Our client is an international bank providing banking services including traditional corporate transactions, investment banking and trading.
THE RESPONSIBILITIES:
The role holder covers all components of the operational risk framework including Risk and Control Self Assessments, Incidents, Scenario Analysis, and Key Indicators with a focus on IT and Information Security risks. Potential activities include, but are not limited to:
Maintain and enhance the Operational Risk Framework, policy/processes and tools, including review and revisions where necessary;
Provide consultation, guidance and support on operational risk management to the business;
Provide training and awareness on operational risk management and framework components, tools and systems across the bank (as required);
Provide independent oversight and challenge to the business operational risk management activities and risk profile such as:
– Material risks are appropriately identified, assessed and managed;
– Control assessment and assurance programs are effective and appropriate;
– Action Plans are effective and adequate to address the risk within the risk tolerance of the bank;
– Key risk indicator trends / breaches monitored and appropriate actions plans in place where required;
– Incidents are captured, assessed and adequately managed including root cause analysis;
– Scenario analysis cover the bank’s material risks and are assessed appropriately including potential future risk mitigation;
– Material change / projects or new / change products identify material operational risks (new or increased) and appropriately mitigation is in place where required.
– Assess the effectiveness of the operational risk framework applied in the business.
Monitor and report operational risk exposure against management limits and Board risk tolerance.
Lead and/or assist in ad hoc targeted and / or responsive deep dives/thematic reviews into operational risk areas of interest (as appropriate);
Perform analysis and interpret operational risk data for emerging trends and produce regular/ad-hoc reporting for senior management and risk governance forums on the material operational risks within the Bank;
Support and maintain the operational risk system (support the system owner in their duties);
Build and maintain relationships with key business / other relevant stakeholders (i.e. Group, SMEs) to be a trusted advisor/partner.
EXPERIENCE REQUIRED:
Have a good understanding of business operations & culture
Have experience and understanding of IT risk management in the Financial Services Industry (preferably within second line or Internal Audit);
Be able to demonstrate strong communication skills, both written and verbal including being able to translate risk matters to non-risk professionals (& IT risk to non IT professionals) in a clear or simple way;
Have experience of changing and building and/or operating industry good practice IT Risk Management processes;
Have knowledge and experience of technology practices/frameworks such as ITIL, COBIT, NIST
Be comfortable challenging and influencing stakeholders including senior management;
Be approachable and also be proactive to engage with the business;
Be able to balance the risk and reward and being prepared to make a decision / recommendation;
Be able to provide an independent view of risks and having the courage to express them;
Be able to work on their own initiative and enjoy the responsibility of delivering outcomes;
Be highly organised yet flexible.
For further information please contact Natalie Antat
