ERM/Operational Risk Specialist

I. Role Title ERM/Operational Risk Specialist II. Role Purpose To implement and continuously operate CLIENT's Operational Risk Management Framework by facilitating RCSAs, maintaining the enterprise Risk Register, challenging risk assessments, monitoring KRIs, coordinating risk reporting, and embedding proactive risk management across all Business Units. III. Key Responsibilities a. Operational Risk Lifecycle  Execute and continuously operate CLIENT's Operational Risk Procedures across all Business Units.  Facilitate the end-to-end operational risk lifecycle from risk identification through monitoring, reporting, and periodic reassessment.  Ensure operational risks remain aligned with CLIENT's Risk Appetite and Risk Management Framework. b. Risk & Control Self-Assessments (RCSA)  Plan, facilitate, and document RCSA workshops with Business Units.  Challenge inherent and residual risk assessments using approved methodologies.  Assess control design and operating effectiveness.  Ensure consistent application of CLIENT's likelihood and impact scoring methodology.  Produce finalized RCSA outputs and obtain Business Unit sign-off. c. Enterprise Risk Register  Maintain the enterprise Risk Register.  Ensure risks are accurately documented, categorized, scored, linked to controls, action plans, KRIs, and Business Process Owners.  Monitor changes in residual risk and recommend reassessment where required.  Track risk treatment actions until closure. d. Key Risk Indicators (KRIs)  Develop KRIs for material operational risks.  Define thresholds and escalation triggers.  Monitor KRI performance and identify deteriorating risk trends.  Recommend new KRIs or threshold revisions where appropriate.  Produce periodic KRI reporting. e. Risk Monitoring & Reporting  Monitor emerging operational risks across the organization.  Prepare risk reports for Executive Management, ExCom, GARC and the Board.  Escalate significant risks and appetite breaches in accordance with approved governance requirements.  Track recurring issues and thematic risk trends. f. Risk Events & Lessons Learned  Coordinate operational risk event reporting.  Investigate significant operational incidents alongside Business Units.  Perform root cause analysis.  Ensure lessons learned are incorporated into RCSA and control improvements. g. Risk Advisory  Support Business Units in identifying practical risk treatments.  Provide independent challenge while maintaining a collaborative partnership with the First Line.  Advise on operational risk implications of new initiatives, organizational changes, outsourcing arrangements and major projects. h. Continuous Improvement  Recommend enhancements to operational risk methodologies, templates and reporting.  Support development of risk culture through awareness sessions and coaching.  Contribute to periodic reviews of the Operational Risk Procedures. IV. Experience  5–8 years' experience in Operational Risk, Enterprise Risk Management, Internal Controls, Internal Audit or Governance.  Experience facilitating RCSA workshops.  Experience maintaining enterprise Risk Registers.  Experience designing and monitoring KRIs.  Experience preparing Board and Committee risk reporting.  Experience applying ISO 31000 or COSO ERM frameworks.  Financial services, sovereign funds, private equity or development finance experience preferred. V. Technical Skills  Enterprise Risk Management  Operational Risk Management  Risk & Control Self-Assessments (RCSA)  Risk Registers  Risk & Control Matrices (RCM)  Key Risk Indicators (KRIs)  Root Cause Analysis  Control Effectiveness Assessment  Risk Reporting  Microsoft Excel and Power BI (preferred) VI. Behavioral Competencies  Strong analytical judgement  Structured facilitation skills  Ability to challenge constructively  Excellent stakeholder management  Strong report writing  High attention to detail  Ability to simplify complex risk issues  Independent thinking  Organized and execution-oriented

5–8 years' experience in Operational Risk, Enterprise Risk Management, Internal Controls, Internal Audit or Governance. Experience facilitating RCSA workshops. Experience maintaining enterprise Risk Registers. Experience designing and monitoring KRIs. Experience preparing Board and Committee risk reporting. Experience applying ISO 31000 or COSO ERM frameworks. Financial services, sovereign funds, private equity or development finance experience preferred.