Operational Risk Officer

The Role Responsibilities

The purpose of this role is a single point of contact ('SPOC') within Group Operational Risk - Risk Function for all Technology Risk matters, collaborating as appropriate with first line and other second line partners. The role is a Second Line of Defence "challenge" role, supporting the Technology Function to meet their obligations under the Operational Risk Type Framework and Standard and ensuring compliance to the OR-owned Technology Policy.

The applicant would be joining at an exciting time, as the team looks to continually strengthen our second line approach and help the organisation safely adopt new technologies and digitalisation techniques. There is also great opportunity to help influence and support our first line partners in the newly setup Transformation, Technology and Operations function.

Responsibilities

Joining a small team of around 20 staff, who work closely and collaboratively, the role will take ownership or support one or more of the following key Operational Risk activities covering the Technology Function:
• Risk Appetite – Provide support for monitoring risk outcomes are within Technology Risk appetite and challenge the appropriateness of treatment actions. Provide subject matter expertise in improving risk information in support of Risk Appetite.
• Scenario Analysis - Provide support for selecting appropriate scenarios, help drive workshop outcomes with other members of an expert panel and challenge appropriateness of the analysis outcomes in support of the OR-led ICAAP.
• Risk & Control Self-Assessments (RCSA) – Challenge key RCSA steps including Risk Assessments, Control Designs against Standards and Treatment Plans. Support and drive the RCSA Annual Review, Top-Down Reviews and Trigger-Assessments.
• Response Framework – Challenge the 1st Line of Defence assessment of impact and treatment actions for materialised operational risk events (OREs). Challenge the appropriateness of Root Cause Reviews (RCRs) for Material Risk Events (MREs).
• Committee Reporting – Provide support to Group Operational Risk Heads on actionable risk insights on Technology Risk matters that would benefit from escalation to Business and Function Non-Financial Risk Committees and Forums.
• Regulatory – Keep informed of regulatory developments in Technology Risk matters. Provide support for information requests as-needed.