management’s role as the second line of defense, without assuming responsibility for managing risks that belongs to the respective risk owners.

Benefits

Comp & perks

Health insurance — taking care of what matters most: your health;
Dental insurance — because caring for your smile matters too;
Meal allowance — convenience and quality for your daily routine;
Transportation allowance — for a smooth and worry-free commute;
Life insurance — security and protection for you and your family;
Private pension plan — helping you plan for your future;
Profit-Sharing Program;
Viveo Health Center — convenient access to several in-person specialties, as well as an online platform;
Exclusive discounts at the Mafra Especialidades store;
TotalPass — supporting your health and physical activity;
Partnerships and exclusive employee discounts — for education, leisure, and much more.