Senior Operational Risk Management Associate

About Our Company

Key Responsibilities

• Risk Assessments & Independent Oversight - Performs oversight and credible challenge of first-line technology and cyber risk management activities, including Risk and Control Self-Assessments (RCSAs). Reviews risk and control documentation for completeness and effectiveness, identifies potential gaps, and provides recommendations to improve risk management practices and control effectiveness
• Risk Events & Risk of Change Oversight - Provides oversight of Risk Events (REV) and Risk of Change (ROC) processes, ensuring risks are accurately identified, documented, assessed, escalated, and remediated. Supports governance forums through preparation of materials, tracking actions, and monitoring remediation activities.
• Governance, Reporting & Risk Analytics - Develops and maintains risk reporting, dashboards, Key Risk Indicators (KRIs), and management information to support risk governance and decision-making. Analyzes trends, identifies emerging risks, and provides meaningful risk insights to stakeholders and leadership.
• Business Partnership & Risk Advisory - Partners with technology and cyber security stakeholders to promote effective risk management practices, communicate ORM requirements, and provide guidance on risk identification, control design, and remediation activities. Supports audit and regulatory engagements as needed.