Senior Analyst, Operational Risk Management

The Core Responsibilities

• Conduct risk and control assessments with business partners to identify operational risks, evaluate control effectiveness, and assess residual risk exposures. 

• Plan and perform independent testing of key business controls using established methodologies to assess control design and operating effectiveness. 

• Identify control weaknesses and operational risk issues and coordinate remediation efforts with business stakeholders to ensure timely resolution. 

• Monitor and oversee issue management activities, including tracking corrective action plans, validating remediation activities, and escalating concerns when appropriate. 

• Support the Business Continuity Management program by coordinating Business Impact Assessments, maintaining continuity planning documentation, and facilitating periodic reviews with business units. 

• Prepare operational risk reporting, key risk metrics, and management information for committees and senior management stakeholders. 

• Maintain operational risk inventories, including risk, control, and issue information, ensuring records remain accurate and current. 

• Provide guidance to business units regarding operational risk management practices, control design, and risk mitigation strategies. 

• Contribute to the development, maintenance, and enhancement of operational risk management policies, standards, procedures, and supporting documentation. 

• Build and maintain effective working relationships with stakeholders across operational, compliance, risk, technology, and business functions to support risk management objectives. 

• Support broader enterprise risk management programs and initiatives, including areas such as technology risk, cybersecurity risk, and third-party risk management. 

Let's Talk About You

• University degree or college diploma in Business, Finance, Risk Management, Accounting, Economics, Commerce, or a related discipline required. 

• Professional certifications such as CRISC, CIA, CBCP, CISA, CRM, or equivalent are considered an asset. 

• 5-7 years of total professional experience within risk management, operational risk, internal audit, compliance, business continuity, controls assessment, or a related field.  

• Resolver, Archer or other GRC system is considered an asset.  

• Strong analytical and problem-solving capabilities with the ability to interpret qualitative and quantitative information. 

• Ability to evaluate risks, identify root causes, and develop practical recommendations. 

• Strong organizational and project management skills with the ability to manage multiple priorities and deadlines. 

• Strong written and verbal communication skills. 

• Ability to prepare concise and meaningful reporting for business and risk stakeholders. 

• Collaborative relationship-building skills and ability to influence stakeholders without direct authority. 

• Demonstrates sound judgment, attention to detail, initiative, and accountability. 

• Communication skills required: 

• Moderately complex communication involving facilitation of meetings, presentation of assessment results, preparation of reports, provision of advisory guidance, and interaction with stakeholders across multiple business areas.