Operational Risk Specialist

About the Role: We are seeking a highly skilled Risk Management professional to join our team. The successful candidate will have responsibility for independently challenging and supervising the Operational Risk management of CIB activities on a worldwide scope.

Responsibilities:

• Following-up on exceptions to the global normative framework for ICT risk management, including following-up on exceptions to any ICT procedures and any ICT Risk acceptance or mitigation on the normative framework (controls, procedures and other IT activities).
• Supporting the control on ICT outsourcing risk management through opining on the risk assessments of ICT arrangements, their exit strategies, any notifications to authorities and ensuring data collection and inventory of data pertaining to the specific arrangement in CIB and Group inventories.
• Performance of second level of controls (L2Cs) and other analyses aiming to ensure the appropriate design and effectiveness of the ICT control framework implemented by 1LoD, identification of areas for improvement and any recommendations for improvement.
• Following up on the actions raised by RISK ORM CIB teams for ICT, recommendations from internal audit (Inspection General) and any other supervisory and regulatory bodies.
• Checking and challenging and quality review the ICT incidents collection, reporting and management processes and their follow through during such incidents.
• Checking and challenging the ICT indicators related to risk appetite of CIB and entities.
• Support on the opinion provided on change the bank (CTB) activities for ICT such as ITVCs, Proof of Concepts, Artificial Intelligence (AI) and Digital Assets projects and CSSI committees.
• Production of reports, meeting decks and other deliverables in relation to the above points.
• Assistance in promoting and driving awareness on ICT risks; to assist in organising risk meetings, forums and committees with community members across CIB.

Requirements:

• Suitable experience (5+ preferred) in ICT audit, ICT risk management or ICT continuity.
• Bachelor's degree in information technology, Information Security, Business or Risk Management (or equivalent professional qualification).
• Team player – focus on the success of the whole team. Working well both with others, as well as individually.
• Excellent stakeholder management skills.
• Experience in a 2LoD, Risk function, operations or an ICT Audit role.
• Good listening and analytical skills – being able to come to a thoughtful and business focused conclusion quickly.
• Ability to co-operate and work well with others adopting an approachable style
• Ability to see the customer perspective, i.e. from a business point of view, the most secure solution is not always workable or realistic considering costs and benefits.
• Demonstrating a calm professional approach, with a good understanding of delivery within time constraints and the need to escalate/inform departmental management as appropriate.
• Adapting personal approach to suit situations, individuals, groups and cultures.
• Taking accountability for their actions and be open and honest when things have gone wrong, and celebrating successes when things have gone well.
• Being rigorous and thorough – especially when logging and tracking issues through to conclusion.
• Ability to manage their workload as to meet the realistic targets and priorities set in conjunction with management.
• Demonstrating a high-level of commitment and self-motivation, combined with enthusiasm and a genuine interest in the role of Risk Assessment in business.
• Ability to express views clearly and fluently, both orally and in writing. Considers the audience, avoiding technical jargon wherever necessary and appropriate.