Manager/Senior Manager, Operational Risk & Controls

KOHO

1d•CA$110,000 - CA$140,000•Remote

About The Position

We’re looking for a highly motivated Manager/Senior Manager, Operational Risk Management to join our Operational Risk Management (ORM) team. Reporting to the Director, ORM, this role will execute and enhance our risk assessment processes and drive the tactical delivery of the Second Line Controls Testing program. The ideal candidate will bring strong experience in controls testing and operational risk management, with a passion for leveraging AI, automation, and innovative technologies. At KOHO, we’re not your average 9-5. We believe real impact comes from people who are trusted, empowered, and supported to do their best work - without sacrificing their lives to do it. We prioritize work-life integration, not just work-life balance. That means asynchronous collaboration, flexible hours, and a remote-first setup built around autonomy and high trust. KOHO is entering its next chapter - leaner, smarter, more AI-integrated. We’re building for impact, not bureaucracy. If you thrive in environments that value clarity, ownership, and bold thinking, you’ll fit right in.

Requirements

7+ years in operational risk, controls testing, internal audit, or compliance within financial services.
Solid understanding of the connectivities across non-financial risk domains (compliance, third party, business continuity, tech/cyber, etc.).
Strong analytical, critical thinking, communication, and interpersonal skills.
Worked in regulated fintech, neobank, or direct-to-consumer financial institutions.
Passionate about innovation, inclusion, and empowering financial wellness.

Responsibilities

Evolve KOHO’s operational risk management framework and practices aligned with applicable OSFI Guidelines (E-21, B-10, E-13) and banking industry standards.
Lead end-to-end development and implementation of a Second Line Controls Testing program, including methodology, governance, and reporting standards.
Identify emerging operational risks and trends and develop implementation strategies.
Lead and own the day-to-day operations of the Second Line Controls Testing program, ensuring timely completion of testing activities in accordance with established methodology and standards.
Lead the development of the annual Controls Testing plan, including risk-based scoping and prioritization of testing activities.
Develop and maintain test scripts, workpapers, and documentation to support testing conclusions and findings and improve program quality and consistency.
Prepare testing status reports and summaries for Management review and Risk Committee reporting
Track and monitor remediation activities, partnering with First Line business owners to ensure timely closure of identified issues.
Establish and implement Business Process Outsourcing (BPO) for independent controls testing execution; Develop and maintain a quality assurance (QA) process to ensure completeness, accuracy, and quality of BPO agent outputs.
Perform and/or oversee the independent testing of First Line controls to assess design effectiveness, operating effectiveness, and control suite coverage across key business processes and risk areas.
Support the execution of enterprise-wide Risk and Control Self-Assessments (RCSAs), partnering with 1st Line business units to identify, assess, and document operational risks and controls.
Support the operational risk event and loss data collection process, assisting in root cause analysis and trend identification.
Assist in the preparation of thematic reviews and lessons learned analyses to drive continuous improvement in the control environment.
Build and maintain strong working relationships with First Line business partners, serving as a collaborative and constructive partner in risk management activities
Partner with colleagues in Compliance, Risk Management, and Internal Audit to ensure integrated risk oversight and coverage.
Identify opportunities to leverage AI, machine learning, RPA, and data analytics to enhance controls testing and risk assessment efficiency.
Support deployment of automated testing scripts, intelligent workflows, and advanced reporting tools.
Collaborate with Technology teams to evaluate and implement emerging RegTech solutions.
Stay current on industry trends, regulatory developments, and best practices in operational risk management and controls testing.