Accountabilities:

Lead and coordinate Risk and Control Self-Assessments (RCSAs) with first-line business, operational, and engineering stakeholders, ensuring risks are consistently identified, evaluated, and rated using established severity and likelihood methodologies.
Maintain and continuously improve enterprise-wide process, risk, and control inventories, ensuring documentation remains accurate, comprehensive, and aligned with the organization's operational activities.
Oversee the implementation and execution of the issues management program, identifying control weaknesses, documenting findings, assigning accountable owners, establishing remediation deadlines, and monitoring progress through resolution.
Assess operational risks associated with new products, services, third-party vendors, blockchain integrations, and regulatory developments before implementation or production launch.
Support the development and continuous improvement of the operational risk management framework, ensuring alignment with regulatory expectations and recognized industry best practices.
Prepare and coordinate supporting documentation and evidence for internal audits, external audits, and regulatory examinations.
Respond to regulatory examiner requests, provide relevant risk documentation, and collaborate with internal stakeholders to ensure timely and accurate responses.
Design, implement, and conduct independent monitoring and testing activities to evaluate the effectiveness of key operational controls.
Identify emerging operational risk trends, assess potential business impacts, and develop recommendations to strengthen the overall control environment.
Prepare and present risk reports, key risk indicators (KRIs), and significant risk themes to senior leadership and relevant risk committees.
Partner with business, engineering, compliance, and operations teams to promote accountability, strengthen risk awareness, and ensure effective remediation of identified control gaps.
Leverage AI-powered tools and technologies to improve the efficiency of research, documentation, risk analysis, and reporting activities.

Requirements

5–7 years of professional experience in operational risk management within a financial services institution, regulated financial technology company, consulting firm, or regulatory organization responsible for developing or enforcing operational risk requirements.
Hands-on experience managing Risk and Control Self-Assessments (RCSAs), maintaining enterprise risk registers, and evaluating risks using established severity and likelihood assessment methodologies.
Strong understanding of operational risk management frameworks, including risk identification, assessment, control design, monitoring, testing, and remediation.
Working knowledge of Office of the Comptroller of the Currency (OCC) regulatory expectations, Basel operational risk principles, SOC 2 requirements, and third-party risk management guidance.
Demonstrated experience preparing audit documentation and regulatory examination evidence, including the ability to respond directly and effectively to examiner inquiries.
Experience identifying control deficiencies, documenting operational issues, developing remediation plans, and coordinating with stakeholders to ensure timely resolution.
Strong understanding of internal controls, enterprise risk management practices, and regulatory compliance requirements within financial services environments.
Excellent analytical and problem-solving abilities, with the capacity to evaluate complex operational processes and identify potential risks and control weaknesses.
Strong written and verbal communication skills, particularly the ability to produce clear, concise risk assessments, reports, and recommendations.
Proven ability to collaborate with business and engineering stakeholders, build consensus around risk ratings, and secure agreement on appropriate remediation strategies.
Strong organizational skills and attention to detail, with the ability to manage multiple risk assessments, audit requests, and remediation initiatives simultaneously.

How Jobgether works

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1