Risk Analyst Job Description

A Risk Analyst typically works in the second line of defense at a bank, insurer, broker-dealer or asset manager. The business lines take risk to earn money; the risk function measures that risk, sets and polices limits, and tells management and the board where the exposures sit. O*NET's profile of financial risk specialists describes the core of it as analyzing "areas of potential risk to the assets, earning capacity, or success of organizations," then recommending ways to control or reduce that risk.

The job splits by risk type, and a larger institution may staff each one as its own team.

• Credit risk. Portfolio analysts track default and loss trends across commercial real estate, consumer cards, auto loans or sponsor-backed corporate lending. They size concentrations by industry, geography and borrower, review rating migration, and feed reserve and capital models with probability-of-default and loss-given-default estimates.
• Market risk. Analysts attached to trading desks compute value-at-risk, sensitivities and stressed losses, reconcile them against the front office's own numbers, and explain the day's moves. O*NET lists conferring with traders about the risks of specific strategies or positions among the occupation's tasks.
• Liquidity and treasury risk. This team models deposit runoff, funding concentrations and the cash a firm could raise in a stress, and checks the results against internal limits and regulatory liquidity metrics.
• Operational risk. Analysts collect loss events, run scenario workshops with business owners, map controls to processes and test whether those controls work.
• Model risk. Validators review models built by everyone else: whether the theory fits the use, whether the data are right, whether the outputs hold up against benchmarks and history.

A typical week mixes production and investigation. Monday may mean refreshing the limit report and chasing an overnight breach; Wednesday a deep dive on why one loan segment's delinquencies moved; Friday a draft committee memo or an answer to an examiner's request letter. Smaller firms fold several of these specialties into one generalist seat.

The tools are part of the job description. O*NET's software list for the occupation includes SAS, MATLAB, IBM SPSS Statistics, Python, R, Microsoft Power BI and Tableau, along with spreadsheets for the charts that end up in board packs. Much of the effort goes into data rather than math: matching exposures across systems that were never designed to talk to each other, and proving that the number in the report traces back to a source record.

The finished product is judgment, written down. A good analyst states the assumption that would change the answer, shows the range rather than a single point, and says plainly when a model should not be trusted for a particular decision. That written record is what supervisors, internal auditors and the board's risk committee read when they ask whether the firm understood what it was holding.

O*NET places financial risk specialists in Job Zone Four, the band of occupations that call for considerable preparation, and the BLS Employment Projections table lists a bachelor's degree as the typical education needed for entry. As a rough guide, useful majors include finance, economics, mathematics, statistics, actuarial science and engineering. A master's in financial engineering, quantitative finance or statistics can help for model development and market risk seats, and credentials can be added on the job.

Technical skills. Expect to write code. Python, R and SQL handle data pulls, model runs and report automation, and some credit model stacks run in SAS. Strong spreadsheet work still matters for ad hoc analysis. On the theory side, an analyst should be comfortable with regression, time series, probability distributions, simulation, and the pricing of loans, bonds and basic derivatives. Writing is just as important: model documentation, validation reports and committee memos are the record examiners review.

Certifications. Credentials a risk analyst might pursue, each with its awarding body:

• Financial Risk Manager (FRM), Global Association of Risk Professionals (GARP). Two exams. Part II covers market risk, credit risk, operational risk and resilience, liquidity and treasury risk, risk management and investment management, and current issues in financial markets. GARP offers the exams in May, August and November. To be certified, a candidate must submit two years of relevant full-time professional experience within 10 years of sitting for Part II.
• Professional Risk Manager (PRM), Professional Risk Managers' International Association (PRMIA). A series of exams. Candidates without a graduate degree qualify with a bachelor's degree and 2 years of full-time work experience, or with 4 years of full-time work experience, in financial services or a risk management department.
• Chartered Financial Analyst (CFA), CFA Institute. Relevant for investment risk and portfolio analytics roles.
• Risk and AI (RAI) Certificate, GARP. A shorter program on the fundamentals of AI risk, relevant for analysts who review machine learning models or AI governance.

Experience path. As a rough guide, entry-level analysts come from rotational programs at large banks, from audit or credit underwriting, or straight from a quantitative degree. Two to four years in one risk discipline can prepare an analyst for a senior analyst or validation role, and exposure across risk types helps with a later move toward risk management. Prior work in loan review, treasury, trading support or regulatory reporting all transfers well, because each one teaches where the data come from and where they break.

Projected demand

BLS Employment Projections for 2025 to 2035 show financial risk specialists growing from 66,000 jobs to 70,800, a 7.4 percent increase. O*NET classifies that as much faster than average and projects about 4,800 openings a year on average, a figure that counts openings from both growth and replacement.

Model risk guidance was rewritten in 2026

On April 17, 2026 the Federal Reserve, the OCC and the FDIC issued revised guidance on model risk management. The Fed's cover letter, SR 26-2, says it supersedes and replaces SR 11-7, the model risk guidance issued April 4, 2011, as well as SR 21-8 on models supporting Bank Secrecy Act and anti-money laundering compliance. The agencies describe the new text as a risk-based approach tailored to a banking organization's model risk profile and to the size and complexity of its operations, and the Fed said the letter is expected to be most relevant to banking organizations with over $30 billion in total assets regulated by the Federal Reserve.

For validation teams, the practical question becomes which models are material and how deep a review each one needs, rather than one checklist applied to everything. Model risk policies, inventories and validation standards written to the 2011 text may need revision, and drafting and testing those changes is risk analyst work.

A framework for AI risk

On Feb. 19, 2026 the Treasury Department released a shared Artificial Intelligence Lexicon and the Financial Services AI Risk Management Framework (FS AI RMF), developed through the Financial and Banking Information Infrastructure Committee and the Financial Services Sector Coordinating Council's Artificial Intelligence Executive Oversight Group. Treasury said the framework adapts the NIST AI Risk Management Framework to the operational, regulatory and consumer protection considerations of financial services, with tools to help institutions evaluate AI use cases and manage risks across the AI lifecycle. Applying it means inventorying AI use cases, ranking them by risk and testing the controls around each one, work that fits alongside model risk and operational risk reviews. The lexicon has a practical use of its own: when model owners, vendors, auditors and examiners use the same terms, a review can argue about the risk instead of about definitions.

Where the work goes from here

Risk analysis is tied to regulation, capital and the board's appetite for loss, and each of the 2026 changes above can create drafting, testing and documentation work for risk staff. Automation can take over parts of report assembly and data reconciliation, but someone still has to explain a number to an examiner and defend it. Next steps from the analyst seat include senior analyst, model validation lead and risk manager roles.

Dear Hiring Manager,

I am applying for the Risk Analyst position in your market risk group. For the past three years I have worked in the risk department of a regional bank, first on the liquidity team and for the last eighteen months on interest rate and securities portfolio risk.

My daily work centers on the bank's investment portfolio and its hedges. I rebuilt our value-at-risk and stressed loss process in Python, replacing a set of linked spreadsheets that took a full day to refresh and broke whenever a security was added. The new process runs overnight, reconciles positions to the accounting system before it calculates anything, and writes an exception file when the two disagree. That reconciliation step caught a mismapped group of agency securities in its first month, before the error reached the asset-liability committee.

I also prepare the monthly limit report for that committee and present it when the treasurer is out. I have learned to lead with what changed and why, to show a range rather than a single number, and to say when a model is being stretched beyond what it was built for. Last spring I supported an examination by assembling model documentation and walking examiners through our back-testing results; the review closed without a finding on our area.

I passed FRM Part I last year and am preparing for Part II. I am drawn to your team because it covers trading books as well as the banking book, and I want to deepen my work on sensitivities and scenario design.

I would welcome the chance to discuss how my background fits your needs.

Sincerely, Daniel Okafor