Operational Risk Analyst I / II

Operational Risk Analyst

The Operational Risk Analyst is responsible for implementing business unit specific risk and governance efforts, including the establishment and maintenance of a risk operating model and facilitating the development of risk-based policies and standards. Performs ongoing activities associated with the risk assessment process. Performs ongoing activities for the bank's Business Continuity Plan and oversees Disaster Recovery Testing.

Essential Functions :

Risk & Governance :

• Maintain governance documentation detailing how information should be secured, including the maintenance and development of internal process / procedure documentation, including but not limited to risk, technology, and cybersecurity policies and standards.
• Perform formal risk analysis and self-assessments for processes, leveraging industry standards like CIS, ITIL, and COBIT to build a unique program for assigned business unit.
• Analyze internal controls to ensure compliance with documented and approved standards.
• Ensure that information systems within environment comply with company policies, standards, and procedures.
• Assist with regular risk assessments, including organizing recurring meetings, reviewing and implementing process changes, business and / or support function procedures, internal controls, and assessment and / or development of internal documentation.
• Research and respond to risk and governance questions from business units.
• Drive, and provide advisory and subject-matter expertise, to appropriate support teams and business units for risk and compliance readiness.
• Responsible for tracking and monitoring gaps in the risk and governance program; maintain gap analysis documents, gather necessary information from technology and lines of business to identify areas to improve banking practices.
• Implement the process to identify new assets and perform the risk evaluation process to determine risk ranking.
• Facilitate and liaise with technology leaders and key corporate risk groups (including Internal Audit, Operational Risk Management, Corporate Compliance, Enterprise Risk Management and Legal) to ensure the program is aligned with these groups and meeting obligations.
• Support third-party audits and respond to risk / governance requests from regulators and auditors.
• Demonstrate compliance with all bank regulations for job functions and keep up to date on regulation changes.
• In conjunction with management, ensure compliance with appropriate regulatory and internal policies and procedures, including writing / revising policies and procedures as needed.
• Maintain thorough knowledge of risk and compliance as it relates to the Division.
• Conduct training sessions and other information meetings pertaining to Risk and Governance topics.
• Conduct ongoing Graham Leach Bliley Act (GLBA) assessments as assigned.

Business Continuity Coordination :