Operational Risk, Senior Associate

Run Risk and Control Self-Assessments with first-line business and engineering owners, rating risks consistently using Paxos's severity and likelihood methodology

Maintain the enterprise process, risk and control inventory, as well as the firm's individual process, risk and control inventories

Oversee an issues management program, identifying control gaps, documenting them with owners and remediation dates, and tracking them through to closure

Assess operational risk in new products, vendors, blockchains and regulatory changes before they go into production

Prepare evidence for internal audits, external audits and regulatory exams, and respond directly to examiner requests

Design and run independent monitoring and testing of key controls

Report risk themes and key risk indicators to senior leadership and risk committees

5-7 years of experience in operational risk at a financial services institution, a financially regulated company, or a consultancy or regulator that built or enforced operational risk requirements

Hands-on experience running Risk and Control Self-Assessments, maintaining a risk register and rating risks using a defined severity and likelihood methodology

Working knowledge of OCC expectations, Basel operational risk principles, SOC 2 and third-party risk guidance

Experience preparing audit and regulatory exam evidence and responding directly to examiner questions

Clear, concise writing skills and a track record of aligning business and engineering owners on ratings and remediation plans

Comfort using AI tools to speed up research, drafting and analysis