Job Description
The Enterprise Risk Management (ERM) Risk Consultant ("Program Manager") will lead and manage the execution of the Risk & Control Self-Assessment (RCSA) Program, the execution of the RCSA process, control framework, control assurance, enterprise risk assessments, risk framework, and process framework within the second line of defense. This role will be responsible for risk program maturation (e.g., policy, standards, and procedures) commensurate with Bank's risk profile and risk appetite, along with developing, implementing, and enhancing risk frameworks, programs, and processes to identify, assess, monitor, and mitigate risks. This includes developing, implementing, and enhancing risk control development frameworks and processes to identify, assess, monitor, and mitigate risks. Additionally, this role involves cross-functional collaboration to identify and document risks and controls from various business and operating areas, in addition to mitigating risks and documenting controls in close coordinate with first line of defense; ensuring the requirements are being met, and addressing any gaps, while continually working to enhance the maturity of the Risk Management Program.
Responsibilities - Designs, implements, manages and maintains the Risk and Control Self-Assessment (RCSA) Program and various risk frameworks that supports the RCSA Program, including its governance framework, process documentation (e.g., policy, standards, and procedures), and strategy to align to Bank's risk appetite.
- Coordinates and facilitates the execution of the RCSA process and enterprise risk assessment across the Bank.
- Provides education and support to stakeholders during the RCSA process to ensure RCSAs and other risk assessments performed align to standards and risk frameworks.
- Provides recommendations for improvements to RCSAs and risk assessments, evaluating gaps in assessment coverage.
- Coordinates and facilitates RCSA reports to senior management and the Board, as needed.
- Develops metrics and mechanisms for monitoring, evaluating effectiveness, and identifying deficiencies, and managing the Bank's RCSA processes.
- Builds relationships with key internal stakeholders to ensure risk programs and related processes are being used and adopted effectively across the Bank.
- Collaborates with stakeholders to implement risk mitigation plans effectively and monitoring and reporting on the progress of risk mitigation efforts.
- Maintains an up-to-date control inventory, process inventory and risk inventory.
- Ensures control management process, control development, control effectiveness, and risk mitigation efforts align with the Bank's risk appetite.
- Supports the ERM Department in the development, design, implementation and inventorying controls and processes.
- Develops effective communication strategies to disseminate risk reporting, risk framework, risk activities and risk mitigation statuses throughout the Bank.
- Seeks feedback from stakeholders to identify opportunities for improvement to the risk program, risk mitigation strategies, and risk controls managed in this position.
- Assists or manages other risk programs, as assigned.
Qualifications - 5+ years of experience in risk management or related areas (e.g., Enterprise/Operational Risk, Governance, Compliance), including policy, process and control development associated with financial industry legal, regulatory, risk and compliance obligations. 2+ years of experience in performing a Risk and Control Self-Assessment (RCSA) process.
- Strong knowledge of risk management principles, risk reporting, risk frameworks, and regulatory requirements.
- Experience supporting and managing risk programs, policies, processes, and controls associated with financial industry legal, regulatory, risk and compliance obligations.
- Experience with developing and leveraging risk controls, key risk indicators (KRIs) and assessments to identify, assess, monitor and mitigate risks to ensure alignment with the Bank's risk appetite.
- Experience using Governance, Risk and Compliance (GRC) technologies.
- Solid understanding of regulatory expectations within financial industry and ability to demonstrate compliance and risk-based decisions.
- Familiarity with the 3 lines of defense model.
- Strong communication skills- both verbal and written.
- Demonstrated ability to work independently and collaboratively, escalate items requiring attention, and proactive approach at problem solving and continuous improvement.
Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities
The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information. 41 CFR 60-1.35(c)
Job Tags
For contractors,