Analyst-Operational Risk Management

B30 – Analyst, Operational Risk Management (ORM) – Independent Monitoring & Testing

The objective of the Operational Risk Management (ORM) Independent Monitoring & Testing team is to strengthen organizational resilience through independent monitoring and testing activities, establish clear standards for reporting and risk assessments, and provide a holistic view of operational risk through aggregated reporting.

Operational Risk Management is seeking an Analyst for the Independent Monitoring & Testing team, focused on ensuring effective operational risk management is embedded into day-to-day business operations. This role requires extensive collaboration across multiple business units, functional areas, and geographies.

The Analyst, Operational Risk Management (ORM), Independent Monitoring & Testing, will:

• Support the independent testing and monitoring program based on an annual risk-assessed plan and established testing methodologies

• Develop a comprehensive operational risk coverage universe that supports a risk-based annual plan

• Independently monitor operational risk trends and activities across the enterprise

• Support and execute an effective challenge process based on defined criteria and integrated into the annual plan

• Perform Test of Design (ToD) and Test of Effectiveness (ToE) activities and maintain associated control testing documentation

• Demonstrate strong knowledge of policies and guidelines related to RCSA, PRCA, Enterprise Risk Management, internal control frameworks, and risk parameters

• Possess an understanding of the Issue Management lifecycle, including issue identification, remediation, validation, and closure processes

• Manage independent Second Line of Defense (2LoD) testing activities, including integration of methodologies and test plans to address interconnected risks