Senior Operational Risk Analyst

StoneX Group • Chicago, IL

1d • Hybrid

About The Position

StoneX Group Inc. is seeking an experienced Senior Operational Risk Analyst to lead the operational risk program for its North America legal entities. The position is based in the Chicago office and reports to the Operational Risk Manager. The analyst supports execution and ongoing enhancement of the organization's Operational Risk Management framework, with primary responsibilities across Risk and Control Self-Assessments (RCSAs), incident management, control testing, independent review and challenge, and operational risk governance and reporting.

The role partners with business and functional stakeholders to identify and assess operational risks, evaluate control design and effectiveness, analyze incidents, challenge risk assessments and remediation activities, and provide management with timely, meaningful risk information. It requires analytical skills, sound risk judgment, attention to detail, and the ability to translate risk information into actionable insights for business leaders, Risk Management, and governance committees.

The working style is four days per week onsite and one day per week remote. The hiring salary range is $90,000–$110,000. Salary depends on the applicant's education, experience, knowledge, skills, abilities, internal equity, and market data. Subject to business performance and management recommendations, the role may be eligible for incentive compensation. A range of medical, financial, and other benefits is offered, depending on the position.

Requirements

• Relevant experience in Operational Risk, Enterprise Risk Management, Internal Controls, Audit, Compliance, or another risk and control discipline.
• Practical experience conducting or supporting RCSAs, risk assessments, control assessments, or similar risk management processes.
• Experience analyzing operational risk incidents, control failures, or risk events.
• Working knowledge of control design and operating effectiveness principles.
• Experience performing control testing, risk reviews, audit testing, or equivalent assurance activities.
• Demonstrated ability to critically evaluate information and provide effective review and challenge.
• Strong analytical, documentation, and problem-solving skills.
• Ability to analyze data, identify trends, and communicate meaningful risk insights.
• Strong written and verbal communication skills.
• Ability to manage multiple priorities and deadlines in a dynamic environment.
• Bachelor's degree in Risk Management, Business, Finance, Accounting, Economics, or a related discipline, or equivalent professional experience.

Nice To Haves

• Experience within financial services or another highly regulated industry.
• Knowledge of operational risk management frameworks, risk taxonomies, risk appetite frameworks, and governance practices.
• Experience preparing Operational Risk reporting for senior management or risk committees.
• Experience with Governance, Risk and Compliance (GRC) platforms or Operational Risk technology.
• Experience participating in regulatory, internal audit, or independent assurance reviews.
• Advanced proficiency in Microsoft Excel and PowerPoint; experience with data visualization or analytics tools is advantageous.

Responsibilities

• Coordinate and execute RCSA activities across assigned businesses and functions in accordance with the company's Operational Risk framework and methodology.
• Partner with stakeholders to identify and assess key processes, operational risks, and controls; facilitate RCSA workshops and discussions.
• Evaluate inherent risk, control effectiveness, residual risk, and alignment with risk appetite and assessment criteria; review the quality and completeness of documentation and evidence.
• Independently review and challenge business risk assessments, control evaluations, and residual risk conclusions; identify inconsistencies, emerging risks, and control weaknesses.
• Monitor RCSA remediation activities and support enhancements to RCSA methodology, guidance, tools, and reporting.
• Support identification, assessment, documentation, escalation, and reporting of operational risk incidents and losses; review classifications, impacts, root causes, control failures, and remediation actions.
• Facilitate or challenge root cause analysis for significant or recurring incidents, identify trends and broader control issues, and monitor remediation through completion.
• Assess whether incidents require reassessment of related RCSA risks, controls, or other framework elements, and support escalation of material incidents.
• Plan, coordinate, and execute risk-based control testing; assess control design and operating effectiveness and define testing procedures, evidence requirements, sampling approaches, and evaluation criteria.
• Obtain and evaluate control evidence, maintain complete testing documentation, communicate deficiencies, and work with control owners on remediation and validation.
• Identify common control themes and systemic weaknesses; support enhancements to testing methods, procedures, documentation standards, and quality assurance.
• Provide objective second-line review and challenge of operational risk activities, including risk ratings, control assessments, remediation plans, risk acceptances, and closure conclusions.
• Escalate material concerns, overdue actions, recurring weaknesses, or exposures outside risk appetite; document review and challenge rationale, evidence, conclusions, and management responses.
• Prepare regular operational risk reporting for senior management, risk committees, and other governance forums; support committee materials and management presentations.
• Develop and maintain KRIs, KPIs, risk appetite metrics, dashboards, and other management information; analyze data across risk processes and explain significant movements and trends.
• Monitor outstanding actions, overdue assessments, deficiencies, incidents, and other operational risk deliverables; help ensure reporting is accurate, complete, timely, and supported by data.
• Analyze operational risk data across RCSAs, incidents, testing, issues, audit findings, KRIs, and other sources to identify emerging risks, concentrations, recurring events, and control themes.
• Monitor business, operating environment, technology, regulatory, and external changes that may affect the organization's operational risk profile; support dashboards, analytics, and data quality reviews.
• Support implementation and enhancement of the Operational Risk Management framework, including policies, standards, methodologies, procedures, systems, workflows, reporting, and automation.
• Participate in risk transformation and remediation initiatives and support regulatory examinations, internal audits, compliance reviews, and other independent assessments.
• Build relationships with business leaders, risk owners, control owners, and first- and second-line stakeholders; provide guidance on operational risk expectations and communicate findings constructively.
• Collaborate with Compliance, Internal Controls, Information Security, Technology Risk, Third Party Risk Management, Business Resilience, and other risk disciplines; promote risk ownership and business accountability.

Benefits

• A range of medical, financial, and other benefits, dependent on the position.
• Potential eligibility to participate in an incentive compensation plan, subject to business performance and management recommendations.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior