The Antwi Group is seeking an analytical, detail-oriented, highly organized, and professionally curious Enterprise Risk Analyst to join our Risk Management Department.
Working under the direction of the Risk Manager and Director / Manager of Risk Management, the Enterprise Risk Analyst will support the identification, assessment, monitoring, analysis, documentation, and reporting of risks across The Antwi Group and its businesses.
The Enterprise Risk Analyst will maintain risk data, support departmental risk assessments, update risk registers, analyze risk trends, monitor mitigation activities, prepare dashboards and reports, research emerging risks, support third-party and project-risk assessments, assist with business-continuity activities, and provide analytical support for the company’s enterprise risk-management program.
The position will work across departments including Finance & Accounting, Legal & Business Affairs, IT & Digital Systems, Security & Protective Services, Facilities & Workplace Operations, Procurement & Vendor Management, Project Management, Operations & Administration, Human Resources, Content & Media Production, Corporate Communications & Public Relations, and other business units.
This position requires strong analytical ability, critical thinking, research skills, attention to detail, professional skepticism, communication, objectivity, discretion, integrity, and the ability to translate complex information into clear and useful risk analysis.
Key Responsibilities
- Support enterprise risk-management activities.
- Maintain enterprise and departmental risk registers.
- Collect risk information from departments.
- Support risk assessments.
- Analyze risk likelihood and potential impact.
- Document existing controls.
- Track risk-mitigation activities.
- Monitor corrective actions.
- Update risk ratings using approved methodologies.
- Prepare risk dashboards.
- Develop risk reports.
- Analyze risk trends.
- Monitor key risk indicators.
- Research emerging risks.
- Support vendor-risk assessments.
- Support project-risk assessments.
- Assist with business-continuity activities.
- Support business-impact analyses.
- Assist with incident reviews.
- Maintain risk documentation.
- Prepare analytical summaries.
- Support risk workshops and meetings.
- Monitor outstanding risk actions.
- Escalate significant observations.
- Protect confidential risk information.
Enterprise Risk Framework
The Analyst will support a structured process such as:
Identify → Assess → Document → Treat → Monitor → Report → Review
Risk Identification
Potential risks may be identified through:
- Department interviews
- Risk workshops
- Incident information
- Project reviews
- Vendor assessments
- Business-continuity exercises
- Internal-control observations
- Operational changes
- Management discussions
- Industry research
- Other legitimate business sources
Risk Categories
The Analyst may work with risks involving:
- Strategic risk
- Operational risk
- Financial risk
- Technology risk
- Cybersecurity risk
- Physical-security risk
- Facilities risk
- Vendor and third-party risk
- Project risk
- Production risk
- Business-continuity risk
- Legal and regulatory risk
- Reputational risk
- Other material business risks
Risk Register Administration
The Enterprise Risk Analyst may maintain records identifying:
Risk → Category → Description → Owner → Likelihood → Impact → Controls → Mitigation → Status
Risk Descriptions
Risk descriptions should be sufficiently clear to explain:
- What could occur
- Why it could occur
- The potential business consequence
- The activity potentially affected
Descriptions should avoid unsupported conclusions or unnecessarily alarmist language.
Risk Ownership
Each material risk should generally have an appropriate business owner.
The Analyst supports risk administration and analysis but does not replace the department responsible for managing the underlying activity.
Risk Assessment
The Analyst may support evaluation of:
- Likelihood
- Financial impact
- Operational impact
- Technology impact
- Security implications
- Legal implications
- Reputational consequences
- Duration
- Recoverability
Assessment Methodology
Risk ratings should follow approved Risk Management methodology rather than personal preference.
Inherent Risk
Where applicable, the Analyst may document risk exposure before existing controls are considered.
Existing Controls
Controls may include:
- Policies
- Approvals
- Technology
- Physical safeguards
- Contracts
- Monitoring
- Training
- Insurance
- Backup arrangements
- Other mitigation measures
Control Documentation
The Analyst may document:
Control → Owner → Purpose → Frequency → Evidence → Status
Control Effectiveness
Where assigned, the Analyst may help evaluate whether controls appear to be:
- Designed appropriately
- Implemented
- Consistently performed
- Supported by documentation
Formal audit conclusions should remain with appropriately authorized audit or assurance personnel where applicable.
Residual Risk
Residual risk may be calculated or assessed after relevant controls and mitigation measures are considered.
Risk Treatment
Responses may include:
- Avoid
- Reduce
- Transfer
- Accept within authorized tolerance
- Monitor
Risk Mitigation Tracking
The Analyst may maintain:
Risk → Mitigation Action → Owner → Due Date → Progress → Status
Overdue Actions
Materially overdue mitigation activities should be communicated to the Risk Manager.
Risk Acceptance
The Analyst should document authorized risk-acceptance decisions where required but should not independently accept material risk on behalf of the organization unless formally authorized.
Risk Reviews
The Analyst may prepare information for periodic reviews including:
- Current rating
- Previous rating
- Risk trend
- Control changes
- Mitigation progress
- Incidents
- Emerging concerns
- Required actions
Risk Trends
Risk movement may be categorized using approved terminology such as:
Increasing → Stable → Decreasing
Trend designations should be supported by available evidence.
Key Risk Indicators
The Analyst may help develop and maintain indicators associated with significant risks.
Examples may include:
- System downtime
- Vendor disruptions
- Project delays
- Financial variances
- Incident volume
- Control exceptions
- Other relevant measures
KRI Reporting
Records may identify:
Indicator → Threshold → Current Result → Trend → Risk → Action
Risk Dashboards
The Analyst may prepare management dashboards showing:
- Significant risks
- Risk categories
- Risk trends
- Mitigation status
- Overdue actions
- Emerging risks
- Key risk indicators
Data Visualization
Charts and dashboards should present risk information accurately and should not exaggerate or minimize risk through misleading scales or presentation.
Risk Reporting
Reports may include:
- Enterprise risk summaries
- Departmental risk summaries
- Emerging-risk research
- Mitigation status
- Incident trends
- Vendor-risk information
- Project-risk information
- Business-continuity status
Analytical Writing
Risk reports should clearly distinguish:
- Facts
- Estimates
- Assumptions
- Management judgments
- Analyst observations
Strategic Risk Analysis
The Analyst may support evaluation of risks associated with:
- Business expansion
- New ventures
- Partnerships
- Significant investments
- New markets
- Major contracts
- Organizational changes
Operational Risk Analysis
The Analyst may evaluate information involving:
- Process failures
- Equipment failures
- Staffing dependencies
- System interruptions
- Documentation gaps
- Supplier disruption
- Internal-control weaknesses
Financial Risk Analysis
In coordination with Finance & Accounting, the Analyst may support analysis involving:
- Financial concentration
- Credit exposure
- Cash-flow dependencies
- Fraud risk
- Financial-control issues
- Significant commitments
The Analyst does not replace Finance personnel responsible for accounting or financial decisions.
Technology Risk
Working with IT & Digital Systems, the Analyst may support analysis involving:
- System availability
- Infrastructure
- Software dependencies
- Technology vendors
- Data
- Technology projects
Cybersecurity Risk
Technical cybersecurity assessments should remain with qualified IT or cybersecurity personnel.
The Analyst may incorporate validated cybersecurity risk information into enterprise risk reports.
Physical-Security Risk
Working with Security & Protective Services, the Analyst may support enterprise reporting involving:
- Facility security
- Events
- Productions
- Access-control dependencies
- Security incidents
Facilities Risk
Working with Facilities & Workplace Operations, analysis may include:
- Facility availability
- Critical utilities
- Equipment
- Maintenance dependencies
- Workplace interruptions
Vendor & Third-Party Risk
The Analyst may work with Procurement & Vendor Management to evaluate:
- Vendor criticality
- Service dependency
- Supplier concentration
- Financial concerns
- Security exposure
- Data access
- Contract dependencies
- Continuity arrangements
Vendor Risk Assessment
A record may identify:
Vendor → Service → Criticality → Risk → Control → Mitigation → Review Date
Vendor Concentration
The Analyst may identify business activities that rely heavily on:
- A single supplier
- A small group of suppliers
- A particular technology provider
- A specialized contractor
Project Risk
The Analyst may support Project Management with:
- Risk identification
- Risk registers
- Probability and impact analysis
- Mitigation tracking
- Dependency analysis
- Reporting
Project Risk Register
Records may identify:
Risk → Probability → Impact → Owner → Response → Due Date → Status
Production Risk
The Analyst may support risk assessments for:
- Recording projects
- Productions
- Events
- Locations
- Equipment
- Vendors
- Scheduling
- Operational dependencies
Business Continuity
The Enterprise Risk Analyst may support the company’s business-continuity program.
Business Impact Analysis
The Analyst may collect information concerning:
- Critical business processes
- Critical technology
- Critical facilities
- Critical vendors
- Key dependencies
- Recovery priorities
- Maximum tolerable interruptions
BIA Documentation
Records may identify:
Business Activity → Owner → Dependency → Impact → Recovery Priority
Continuity Plans
The Analyst may help maintain plans addressing:
- Technology outages
- Facility interruptions
- Supplier failures
- Staffing disruptions
- Severe weather
- Utility failures
- Other significant disruptions
Continuity Exercises
The Analyst may assist with:
- Tabletop exercises
- Scenario development
- Exercise documentation
- Action tracking
- Follow-up reporting
Incident Analysis
The Analyst may support reviews of significant incidents.
Incident Data
Information may include:
- Date
- Business area
- Event type
- Business impact
- Duration
- Contributing factors
- Corrective actions
Root-Cause Support
The Analyst may help organize evidence for structured root-cause analysis.
Conclusions should be supported by available evidence and appropriate subject-matter expertise.
Loss Data
Where appropriate, the Analyst may maintain information regarding operational losses or incidents.
Loss Analysis
Data may be analyzed by:
- Event type
- Department
- Cause category
- Financial impact
- Frequency
- Time period
Insurance Support
The Analyst may assist with organizing:
- Exposure information
- Loss history
- Insurance schedules
- Renewal data
- Claims information
Insurance advice and placement should remain with appropriately authorized management and licensed insurance professionals.
Claims Tracking
Where assigned, records may identify:
Claim → Incident → Coverage → Date → Status → Responsible Contact
Emerging Risk Research
The Analyst may research developments involving:
- Technology
- Artificial intelligence
- Economic conditions
- Supply chains
- Business models
- Industry trends
- Security
- Regulation
- Other relevant developments
Research Standards
Research should prioritize credible and relevant sources and clearly identify uncertainty.
Scenario Analysis
The Analyst may support scenarios involving:
- Operational disruption
- Technology failure
- Vendor failure
- Facility interruption
- Significant project delay
- Other plausible business events
Scenario analysis is intended to support preparedness and should not be represented as a prediction.
Quantitative Analysis
Depending on available data and the nature of the risk, the Analyst may use:
- Trend analysis
- Frequency analysis
- Impact estimates
- Scenario modeling
- Sensitivity analysis
- Other appropriate analytical methods
Data Quality
Before relying on data, the Analyst should consider:
- Completeness
- Accuracy
- Timeliness
- Consistency
- Source reliability
Risk Data Repository
The Analyst may maintain structured information involving:
- Risks
- Controls
- Mitigation actions
- Incidents
- Key risk indicators
- Vendors
- Projects
- Business-continuity information
Spreadsheet & Analytical Tools
The Analyst may regularly use:
- Spreadsheets
- Databases
- Reporting tools
- Dashboards
- Risk-management platforms
- Approved analytical applications
Risk Meetings
The Analyst may support:
- Department risk reviews
- Enterprise risk meetings
- Vendor-risk reviews
- Project-risk meetings
- Business-continuity meetings
Meeting Support
Responsibilities may include:
- Preparing reports
- Updating risk registers
- Recording actions
- Maintaining decisions
- Tracking follow-up
Risk Workshops
The Analyst may assist in facilitating structured workshops designed to identify and evaluate risks.
Policies & Procedures
The Analyst may support development and maintenance of:
- Risk-management procedures
- Risk-assessment guidance
- Risk-register standards
- Reporting procedures
- Business-continuity documentation
- Third-party risk procedures
Documentation Standards
Risk records should be:
- Accurate
- Objective
- Clear
- Current
- Traceable
- Appropriately protected
Confidentiality
The Enterprise Risk Analyst may encounter sensitive information involving:
- Company strategy
- Finances
- Technology
- Security
- Legal matters
- Vendors
- Employees
- Executives
- Projects
- Productions
- Insurance
- Incidents
- Business continuity
Such information must only be accessed and shared for legitimate authorized business purposes.
Artificial Intelligence & Risk Analytics
Where approved, AI-assisted tools may support:
- Data analysis
- Risk research
- Trend identification
- Scenario development
- Reporting
- Administrative organization
AI-generated results should be independently reviewed and validated before being used in material risk analysis.
Confidential risk registers, detailed security vulnerabilities, privileged legal materials, personal information, access credentials, proprietary financial information, or other sensitive company information should not be submitted to unapproved AI systems.
Professional Integrity
The Enterprise Risk Analyst must not knowingly:
- Falsify risk data.
- Manipulate risk ratings.
- Conceal material findings.
- Misrepresent analytical results.
- Alter incident information improperly.
- Fabricate evidence.
- Misrepresent mitigation progress.
- Improperly disclose confidential information.
- Present unsupported assumptions as established facts.
- Suppress legitimate risk concerns for improper purposes.
Cross-Department Collaboration
Director / Manager of Risk Management — enterprise risk leadership.
Risk Manager — daily risk-management operations.
Finance & Accounting — financial risk information.
Legal & Business Affairs — legal and regulatory matters.
IT & Digital Systems — technology and cybersecurity risks.
Security & Protective Services — physical-security risks.
Facilities & Workplace Operations — facilities risks.
Procurement & Vendor Management — vendor and third-party risks.
Project Management — project risks.
Human Resources — workforce-related operational matters.
Content & Media Production — production risks.
Corporate Communications & Public Relations — reputational matters.
Operations & Administration — operational risks.
Qualifications
- Bachelor’s degree in Risk Management, Finance, Economics, Business Administration, Accounting, Data Analytics, Statistics, Insurance, Operations Management, or a related field preferred, or equivalent relevant professional experience.
- Previous experience in risk management, financial analysis, business analysis, audit, internal controls, insurance, compliance, operations analysis, data analysis, or related work preferred.
- Strong analytical and critical-thinking ability.
- Strong research skills.
- Excellent attention to detail.
- Strong written communication.
- Ability to translate complex information into understandable reports.
- Proficiency with spreadsheets and standard analytical tools.
- Ability to organize and analyze structured data.
- Ability to manage multiple assignments and deadlines.
- Strong professional judgment.
- High level of integrity, objectivity, discretion, and confidentiality.
Preferred Skills
Experience or training involving:
- Enterprise Risk Management
- Risk Analysis
- Operational Risk
- Business Continuity
- Vendor Risk
- Project Risk
- Risk Reporting
- Data Analytics
- Financial Analysis
- Internal Controls
- Insurance
- Business Intelligence
- Dashboard Development
- Scenario Analysis
Relevant risk-management, insurance, business-continuity, audit, analytics, or related certifications are beneficial.
Professional Expectations
The successful candidate should demonstrate:
- Analytical thinking
- Objectivity
- Curiosity
- Professional skepticism
- Organization
- Accuracy
- Communication
- Integrity
- Confidentiality
- Accountability
- Collaboration
- Attention to detail
- Strong follow-through
Career Development
The Enterprise Risk Analyst position provides an opportunity to develop expertise across multiple areas of corporate risk.
A potential career path may include:
Enterprise Risk Analyst → Senior Risk Analyst → Risk Manager → Director / Manager of Risk Management → Senior Director / Head of Enterprise Risk
Employees may also develop toward Business Continuity, Vendor Risk, Operational Risk, Risk Analytics, Insurance Management, Corporate Strategy, Internal Controls, or Governance.
Location
Poconos, Pennsylvania
This position may operate through a combination of on-site and approved remote work depending on business requirements.
Risk assessments, projects, continuity exercises, facility reviews, productions, vendor reviews, or other responsibilities may occasionally require domestic travel or irregular-hour availability.
Employment Type
Full Time
Department
Risk Management
Reports To
Risk Manager
About The Antwi Group
The Antwi Group is a growing organization operating across creative, entertainment, media, and related business sectors. Our teams bring together creative talent, technical expertise, management, financial discipline, technology, production, operations, risk management, and business development to build projects and opportunities designed for long-term growth.
Application
Interested candidates should submit an application outlining their education, risk-analysis, finance, business-analysis, audit, data-analysis, insurance, operations, internal-control, business-continuity, project-risk, vendor-risk, or related experience and other relevant qualifications.
Applicants may also be asked to provide a résumé/CV, professional references, relevant certifications, and descriptions of risk assessments, analytical projects, dashboards, business-continuity work, vendor-risk reviews, or other risk-related projects they have completed and are legally permitted to discuss.
Candidates earlier in their risk-management careers may be considered if they demonstrate strong analytical ability, research skills, organization, professional judgment, integrity, objectivity, communication, and willingness to develop their enterprise-risk expertise.
Applicants should not submit confidential risk registers, detailed security vulnerabilities, privileged legal materials, proprietary financial information, protected personal information, access credentials, confidential insurance records, trade secrets, or materials belonging to current or previous employers, clients, or business partners that they are not authorized to disclose.
The Antwi Group is an equal opportunity employer. We consider qualified applicants without regard to characteristics protected by applicable law.