Operational Excellence Specialist

Divisional Risk and Control Analyst - Opportunity to Enhance Operational Efficiency

Our organization's infrastructure functions require effective operation, driving operational efficiency while supporting the delivery of infrastructure services in line with business objectives and control requirements. This encompasses oversight of Infrastructure Divisional Control Office (DCO) and Trade Settlement and Confirmations Operations (TSCO).

The Infrastructure Divisional Control Office (IDCO) is a dedicated risk, control, and regulatory oversight function. It has prime responsibility for managing and proactively mitigating risk across our Technology and Infrastructure organization. The IDCO function provides services to multiple functions in infrastructure, offering a consolidated view and central coordination of non-financial risks.

Additionally, the IDCO function ensures effective, efficient, and consistent standards and policies. Our team focuses on regulatory and risk-based assurance requirements, conducting independent controls testing to identify, track, and report control testing & assurance activities. We also conduct controls testing on different risk types in line with Control Testing Standards.

• Perform control testing in accordance with defined Control Testing methodology/minimum standard
• Identify control deficiencies, participate in findings agreement with stakeholders, escalate potential issues and exception items to senior management for discussion and further investigation if deemed necessary
• Prepare control testing workpapers detailing testing results and document findings with highest quality
• Track control testing identified findings, perform required follow-up on open findings
• Consider regulatory and internal firm policy requirements as well as established best practices for control assurance
• Support controls assurance activities
• Support monitoring control testing teams' adherence to Control Testing methodology/minimum standards
• Track testing related effort/budget plan vs actuals throughout the testing lifecycle
• Build solid working relationships with key stakeholders such as within the DCO, IDCO, TSCO, GTI, Embedded Risk Teams (ERT), Risk managers, and other testing teams including divisions/sub-divisions, 2 LoD, and Group Audit (GA)

• University degree preferably in Computer Science, Mathematics, Engineering or a related subject or equivalent qualification in areas of information security
• Professional/industry recognized qualifications e.g CISA, CISSP, CISM, CRISC are beneficial
• Experience in Cloud Security audit/testing, GCP (Google Cloud Platforms) or professional/industry recognized qualifications e.g CCSP, CCSK will be an advantage
• Knowledge of auditing IT application controls, e.g from IT audits or IT risk management
• Understanding of relationship between IT risk and underlying business process risk
• Knowledge of regulations governing financial institutions is beneficial
• Strong written and verbal communication skills and ability to communicate effectively in conflict situations
• Strong organizational skills and attention to detail
• Ability to work under pressure, multi-task and prioritize workload
• Strong analytical skills and structured thought process with ability to clearly articulate control deficiencies and related risk
• Flexible, proactive, and innovative mindset with strong organizational skills to take ownership and responsibility for agreed targets and meet them within budget to enable timely and efficient completion of projects