Associate, Technology Risk

Bank OZK•Little Rock, AR

About The Position

Supports the Bank’s first line of defense by assisting with operational risk management, audit and regulatory coordination, and technology governance activities. This role is responsible for helping identify, assess, document, and mitigate technology and operational risks while supporting internal audits, external audits, and regulatory examinations.

Requirements

Knowledge of banking laws and regulations with a working knowledge of those laws and regulations related to bank protection.
Knowledge of Microsoft software and servers, Cybersecurity activities, and Identity Access Management.
Ability to communicate effectively both verbally and in writing.
Ability to demonstrate initiative to accomplish work objectives.
Ability to work effectively and demonstrate flexibility in a continually changing environment.
Ability to demonstrate effective organization, critical thinking, analytical, and problem-solving skills.
Ability to manage multiple tasks with exacting deadlines in a fast-paced environment.
Ability to produce documents, presentations, and analyses in a meaningful format.
Ability to work without close supervision.
Ability to travel occasionally on company business.
Skill in using computer and Microsoft Office, including Outlook, Word, Excel and PowerPoint.
Bachelor’s degree or commensurate work experience
2+ years of work experience in technology operational risk, compliance, audit, information security, or governance in information technology, preferably in the banking or financial industry, required.
1+ year of work experience participating in and/or performing risk assessments preferred
Professional certification related to operational risk management, audit, cybersecurity, or database administration
Familiarity with technology governance, risk management, access controls, or cybersecurity concepts preferred.

Nice To Haves

1+ year of work experience participating in and/or performing risk assessments preferred
Professional certification related to operational risk management, audit, cybersecurity, or database administration
Familiarity with technology governance, risk management, access controls, or cybersecurity concepts preferred.

Responsibilities

Provides oversight of operational risk within OZK Technology and other related groups and provides adequate reporting to senior management.
Serves as a liaison with Operational Risk Management (ORM) to manage risk control self-assessments (RCSA).
Assures key controls for the assigned business unit(s) processes are mapped and monitored, analyzes test results, and acts on the failures to avoid reoccurrence.
Validates key controls are identified, mapped, monitored, and operating effectively; tracks remediation of identified control deficiencies.
Participates in the creation and modification of related governance documentation for the assigned business unit(s).
Assesses risk when business decisions are made, demonstrating consideration for the Bank’s reputation, and safeguarding the Bank and the customers.
Contributes to the review of internal processes and activities and assist in identifying potential opportunities for improvement.
Supports the assigned business unit(s) to identify, reduce, and maintain the related residual risks.
Maintains current knowledge of present and evolving technologies, threats, and regulations enforced by the FFIEC, FDIC, and other relevant federal / state supervisory agencies.
Simultaneously manages three to seven audits while being adaptable to changing priorities.
Works closely with leadership to gather or obtain requested informational artifacts to submit to the auditors within required timelines.
Produces accurate, detailed, and timely work while meeting commitments and following policies and procedures.
Provides risk and control information and artifacts to ORM within the required timeline.
Efficiently works with moderate supervision requiring assistance in prioritizing initiatives.
Communicates effectively both verbally and written with all levels of the organization.