Senior Analyst, Operational Risk Management

The Core Responsibilities

- Conduct risk and control assessments with business partners to identify operational risks, evaluate control effectiveness, and assess residual risk exposures.

- Plan and perform independent testing of key business controls using established methodologies to assess control design and operating effectiveness.

- Identify control weaknesses and operational risk issues and coordinate remediation efforts with business stakeholders to ensure timely resolution.

- Monitor and oversee issue management activities, including tracking corrective action plans, validating remediation activities, and escalating concerns when appropriate.

- Support the Business Continuity Management program by coordinating Business Impact Assessments, maintaining continuity planning documentation, and facilitating periodic reviews with business units.

- Prepare operational risk reporting, key risk metrics, and management information for committees and senior management stakeholders.

- Maintain operational risk inventories, including risk, control, and issue information, ensuring records remain accurate and current.

- Provide guidance to business units regarding operational risk management practices, control design, and risk mitigation strategies.

- Contribute to the development, maintenance, and enhancement of operational risk management policies, standards, procedures, and supporting documentation.

- Build and maintain effective working relationships with stakeholders across operational, compliance, risk, technology, and business functions to support risk management objectives.

- Support broader enterprise risk management programs and initiatives, including areas such as technology risk, cybersecurity risk, and third-party risk management.

Let's Talk About You

- University degree or college diploma in Business, Finance, Risk Management, Accounting, Economics, Commerce, or a related discipline required.

- Professional certifications such as CRISC, CIA, CBCP, CISA, CRM, or equivalent are considered an asset.

- 5-7 years of total professional experience within risk management, operational risk, internal audit, compliance, business continuity, controls assessment, or a related field.

- Resolver, Archer or other GRC system is considered an asset.

- Strong analytical and problem-solving capabilities with the ability to interpret qualitative and quantitative information.

- Ability to evaluate risks, identify root causes, and develop practical recommendations.

- Strong organizational and project management skills with the ability to manage multiple priorities and deadlines.

- Strong written and verbal communication skills.

- Ability to prepare concise and meaningful reporting for business and risk stakeholders.

- Collaborative relationship-building skills and ability to influence stakeholders without direct authority.

- Demonstrates sound judgment, attention to detail, initiative, and accountability.

- Communication skills required:

- Moderately complex communication involving facilitation of meetings, presentation of assessment results, preparation of reports, provision of advisory guidance, and interaction with stakeholders across multiple business areas.