Junior Risk Analyst; GRC

Junior Risk Analyst (GRC) – Entry Level, Full Time (Remote)

Mutual of Omaha is a Fortune 300 Company. Mutual of Omaha Mortgage is inspired by hometown values and a commitment to being responsible and caring for each other. We exist for the benefit of our customers and employees.

Mutual of Omaha Mortgage is a full-service lending company offering both Forward and Reverse Mortgage products including a complete line of residential mortgage, refinancing, specialty, and HECM loans. We employ a knowledgeable staff of experienced Loan Officers with an operations team that is second to none. If you are interested in joining a team that promotes from within and works together toward a common goal of helping customers with their mortgage needs, please review and apply for our opening below!

This is a hands-on, true entry-level Junior Risk Analyst role intended for someone deliberately pursuing a career in Governance, Risk, and Compliance (GRC) within cybersecurity. While little to no prior professional experience is required, candidates must demonstrate foundational GRC knowledge through a relevant degree, internship, certification, or active pursuit of a related degree or certification. Success in this role requires discipline, intellectual curiosity, critical thinking, sound judgment, ownership, and personal accountability.

The Junior Risk Analyst will work under the close mentorship of an experienced Lead Risk Analyst and report to the Cybersecurity Manager. The role provides meaningful exposure to insider risk investigations, eDiscovery, audits, assessments, compliance activities, third-party risk, and risk documentation, with clear expectations for quality, accuracy, follow-through, and continuous growth. Training and guidance will be provided; however, success depends on the ability to learn independently, validate work, ask thoughtful questions, and earn increased responsibility through performance.

This is not a security operations role and is not a passive or “check-the-box” compliance position. Limited cross-training with Sec Ops will occur to support collaboration and situational awareness, but the primary focus remains GRC and risk management.

• Assist the Lead Risk Analyst with the investigation and analysis of Insider Risk cases, following defined processes and guidance
• Work assigned risk-related tickets through to completion with oversight from the Lead Risk Analyst and Cybersecurity Manager
• Maintain accurate, defensible documentation of findings, actions taken, and outcomes
• Validate information and evidence prior to escalation or conclusion

• Support eDiscovery requests from Legal and Human Resources, including data identification, coordination, and documentation
• Assist with evidence handling and response tracking to ensure requests are completed accurately and on time

• Assist with internal and external risk and control assessments, including responding to auditor and state examiner questions and evidence requests
• Support PCI compliance activities, including annual PCI self-certification requirements and related documentation
• Assist the Lead Risk Analyst with vendor due diligence questionnaires (DDQs) and third‑party risk assessments
• Help maintain risk registers, control inventories, and supporting GRC artifacts

• Heavily assist the Lead Risk Analyst and Cybersecurity Manager with assigned GRC and risk‑related project tasks
• Support execution of projects involving risk assessments, control improvements, process enhancements, and compliance initiatives
• Track assigned project tasks to completion, ensuring deliverables are accurate, timely, and well‑documented
• Take increasing ownership of defined project work streams as skills, confidence, and judgment grow

• Assist the Lead Risk Analyst with GRC KPI and KRI metrics, including data collection, validation, and analysis
• Support preparation of risk and compliance metrics used in leadership presentations and reporting
• Help ensure metrics are accurate, meaningful, and defensible