Sr Enterprise Risk Analyst; Remote

Service Mac is a new sub-servicing entity backed by some of the leading practitioners of the mortgage servicing industry. Service Mac is focused on providing superior technology, products, and services for the mortgage and real estate industries backed by highly personalized service and support. Through continuous innovation and acquisition, our offerings comprise of personalized solutions that span the mortgage continuum and enhance security, compliance, customer satisfaction, and profitability.

Our inclusive, people-first culture has earned our company numerous accolades, including being named to the Fortune 100 Best Companies to Work For® list for eleven consecutive years. We have also earned awards as a best place to work for women, diversity and LGBTQ+ employees, and have been included on more than 50 regional best places to work lists. First American will always strive to be a great place to work, for all.

The Senior Enterprise Risk Analyst supports Service Mac’s Enterprise Risk Management program by identifying, assessing, monitoring, and reporting on risks associated with mortgage subservicing operations and the achievement of strategic objectives. The position is seated within the second line of defense, providing independent risk analysis, oversight, and constructive challenge to the business owners responsible for managing risks and implementing corrective actions.

The role also maintains and enhances risk documentation, methodologies, procedures, job aids, and tools that promote consistent and effective risk management practices.

Plan and perform enterprise, operational, and third-party risk assessments, including process walkthroughs, risk identification, control evaluation, and assessment of inherent and residual risk. Document conclusions, challenge risk assessments where appropriate, and recommend risk responses consistent with established methodologies and risk appetite. Evaluate mortgage servicing risks and controls. Review servicing processes, procedures, and supporting systems to identify control gaps, operational inefficiencies, and potential borrower, client, operational, financial, regulatory, or reputational impacts.

Evaluate control design and, where within ERM's scope, independently assess control execution and effectiveness through documentation review, evidence analysis, monitoring, and risk-based testing. Assess regulatory and procedural alignment. Collaborate with Compliance, Legal, and business stakeholders to evaluate whether processes and controls address applicable federal and state regulatory requirements, industry standards, investor and agency requirements, and internal policies and procedures. Analyze and report risk information.

Review operational data, KRIs, incidents, losses, complaints, fraud events, audit and examination findings, control exceptions, and business changes to identify trends, recurring issues, and emerging risks. Prepare clear, accurate reports and presentations that communicate findings, risk implications, and recommended actions to management. Support risk issue management and remediation. Work with business owners to identify root causes and evaluate the adequacy of proposed corrective actions.

Monitor remediation progress, elevate overdue or significant issues, and assess supporting evidence to validate corrective actions, as assigned. Maintain risk inventories and assessment records. Update the enterprise risk register, risk and control documentation, assessment results, and issue records within the company’s risk management tools. Promote consistent documentation, accurate risk information, and clearly identified business ownership. Evaluate third-party and business-change risks.

Assess risks associated with service providers, new or changing client requirements, technology implementations, process changes, and significant business initiatives. Identify potential control gaps and recommend appropriate mitigation and monitoring activities. Maintain procedures and tools. Develop and update Enterprise Risk Management procedural manuals, job aids, assessment templates, reporting tools, and related documentation. Recommend improvements that strengthen consistency, usability, and efficiency. Collaborate with business stakeholders.

Provide guidance on risk assessment methods, control documentation, and issue escalation. Communicate concerns constructively, support informed decision-making, and maintain independent…