Head of Operational Risk Management – Mobility

S&P Global Mobility • New York, NY

6d • Remote

About The Position

Join a best-in-class global legal team committed to delivering timely, practical and actionable risk leadership that enables informed decision-making and safeguards our reputation, people, and assets. This position reports directly to the Head of Enterprise Risk Management, who reports to the Chief Risk, Compliance and Privacy Officer of Mobility. The Head of Operational Risk Management is a senior risk leader responsible for designing, implementing, and sustaining operational risk management frameworks supporting a business of approximately $1.8 billion in revenue and approximately 3,500 employees worldwide. This role leads operational risk strategy, governance, identification, assessment, mitigation, monitoring, and reporting across key operational risk domains – including business process risk, third-party risk, client due diligence, financial operational risk, and operational aspects of strategic, reputational and transformation risks – while fostering a strong risk culture. The Head of Operational Risk Management partners closely with business leaders, the Head of Technology Risk, the Head of Enterprise Risk Management, compliance, legal, internal audit, and other stakeholders to ensure effective risk-aware decision-making and operational resilience. This role will manage the Senior Manager, Client Due Diligence. The ideal candidate will bring deep knowledge of operational risk management, strong business judgment, and the ability to partner with leadership to proactively identify, assess, and mitigate operational risks across the organization. They will combine strategic vision with operational rigor to embed a risk-aware culture, drive informed decision-making, and strengthen the organization's operational effectiveness and long-term sustainability.

Requirements

• 10+ years of progressive operational risk management experience in complex, regulated, or technology-enabled organizations
• Bachelor's degree in Risk Management, Business, Finance, Engineering, or related field preferred
• Demonstrated experience building or maturing operational risk management frameworks
• Deep expertise in operational risk domains including business process risk, third-party risk management, and client due diligence
• Experience advising leadership and cross-functional stakeholders on operational risk matters
• Prior experience with risk tools, data analytics for risk monitoring or modern risk platforms
• Proven capability to manage high-volume, complex environments with sound judgment and adaptability.
• Fosters inclusivity and manages emotions to achieve optimal business outcomes.
• Able to effectively pivot direction and collaborate across teams to meet strategic initiatives
• Exceptional business judgment and strong problem-solving abilities.
• Adept at articulating business needs and defining actionable strategies.
• Actively seeks input from diverse sources to ensure engagement and influence stakeholder buy-in at all levels
• Excellent communication and interpersonal skills, with a demonstrated passion for the business
• Operates autonomously while also being a collaborative team player who brings a positive, "can do" attitude to the workplace.
• Works effectively with other members of the Compliance, Risk and Privacy team, internal clients, and cross-functional organizations to influence and develop strategic initiatives
• Ability to work independently as an individual contributor while building toward team leadership
• Experience in building teams and developing talent (as the role will evolve to include team leadership)

Responsibilities

• Develop and deploy the operational risk strategy in alignment with the enterprise risk framework and the company's strategic objectives and risk appetite
• Establish and maintain operational risk governance structures, frameworks, policies and standards
• Support operational risk committees, coordinate agendas and track action items
• Advise leadership on operational risk priorities, trends and emerging threats
• Drive operational risk identification and assessment processes across all functions and business units
• Maintain operational risk registers, risk heat maps and risk taxonomy aligned to the enterprise
• Facilitate risk workshops and scenario analysis to capture evolving operational risk exposures
• Conduct risk assessments for new products, services, processes and business initiatives
• Lead the design and implementation of operational risk mitigation strategies and controls
• Work with business and control owners to strengthen operational control environments and close gaps
• Ensure operational risks are appropriately escalated and managed within risk appetite thresholds
• Monitor control effectiveness and recommend enhancements
• Provide oversight of operational risk within business processes, workflows and critical initiatives
• Partner with business leaders to embed risk controls into operational activities
• Conduct loss event investigations, root cause analysis and lessons learned
• Support change-risk assessments for strategic and transformational activities, focusing on operational risk implications
• Assess operational risks associated with business model changes, market expansion and new ventures
• Assess and manage operational dimensions of strategic and reputational risks
• Partner with business leaders to identify operational risks that could impact strategic objectives or organizational reputation
• Support development of mitigation strategies for operationally-driven reputational exposures
• Monitor operational risk events that could have strategic or reputational implications
• Lead the operational execution of the Third-Party Risk Management (TPRM) program under the strategic oversight of the Head of Enterprise Risk Management, establishing a risk-based framework for onboarding, due diligence, monitoring and offboarding of vendors, suppliers and partners
• Oversee identification, assessment and prioritization of third-party risks – including operational, financial, regulatory and reputational exposures – and ensure timely escalation to leadership
• Assess operational dependencies and concentration risk from critical third parties
• Partner with procurement, legal, compliance, the Head of Technology Risk and business owners to integrate risk mitigation, contractual controls and compliance obligations into third-party relationships
• Collaborate with the Head of Technology Risk on third-party technology vendors to ensure comprehensive risk coverage from both operational and technology perspectives
• Drive continuous improvement, reporting and analytics to enhance visibility, monitoring and resilience of critical third-party dependencies
• Provide regular TPRM program updates and insights to the Head of Enterprise Risk Management
• Establish and maintain client due diligence frameworks and processes to assess and manage risks associated with customer relationships
• Oversee client onboarding risk assessments, including evaluation of reputational, financial, regulatory and operational risks
• Partner with sales, legal, compliance and business teams to ensure appropriate due diligent responses are maintained
• Establish and maintain operational risk dashboards, key risk indicators (KRIs), and risk reporting protocols
• Provide timely operational risk insights to senior leadership, the Head of Enterprise Risk Management and risk governance bodies
• Monitor operational risk trends and make actionable recommendations to mitigate exposures
• Track and report on operational risk events, near-misses and control failures
• Support enterprise risk reporting with operational risk data and analysis
• Assess the effectiveness and timeliness of operational risk responses and control actions
• Recommend corrective actions and track implementation to closure
• Ensure continuous improvement of operational risk processes and tools
• Conduct post-incident reviews and implement lessons learned
• Champion a strong operational risk culture across the enterprise
• Promote operational risk ownership at all levels and enhance risk literacy throughout the organization
• Develop and deliver operational risk training programs and awareness campaigns
• Serve as a trusted advisor and subject matter expert on operational risk matters
• Partner closely with the Head of Technology Risk to ensure seamless management of risks at the intersection of operations and technology, including operational aspects of technology risks
• Provide operational risk inputs to operational resilience planning led by the Head of Technology Risk

Benefits

• Health care coverage designed for the mind and body.
• Generous time off helps keep you energized for your time on.
• Access a wealth of resources to grow your career and learn valuable new skills.
• Secure your financial future through competitive pay, retirement planning, a continuing education program with a company-matched student loan contribution, and financial wellness programs.
• Best-in-class benefits for families.
• Retail discounts
• Referral incentive awards

What This Job Offers

• Job Type: Full-time
• Career Level: Senior