Senior Operational Risk Analyst (Business Continuity Management)

Overview

Responsible for providing independent oversight, challenge, and assurance over the organization's risk and resiliency practices by analyzing contingency activities of varying complexity. Lead in developing new resiliency policies, practices, and solutions to ensure comprehensive understanding and management in accordance to industry best practices

Responsibilities

• Provide independent oversight and review of the organization's business continuity plans, IT disaster recovery (DR) plans, technology continuity strategies, and testing activities conducted by 1st Line teams.
• Oversee and challenge the assessments of critical technology services to evaluate recovery capabilities.
• Plan the research for and development of specialized risk & resiliency assessment scopes, specific to Operational Risk domain / sub domains (Technology, Security, Third Party, Business Resiliency, People, Process, etc.)
• Lead assigned business units through execution of technology resiliency, Issue and Event Management validation and resolution; testing and reporting.
• Collaborate with management and personnel to optimize the technology resiliency scope development, leveraging knowledge of industry norms for Business Continuity Management.
• Identify potential technology resiliency risks, operational and regulatory process deficiencies and improvement opportunities
• Gather and synthesize data; present conclusions and offer risk mitigation, remediation and process improvement solutions to management
• Lead efforts to improve the efficiency and effectiveness of operations and risk mitigation processes
• Prepare and present to management and/or affected business unit summaries, operational and regulatory risk assessment reports, trending, and remedial or mitigation solutions.
• Review appropriate KRIs for Business Continuity Management, considering industry norms, regulatory requirements and prior experience; partner with senior leaders to collaborate with assigned business units on thresholds, reporting, analysis, escalation and issues, as appropriate.
• Assist in drafting Business Continuity Management governance documents with support from teammates and management, and partner with senior leaders to socialize with stakeholders for vetting, publication and monitoring

• Bachelor's degree in Information Technology, Risk Management, Business, or equivalent combination of training, education and experience.
• 3-6 years of experience in Operational Resilience or Business Continuity
• Strong understanding of IT infrastructure, applications, cloud computing, and cybersecurity concepts, with the ability to evaluate resilience from a risk/oversight perspective.
• Knowledge of risk and resilience frameworks: ISO 22301, NIST SP 800-34, ISO 27001, COBIT, ITIL.
• Familiarity with regulatory requirements for financial institutions (FFIEC, OCC, DORA, PRA, FCA, GDPR, HIPAA).
• Proven ability to plan, organize, and execute risk mitigation and process improvement initiatives
• Advanced organizational, planning, and time management skills
• Advanced research and analytical skills
• Advanced collaboration skills with the ability to work across functions to address risk concerns

• Master's Degree in a related field or an equivalent combination of training, education, and experience that provided exposure to or management of ORM-related risk domains
• Relevant certifications such as CBCI, CBCP, MBCP, CBCA, or CBCLA
• Experience in Financial Services, First, Second (ERM, ORM), and/or Third Line Risk Management, or Consulting experience