Senior Operational & Financial Risk Analyst

WEX•Midvale, UT

1d•$85,000 - $106,500

About The Position

As a Senior Operational & Financial Risk Analyst in WEX Bank’s Second Line of Defense (2LoD), you will provide independent risk oversight across the Bank’s Entity-Level Risks and Controls, with direct management of the Primary Risks (split 50/50 between direct Bank operations and Parent services delivered via a Master Services Agreement). You will drive the complete automation of the Bank's central risk metric library, monitor 1LoD operational and policy metrics to ensure timely escalation of control breaches to the Entity Risk Management Committee (eRMC), and execute ad hoc 2LoD testing for emerging risks.

Requirements

5–8 years in banking enterprise risk, operational risk, or internal audit
3–4 years focused on 2LoD testing, control validation, and metric oversight
Hands-on experience with GRC systems (e.g., Logicgate, Jira)
Hands-on experience with data automation tools (SQL, Tableau)
Deep understanding of entity-level risk taxonomies
Deep understanding of operational and technology control frameworks (COSO, SOC, NIST)
Deep understanding of intercompany MSA/SLA oversight in a regulated bank setting

Nice To Haves

CERP, or CRMP certifications

Responsibilities

Execute independent 2LoD monitoring and testing across all Entity-Level Risks.
Take direct ownership of 2LoD oversight for the Primary Risks, evaluating both internal Bank controls and shared services delivered by the Parent company under the MSA.
Conduct routine 2LoD post-decision sample reviews on originated credits over $150k to evaluate qualitative underwriting judgment and policy compliance, reporting trends and actionable insights to the eRMC and Chief Credit Officer to drive credit policy updates and 1LoD training.
Build and maintain a centralized, complete, and accurate risk metric library.
Implement data automation pipelines (leveraging GRC platforms, SQL, or reporting tools) to eliminate manual monthly updating and ingestion workflows.
Continuously monitor 1LoD operational and policy risk metrics.
Evaluate metric trends and control breaches that contribute to entity-level risks, preparing escalation packages and data for the ERMC according to established risk thresholds and bank procedures.
Conduct rapid-response, ad hoc 2LoD risk evaluations and testing for emerging risks (e.g., sudden operational incidents, new technology implementations, market shifts) that fall outside the annual testing schedule.
Serve as the primary 2LoD testing contact for parent-provided technology and operational services, validating that parent-executed controls meet Bank risk appetite standards and SLA terms.