Job DescriptionThe Internal Risk Manager is responsible for overseeing the identification, assessment, mitigation, and monitoring of compliance and operational risks across the organization. This role partners closely with business leaders, Internal Audit, Risk Management, and Compliance stakeholders to drive effective issue remediation, risk assessment activities, control development, and governance processes. The position serves as the primary owner of the GRC platform for the business and ensures regulatory requirements, risks, controls, and remediation activities are accurately documented, maintained, and monitored.
How you'll make an impact: Operational Issue Management- Partner with business stakeholders to review, assess, and remediate operational issues resulting from control failures, process breakdowns, audit findings, or risk events.
- Facilitate root cause analysis and develop remediation plans to ensure identified risks and control deficiencies are effectively addressed.
- Monitor issue remediation activities and ensure corrective actions are completed within established timelines.
- Provide reporting and status updates to management and governance committees regarding issue remediation progress and emerging risks.
- Promote consistent issue management practices and adherence to risk management standards across the organization.
Audit Issue Management- Partner with issue owners and business stakeholders to develop and execute remediation plans for audit findings and regulatory observations.
- Coordinate the preparation and submission of documentation and evidence required to support remediation efforts and audit requests.
- Track audit findings through closure and ensure remediation activities satisfy audit and regulatory expectations.
- Serve as a liaison between Internal Audit, Compliance, Risk Management, and business teams to facilitate timely issue resolution.
- Maintain comprehensive records of audit findings, remediation activities, and supporting documentation.
GRC Governance and Ownership- Serve as the business owner and primary administrator for AuditBoard.
- Establish and manage user access controls, permissions, and governance processes within the platform.
- Develop and deliver training to ensure effective utilization of AuditBoard by business stakeholders.
- Partner with AuditBoard administrators and vendors to represent business requirements and advocate for enhancements and platform improvements.
- Ensure AuditBoard data integrity, reporting accuracy, and alignment with organizational risk and compliance management objectives.
- Support ongoing optimization of AuditBoard workflows, reporting capabilities, and user experience.
Risk Assessments and Risk Management- Develop and maintain the annual Risk and Control Self-Assessment (RCSA) schedule.
- Lead risk assessments associated with new products, services, business initiatives, and operational processes.
- Facilitate RCSA workshops and provide effective challenge to business partners to ensure risks are appropriately identified, assessed, and documented.
- Maintain and update the organization's risk inventory, ensuring risks remain accurately categorized and assessed.
- Conduct annual and ongoing risk assessments to evaluate changes in risk exposure and control effectiveness.
- Analyze risk assessment results and recommend mitigation strategies to address identified gaps and emerging risks.
- Prepare risk reporting and presentations for management and governance forums.
Control Development and Governance- Ensure regulatory requirements, operational risks, and associated controls are accurately documented and maintained within AuditBoard.
- Maintain oversight of risk-to-control mapping and ensure relationships between risks, controls, policies, and procedures remain current and complete.
- Develop, maintain, and enhance control documentation, including control descriptions, procedures, process flows, and evidence requirements.
- Partner with business stakeholders to design and implement controls that effectively mitigate compliance and operational risks.
- Ensure procedures and controls are documented, reviewed, and approved prior to implementation.
- Coordinate control testing and validation activities to confirm controls are operating effectively before deployment and on an ongoing basis.
- Support control monitoring, issue identification, and continuous improvement initiatives.
What you'll need to succeed: - Bachelor's degree in Finance, Business Administration, Accounting, Risk Management, Compliance, or a related field.
- 3+ years of experience in Compliance, Operational Risk Management, Internal Audit, Risk and Controls, or related financial services functions.
- Strong knowledge of risk management frameworks, RCSA methodologies, issue management practices, and control design principles.
- Experience managing audit findings, regulatory examinations, and remediation programs.
- Hands-on experience with (GRC) platforms.
- Strong analytical, organizational, and project management skills.
- Excellent written and verbal communication skills with the ability to present complex risk and compliance topics to diverse audiences.
- Knowledge of financial services regulatory requirements and compliance frameworks preferred.
Why Join Us:- Generous paid time off
- Competitive medical, dental & vision coverage
- 401K with company match for US
- Company-paid life insurance
- Company-paid short-term and long-term disability
- Access to mental health and wellness resources
- Company-paid volunteer time to do good in your community
- Legal coverage and other supplemental options
- A value-based culture where growth opportunities are endless
