Manager, Operational Risk Officer

The Operational Risk Manager leads the oversight and challenge function across some of the most critical risk domains in the business, including resiliency, data integrity and security, offshoring, privacy, technology, fraud, compliance, and other operational and reputational risks. This involves governance, challenge, reporting, metrics, quality assurance, and testing, with visibility and influence into how the enterprise identifies, controls, and evolves its approach to risk.

This role requires knowledge of risk principles, risk-based strategy, three lines of defense, process governance, and methodologies used to identify, mitigate, monitor, and control risk. Excellent communication and presentation skills are important to success and will be used while engaging with a wide range of stakeholders at all levels of the Enterprise including risk oversight committees, business area management, relationship managers, control assessors, project partners, and Senior Leadership. Responsibilities include evolving the oversight and challenge requirements as well as maintaining Enterprise Risk and Governance systems (eGRC) that support the Risk Framework and Governance process.

Key Responsibilities and Duties

• Provide thought leadership and innovative solutions for process improvement and streamlining requirements related to risk and controls assessment and oversight
• Provide guidance and challenge in a wide range of risk categories including data governance, privacy, resiliency, fraud, compliance, and IT among others
• Oversee and challenge compliance with the risk standards across the enterprise
• Govern and support evolution of key risk and performance indicators, risk appetite, and process standards escalating where gaps are identified or additional risk is present
• Monitor the high risk portfolio for concentration, country, resiliency, operational, and reputational risks, escalating to business owners when outside of risk appetite
• Drive the identification and escalation of risks during the risk assessment and monitoring lifecycle
• Lead quality testing efforts to ensure standards are met and identify gaps or training opportunities
• Coordinate Governance Committee activities, approvals, actions items, and agenda
• Define requirements and lead enhancements for the eGRC tool
• Serve as a subject matter expert and escalation point for Operational Risk assessments
• Recommend program and process improvements address changes in regulations, the Enterprise Risk Framework, or risk appetite
• Maintain expertise in regulatory requirements, contracting procedures, the Enterprise Risk Framework, and other relevant policies.

Educational Requirements

• University (Degree) Preferred

Work Experience

• 5 Years Required; 7 Years Preferred

Physical Requirements

• Physical Requirements: Sedentary Work

Career Level
8IC

Qualifications:

Required Skills:

• Minimum five years of experience in risk management is required.

Preferred Skills:

• Third-Party Risk experience is a plus
• Project Management, Vendor Management, or other risk Certification is a plus
• Reporting and analytics experience is a plus: Archer, PeopleSoft, SQL, Excel macros, Tableau, Reporting & Analysis Technologies, eGRC systems, AI Analytics Tools

Anticipated Posting End Date:

Actual base salary may vary based upon, but not limited to, relevant experience, time in role, base salary of internal peers, prior performance, business sector, and geographic location.  In addition to base salary, the competitive compensation package may include, depending on the role, participation in an incentive program linked to performance (for example, annual discretionary incentive programs, non-annual sales incentive plans, or other non-annual incentive plans). 

_____________________________________________________________________________________________________