Operational Risk Manager

5 days ago


Montreal, Quebec, Canada SGS Société Générale de Surveillance SA Full time
About the Role

The Risk Management Department at SGS Société Générale de Surveillance SA is seeking a highly skilled Cybersecurity Risk Manager to join our team. As a key member of our Risk Management team, you will play a critical role in evaluating and managing cybersecurity risks across the organization.

Key Responsibilities
  1. Perform full range of technology and information security risk management lifecycle activities, including risk identification, assessment, reporting, and oversight of remediation planning and execution.
  2. Partner with the Chief Information Security Officer (CISO) and IT organizations to establish standards, policies, and develop Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs) for measuring and monitoring cyber risks on a continuous basis.
  3. Develop and manage Information Technology & Information Security Risk Program, using standard risk taxonomy, such as FAIR.
  4. Provide and perform independent assurance and validation activities over common cybersecurity controls that include both administrative and technical.
  5. Assess the accuracy, completeness, and sufficiency of the risk management governance framework, processes, and methodologies.
  6. Identify and define emerging cyber threats and risks to the organization.
  7. Perform effective challenge of all critical and highly sensitive processes & controls, and business continuity.
  8. Develop cybersecurity risk scenarios to identify potential attack vectors and Tactics, Techniques, and Procedures (TTPs) to guide the continuous improvement of the firm's cyber defense posture.
  9. Recommend enhancements to data & technology architectures, processes, and controls to improve cybersecurity, data, and technology risk management capabilities for high-risk processes, regulatory reporting, and risk oversight.
  10. Develop and roll-out tools for the aggregation and surveillance of cybersecurity risk, data risk & technology risk.
  11. Identify legal, regulatory, and contractual requirements, and organizational policies and standards related to data management systems to determine their potential impact on the business objectives.
  12. Expand operational risk processes, data collection, and issues management tools to track and report data related operational risks and issues.
  13. Participate in and review data breaches and technology incident/response escalation processes.
  14. Develop operational resiliency scenarios for stress testing and capital planning activities.
  15. Lead or support selected cybersecurity remediation efforts.
Requirements
  1. Bachelor and/or master's degree in computer science, Engineering, or relevant technical field.
  2. Understanding of financial services specifically within cyber and data privacy related laws, regulations, frameworks, and guidelines (NYSDFS - 23NYCRR500, ECB, GDPR, GLBA, Regulation S-P, etc.).
  3. Experience in assessing design and operating effectiveness of technology controls.
  4. Solid foundation in information technology and information security principles. Familiar with common cybersecurity frameworks and standards such as NIST SP 800-53, NIST CSF, Mitre Attack, FFIEC CAT, CSC Top 20, COBIT, ISO 27000 series.
  5. Previous working experiences in cybersecurity operation and relevant security design knowledge.
  6. Previous work within Risk and/or Information Security/Cyber Security. Ideally, has worked in a 2 LOD Cyber Security Risk function.
  7. Background in IT Risk Assessment, IT Audit, Information security management.
  8. Experience integrating vulnerability and patch management tools with IT/IS risk program. Furthermore, communicate and determine vulnerability remediation priorities.
  9. Knowledge of US IT Security regulatory requirements and environment in financial services industry a plus (i.e. FFIEC, FINRA rules, SEC, NIST cybersecurity frameworks).
  10. Strong leadership skills with ability to lead by influence.
Preferred Qualifications
  1. IT Risk management or governance certifications (CGEIT, CRISC, CISA).
  2. CISSP, CISM, or CISA certifications.
Language

Ability to communicate in English, both orally and in writing, is a requirement as the person in this position will need to collaborate regularly with colleagues and partners in the United States.



  • Montreal, Quebec, Canada Davies Risk Services Full time

    Davies Risk Services is seeking a Risk Management Consultant to engage on an independent contractor basis. The core of this role involves insurance-related assessments; however, the majority of assignments are advisory, aimed at enhancing risk comprehension and focusing on minimizing exposures to reduce incidents, injuries, losses, and claims. As a...


  • Montreal, Quebec, Canada Davies Risk Services Full time

    About the RoleDavies Risk Services is seeking a highly skilled Risk Control Specialist to join our team as an independent contractor. As a Risk Control Specialist, you will work with our clients to identify and mitigate potential risks, ensuring their businesses operate safely and efficiently.Key ResponsibilitiesConduct on-site risk assessments and...


  • Montreal, Quebec, Canada Davies Risk Services Full time

    About the RoleDavies Risk Services is seeking a highly skilled Risk Control Specialist to join our team as an independent contractor. As a Risk Control Specialist, you will work with our clients to identify and mitigate potential risks, ensuring their businesses operate safely and efficiently.Key ResponsibilitiesConduct on-site risk assessments and...


  • Montreal, Quebec, Canada CA CIB Americas Full time

    Operational Risk professional (1LoD or 2LoD) with at least 7 years of experience, knows and understands well Corporate Investment Banking (CIB) products and services, has experience dealing with regulators, and ability to lead and drive change for effective operational risk managementUnderstanding of processes, risks, and related controls within Middle...


  • Montreal, Quebec, Canada Societe Generale Corporate and Investment Banking - SGCIB Full time

    About the RoleWe are seeking a highly skilled Operational Risk Manager to join our team at Societe Generale Corporate and Investment Banking - SGCIB.Key ResponsibilitiesAnalyzing and evaluating operational risks to ensure the bank's compliance with regulatory requirements.Developing and implementing risk management strategies to mitigate potential...


  • Montreal, Quebec, Canada Societe Generale Corporate and Investment Banking - SGCIB Full time

    About the RoleWe are seeking a highly skilled Operational Risk Manager to join our team at Societe Generale Corporate and Investment Banking - SGCIB.Key ResponsibilitiesAnalyzing and evaluating operational risks to ensure the bank's compliance with regulatory requirements.Developing and implementing risk management strategies to mitigate potential...


  • Montreal, Quebec, Canada VIA Rail Full time

    About the RoleVIA Rail is a leader in sustainable mobility, and we're building the future of transportation in Canada. As an Operational Risk Management Specialist, you'll be part of a collective effort to ensure the success of our ambitious projects and infrastructure modernization.Key ResponsibilitiesCollaborate with project managers to identify and assess...


  • Montreal, Quebec, Canada VIA Rail Full time

    About the RoleVIA Rail is a leader in sustainable mobility, and we're building the future of transportation in Canada. As an Operational Risk Management Specialist, you'll be part of a collective effort to ensure the success of our ambitious projects and infrastructure modernization.Key ResponsibilitiesCollaborate with project managers to identify and assess...


  • Montreal, Quebec, Canada KPMG Canada Full time

    About the RoleWe are seeking a highly skilled Operational Risk Management Specialist to join our team at KPMG Canada. As a key member of our team, you will be responsible for providing expert advice and guidance on operational risk management to our clients.Key ResponsibilitiesConduct risk assessments and develop mitigation strategies to minimize operational...


  • Montreal, Quebec, Canada KPMG Canada Full time

    About the RoleWe are seeking a highly skilled Operational Risk Management Specialist to join our team at KPMG Canada. As a key member of our team, you will be responsible for providing expert advice and guidance on operational risk management to our clients.Key ResponsibilitiesConduct risk assessments and develop mitigation strategies to minimize operational...


  • Montreal, Quebec, Canada Co-operators Full time

    About the RoleWe are seeking a highly skilled Operational Controls Analyst to join our Enterprise Risk Management team at Co-operators. As an Operational Controls Analyst, you will play a critical role in the implementation of our operational controls program, ensuring that controls are identified, documented, reviewed, and tested.Key ResponsibilitiesSupport...


  • Montreal, Quebec, Canada Co-operators Full time

    About the RoleWe are seeking a highly skilled Operational Controls Analyst to join our Enterprise Risk Management team at Co-operators. As an Operational Controls Analyst, you will play a critical role in the implementation of our operational controls program, ensuring that controls are identified, documented, reviewed, and tested.Key ResponsibilitiesSupport...


  • Montreal, Quebec, Canada Crédit Agricole CIB Full time

    Job DescriptionJob Title: Operational Risk ManagerLocation: New York BranchJob Type: Full-timeJob SummaryWe are seeking an experienced Operational Risk Manager to join our team at Crédit Agricole CIB. The successful candidate will be responsible for managing operational risk across various business lines and support functions, ensuring effective risk...


  • Montreal, Quebec, Canada Crédit Agricole CIB Full time

    Job DescriptionJob Title: Operational Risk ManagerLocation: New York BranchJob Type: Full-timeJob SummaryWe are seeking an experienced Operational Risk Manager to join our team at Crédit Agricole CIB. The successful candidate will be responsible for managing operational risk across various business lines and support functions, ensuring effective risk...


  • Montreal, Quebec, Canada Crédit Agricole SA Full time

    Job SummaryWe are seeking an experienced Operational Risk Management Specialist to join our team at Crédit Agricole SA. The successful candidate will be responsible for managing and mitigating operational risks across various business lines, ensuring compliance with regulatory requirements and internal policies.Key ResponsibilitiesDevelop and implement...


  • Montreal, Quebec, Canada Crédit Agricole SA Full time

    Job SummaryWe are seeking an experienced Operational Risk Management Specialist to join our team at Crédit Agricole SA. The successful candidate will be responsible for managing and mitigating operational risks across various business lines, ensuring compliance with regulatory requirements and internal policies.Key ResponsibilitiesDevelop and implement...


  • Montreal, Quebec, Canada KPMG-Canada Full time

    About the RoleWe are seeking a highly skilled Consultant or Senior Consultant to join our Financial Risk Management team at KPMG Canada. As a key member of our team, you will provide consulting services in non-financial risk management and participate in various projects with financial institutions.Key ResponsibilitiesWork closely with the Risk Management...


  • Montreal, Quebec, Canada KPMG-Canada Full time

    About the RoleWe are seeking a highly skilled Consultant or Senior Consultant to join our Financial Risk Management team at KPMG Canada. As a key member of our team, you will provide consulting services in non-financial risk management and participate in various projects with financial institutions.Key ResponsibilitiesWork closely with the Risk Management...


  • Montreal, Quebec, Canada NBC Full time

    Job SummaryWe are seeking a highly skilled and experienced Director to join our Operational Business Strategies, Resilience, and Risk Management team at National Bank. As a Director of Operational Risk Management, you will play a critical role in identifying, assessing, monitoring, and managing operational risks in the Financial Markets sector.Key...


  • Montreal, Quebec, Canada NBC Full time

    Job SummaryWe are seeking a highly skilled and experienced Director to join our Operational Business Strategies, Resilience, and Risk Management team at National Bank. As a Director of Operational Risk Management, you will play a critical role in identifying, assessing, monitoring, and managing operational risks in the Financial Markets sector.Key...