Operational Risk Manager

Orange Bank & Trust Company•City of Middletown, NY

About The Position

The Risk Manager is responsible for developing, implementing, and maintaining an enterprise-wide operational risk management framework. This role ensures that operational risks across all business lines are identified, assessed, monitored, and mitigated in alignment with regulatory expectations and the Bank’s strategic objectives. The position collaborates with senior leadership and business units to embed risk awareness into daily operations and supports the CRO in advancing the Bank’s Enterprise Risk Management (ERM) program.

Requirements

Bachelor's degree in finance, accounting, information technology, or related field.
At least 10-15 years of relevant work experience in financial services/risk management
Strong understanding of financial concepts, data analysis, and reporting.
Excellent problem-solving skills with a keen attention to detail.
Strong communication and interpersonal skills for effective collaboration and user support.
Strong background in risk management, internal control management and operations.
Confidentiality – This position requires a high level of confidentiality. This position has access to customer’s financial information and personal information.
Communication – This position will have contact with the public and departments. Must be able to communicate effectively and have strong oral and written communication skills.
Multitasking/Sound Judgment – Needs the ability to multitask, quick and accurate decisions and be organized. Decisions need to be made in the best interest of the bank while mitigating any risk to loss. Must be able to handle various processes at the same time and be able to work, under tight deadlines.
Computer Skills/Technology – Must have proficiency with Microsoft Outlook, Word, Excel, Power Point.

Responsibilities

Design and maintain the Bank’s operational risk management framework, including risk identification, assessment, control evaluation, and monitoring.
Track and report operational risk events, losses, and emerging risks; ensure timely escalation and remediation.
Support the CRO in executing and enhancing the ERM framework, including risk appetite statements, key risk indicators (KRIs), and risk dashboards.
Facilitate risk assessments for strategic initiatives, new products, and significant process changes.
Manage the completion and reporting of risk assessments across the bank.
Coordinate risk reporting for executive management, Board committees, and regulators.
Maintain and update operational risk policies and procedures to ensure compliance with regulatory requirements and industry best practices.
Serve as a subject matter expert on operational risk for internal stakeholders.
Develop and deliver comprehensive risk reports, including operational risk metrics, trends, and scenario analyses.
Assist in stress testing and concentration risk as necessary.
Partner with business units to strengthen internal controls and promote a risk-aware culture.
Provide training and guidance on operational risk management practices.
Prepare documentation and responses for internal audits, regulatory exams, and external reviews.
Ensure timely remediation of audit and regulatory findings related to operational risk.
Oversee third-party risk management program, including due diligence and ongoing monitoring.
Assess operational risks associated with outsourcing arrangements.
Assist in the process of capturing, investigating, and resolving operational risk events and losses.
Ensure root cause analysis and implement corrective actions.
Evaluate the effectiveness of internal controls and proactively recommend enhancements.
Coordinate with Internal Audit and Compliance to ensure control gaps are addressed.