Senior Officer - Operational Risk

Overview

The Senior Officer - Operational Risk position is responsible for supporting the effective implementation and continuous upkeep of the bank's Operational Risk Management (ORM) Framework, ensuring compliance with regulatory standards, internal policies, and enterprise-wide guidelines. The role assists in second-line defense activities such as risk and control self-assessments (RCSA), control testing, key risk indicator (KRI) reporting, business continuity, and identity & access management coordination.

Key Responsibilities

• Facilitate the deployment of the Operational Risk Management program across multiple units, encompassing Business Continuity Management (BCM) and Identity & Access Management (IAM).
• Promote operational risk awareness and culture through best practice dissemination and training support.
• Maintain thorough tracking and monitoring of ORM activities, ensuring timely identification and escalation of emerging risks or issues.
• Assist in periodic reviews and updates of ORM policies and procedures to align with regulatory and internal governance requirements.
• Prepare routine and special reports, management information systems (MIS), and dashboards for committees and senior management.
• Organize governance meetings with risk champions and ensure follow-up on agreed actions and awareness sessions.
• Support business units in identifying risks and controls related to significant processes by facilitating RCSA exercises and performing quality reviews of submissions to guarantee consistency and accuracy.
• Ensure IAM and BCM risks are accounted for within RCSAs and regularly monitored.
• Plan and assist in second-line control testing activities, including preparing samples, scheduling, documenting results, and following up on audit or regulatory findings.
• Oversee timely reporting and documentation of operational risk incidents and loss events per internal guidelines, maintaining the operational risk register.
• Support consolidation and reporting of KRIs with active monitoring of breaches and escalation.
• Assist in reviewing and maintaining Business Impact Analyses, Business Continuity, and Disaster Recovery Plans, coordinating with BCM coordinators to ensure testing and documentation upkeep.
• Evaluate third-party continuity capabilities for outsourced critical services to ensure compliance with BCM standards.
• Support periodic reviews of access rights for key applications, identifying segregation of duties conflicts or unauthorized access, and managing access change requests accordingly.
• Collaborate with project management on integrating ORM, BCM, and IAM requirements in new product and process initiatives.
• Support outsourcing governance activities and track completion of audit findings and risk mitigation actions.
• Partner with internal audit, compliance, IT, and other control functions for integrated risk reviews.
• Contribute to designing and delivering operational risk and BCM training and awareness workshops annually.
• Maintain ORM tools and reporting platforms, assisting end-users with system features.
• Prepare accurate MIS reports, dashboards, and analytical insights from risk datasets.
• Build effective working relationships across the organization to strengthen risk culture and cooperation.
• Undertake additional operational risk projects and assignments as requested by management.

Qualifications & Experience

• Bachelor’s or Master’s degree in Finance, Risk Management, or Business Administration.
• Professional certifications in Risk Management, Business Continuity Management (e.g., ISO 22301, BS 2599, ISO 31000), or related areas are advantageous.
• At least 2 years of banking experience, including a minimum of 1 year in Operational Risk, BCM, Identity & Access Management, controls, or governance functions.

Essential Skills and Attributes

• Demonstrated leadership capabilities to guide and mentor teams within risk management settings.
• Strong analytical skills and meticulous attention to detail.
• Excellent interpersonal, verbal, and written communication skills.
• Team player who balances individual and collective responsibilities and fosters a positive team dynamic.