Senior Analyst, Operational Risk Management

The Core Responsibilities

• Conduct risk and control assessments with business partners to identify operational risks, evaluate control effectiveness, and assess residual risk exposures.
• Plan and perform independent testing of key business controls using established methodologies to assess control design and operating effectiveness.
• Identify control weaknesses and operational risk issues and coordinate remediation efforts with business stakeholders to ensure timely resolution.
• Monitor and oversee issue management activities, including tracking corrective action plans, validating remediation activities, and escalating concerns when appropriate.
• Support the Business Continuity Management program by coordinating Business Impact Assessments, maintaining continuity planning documentation, and facilitating periodic reviews with business units.
• Prepare operational risk reporting, key risk metrics, and management information for committees and senior management stakeholders.
• Maintain operational risk inventories, including risk, control, and issue information, ensuring records remain accurate and current.
• Provide guidance to business units regarding operational risk management practices, control design, and risk mitigation strategies.
• Contribute to the development, maintenance, and enhancement of operational risk management policies, standards, procedures, and supporting documentation.
• Build and maintain effective working relationships with stakeholders across operational, compliance, risk, technology, and business functions to support risk management objectives.
• Support broader enterprise risk management programs and initiatives, including areas such as technology risk, cybersecurity risk, and third-party risk management.

Let's Talk About You

• University degree or college diploma in Business, Finance, Risk Management, Accounting, Economics, Commerce, or a related discipline required.
• Professional certifications such as CRISC, CIA, CBCP, CISA, CRM, or equivalent are considered an asset.
• 5-7 years of total professional experience within risk management, operational risk, internal audit, compliance, business continuity, controls assessment, or a related field.
• Resolver, Archer or other GRC system is considered an asset.
• Strong analytical and problem-solving capabilities with the ability to interpret qualitative and quantitative information.
• Ability to evaluate risks, identify root causes, and develop practical recommendations.
• Strong organizational and project management skills with the ability to manage multiple priorities and deadlines.
• Strong written and verbal communication skills.
• Ability to prepare concise and meaningful reporting for business and risk stakeholders.
• Collaborative relationship-building skills and ability to influence stakeholders without direct authority.
• Demonstrates sound judgment, attention to detail, initiative, and accountability.
• Communication skills required:
• Moderately complex communication involving facilitation of meetings, presentation of assessment results, preparation of reports, provision of advisory guidance, and interaction with stakeholders across multiple business areas.