Operational Risk Manager

Centier Bank•Merrillville, IN

About The Position

Based within the Enterprise Risk Management (ERM) Group, the Operational Risk Manager is responsible for leading a team of analysts and officers that lead the build-out and evolution of the Bank's Second Line Operational Risk function, including Business Resiliency. This role requires deep banking industry experience, strong theoretical and practical knowledge of risk management, and an aptitude for cross-functional collaboration; and the ability to build partnerships and influence stakeholders toward improved risk management outcomes is key to success.

Requirements

Working knowledge of MS Office Software Suite (Word, Excel, Access, PPT, PowerBI).
Must have excellent written, verbal, and presentation skills.
Strong analytical skills.
Must have the ability to prioritize and stay organized.
Collaborative team player and demonstrated ability to be flexible and easily shift among various tasks and projects.
Self-motivated and able to work effectively both independently and as a team.
Ability to take initiative to find answers by researching and asking questions.
Ability to communicate effectively with others and provide world class experience. This includes professional and friendly phone and email etiquette, timely responses to inquiries/questions and the prioritization of providing a Wow experience for all clients, whether internal or external.
Bachelor’s degree required with major/concentrations of study in accounting, finance, economics, statistics, or mathematics preferred.
Relevant experience may substitute education requirement; conversely, strong educational background may substitute the experience requirement.
Minimum of 8 years’ experience in banking.
Experience leading teams of risk engagements, projects or teams of professionals.
Knowledge of Federal Deposit Insurance Corporation Improvement Act of 1991, SOC 1 (SSAE 18), SOC 2/3 (Trust Services Principles), NIST, COBIT, GDPR, TCPA, BSA/AML, OFAC, etc.)) preferred.

Nice To Haves

Certified Business Continuity Professional (CBCP) and/or Associate Business Continuity Professional (ABCP) certifications a plus.

Responsibilities

Champion the effective enterprise-wide management of operational risk, supported by end-to-end execution of the Operational Risk Management Program.
Responsible for the build-out and evolution of the Operational Risk Management Program, framework, standards and procedures and ensure alignment with regulatory requirements and best practices.
Responsible for leading and building out an enhanced risk and control framework which supports a continuous and integrated approach to risk assessment.
Evaluate risk and control identification within key processes and perform gap assessments on control coverage as well as first line of defense identification processes.
Manage second line of defense (SLOD) requirements related to the Governance, Risk & Compliance (GRC) application and Risk Assessment Processes.
Oversee the performance of top-down risk analysis, real time control issue detection, escalation, root cause analysis and remediation.
Responsible for the issues management program and process including logging, categorizing, assigning ownership, and tracking remediation plans to ensure timely resolution and closure of issues.
Ensure on-going control improvements and strengthen the existing control environment.
Build knowledge of policies and procedures, to implement necessary enhancements / improvements to minimize operational risk across the three lines of defense.
Participate in project planning as required to assist business in developing appropriate internal control systems or to monitor significant changes in control systems.
Responsible for developing, implementing, and maintaining the Business Resiliency Program, framework, standards and procedures and ensures alignment with regulatory requirements and best practices.
Responsible for developing, implementing, and maintaining the corporate business continuity program including risk assessments, business impact analyses (BIAs), recovery plans, etc.
Responsible for identifying business recovery strategies with management as the organization becomes more complex and large scale.
Responsible for maintaining the enterprise-wide Incident and Crisis Management Program.
Responsible for planning, performing, and debriefing regular resilience and continuity exercises to test the adequacy of existing plans and strategies, updating all components of Continuity planning leveraging test and exercise results.
Create training and awareness presentations or materials for Business Resiliency, Incident, and Crisis Management Programs.
Foster an environment among program participants of business resilience and recovery preparedness.
Prepare and present reports and presentations to the Enterprise Risk Management Committee and executive leadership team.
Responsible for supporting the configuration, maintenance, optimization, and ongoing administration of the GRC solution for both the Operational Risk and Business Resiliency modules.
Aggregate, structure, and analyze complex quantitative and qualitative data to derive actional insights for senior management.
Maintain constructive relationships with cross-functional teams across the Three Lines of Defense.
Develop executive summaries and presentations to communicate complex risk data using storytelling techniques and a value-add perspective.
Coordinate and review Key Data Indicators for collection, recording, and consolidation.
Prepare and present reporting to management and senior leadership.
In absence of Risk Director, will communicate with management level committees.