Risk Analyst

About the role

The Risk Analyst is responsible for identifying, assessing, and mitigating operational, financial, regulatory, and reputational risks that could impact organizational performance. This role analyses data, processes, and control environments to detect vulnerabilities, evaluate exposure levels, and recommend effective risk mitigation strategies.

Key responsibilities

• Proactively monitor platform data to identify emerging risks such as payment fraud, account takeovers, spam campaigns, phishing scams, and synthetic identity networks.
• Use SQL, Python, or analytics tools to query large datasets, uncover attack vectors, and quantify the scale and impact of abusive behavior.
• Design and implement rules, models, and workflows to detect and prevent fraudulent or high‑risk activity while minimizing friction for legitimate users.
• Partner with Engineering, Product, Finance, and Legal teams to embed risk controls into the product development lifecycle and ensure regulatory compliance.
• Act as a key responder during active risk events, making rapid decisions to contain losses and maintain user trust.
• Build dashboards and reports to track key risk indicators, communicate findings to leadership, and measure mitigation effectiveness.
• Provide feedback on internal risk tools and collaborate with engineers to improve detection capabilities and automate manual reviews.
• Assist in evaluating and integrating third‑party risk intelligence vendors and threat‑intelligence feeds.

Required profile

• Minimum of 2 years of experience in risk analysis, fraud intelligence, trust & safety analytics, or financial crime investigations within tech, e‑commerce, or fintech sectors.
• Strong SQL skills and experience with Python, R, or data‑visualisation tools such as Tableau or Looker.
• Ability to translate raw data into actionable insights and work with large, messy datasets to uncover abuse signals.
• Deep understanding of common attack vectors (e.g., chargeback fraud, promo abuse, botnets, deepfakes) and mitigation strategies.
• Proven capability to make quick, high‑stakes decisions during incidents while balancing loss prevention and user experience.
• Excellent communication skills to present complex technical findings to non‑technical stakeholders, including executives and legal teams.
• Familiarity with global risk and compliance frameworks such as AML, KYC, GDPR, or PSD2.
• Proactive curiosity and ability to lead cross‑functional initiatives in a fast‑paced environment.

Required skills

• SQL
• Python
• R
• Tableau
• Looker