Operational Risk Officer

**Responsibilities**:
The Head of Data and Technology Risk is looking to hire a Data and Technology Risk Manager that will join the RISQ/OPE organization to help further define the 2nd line of defense processes, policies and tools for SG’s data and technology environments.

Data risk coverage areas include Reference data, transaction processing, data transformation, data sharing, unstructured data, and incident/response. This role is responsible to evaluate overall data risk, maintain an active view, and report on the actual, mitigated, and residual data risk in the organization. This resource will also help further define the Technology Risk 2nd line of defense practices including, but not limited to assessments, life-cycle practices, incident/response, service delivery, and BCP. This is an individual contributor role.

Day to day responsibilities include but not limited to:

- Partner with the Technology, Digital Transformation, and Innovation teams to drive innovation projects for RISQ OPE.
- Partner with Chief Data Officer(s) and IT Control Officer(s) to establish data quality standards, revise policies, and develop KRIs for measuring and monitoring data risk
- Assess the accuracy, completeness, and sufficiency of the processes, risks and controls supporting SG’s reference data, transactions collection, models, data dictionaries, metadata, data warehouses and data lakes, big data, cloud computing environments, technology architecture, incident/response practices, security practices, and BCP
- Identify and define threats and risks to SG’s data and IP, and develop risk /controls register for assessing data risk and technology risk
- Perform effective challenge of all critical and highly sensitive data related processes & controls (i.e., data loss prevention), business continuity, and data related compliance activities
- Recommend enhancements to data & technology architectures, processes, and controls to improve data and technology risk management capabilities for high-risk processes, regulatory reporting, and risk oversight
- Develop and roll-out tools for the aggregation and surveillance of data risk & technology risk
- Identify legal, regulatory, and contractual requirements, and organizational policies and standards related to data management systems to determine their potential impact on the business objectives.
- Expand operational risk processes, data collection and issues management tools to track and report data related operational risks and issues
- Participate in and review data breaches and technology incident/response escalation processes
- Develop data risk scenarios for stress testing and capital planning activities
- Lead or support selected data quality remediation efforts relating to critical data elements through engagement with functional resources across relevant areas

**Profile required**:
**COMPETENCIES**

Required:

- Understanding of financial services specifically within risk and regulatory domains
- Experience in assessing design and operating effectiveness of technology controls
- Data architectures including reference/master data, transactions/messaging, and unstructured content
- Operational risk framework components including loss data collection, RCSA, process/risk/controls
- Experience leveraging IT risk frameworks such as: COBIT5, COSO, ISO27001, NIST and/or data management frameworks i.e., DCAM/CMM-DMM
- Expertise in financial regulations (BCBS 239, SR 11-7, Volcker Rule)
- Hands-on experience with GRC tools (i.e., Archer)
- Ability to analyze root causes of data issues and documenting remediation
- Strong leadership skills with ability to lead by influence
- Diligence and persistence in the face of organizational crosswinds
- Strong technology experience in implementation of data architecture and building data quality controls

**TECHNICAL SKILLS**
- Data analytics, big data analytics, reporting and dashboarding
- System development and design experience
- Archer experience a plus
- Advanced Python skills (PCAP - Certified Associate in Python Programming preferred)
- Familiarity data management tools: SAS, Collibra, Informatica, Hadoop, relational databases etc. would be desirable.
- Familiarity with risk technology and assessment tools
- Proficient in Excel, Word, Access, PowerPoint, Outlook, SharePoint
- Strong written and verbal communication

**PRIOR WORK EXPERIENCE**

Required:

- Strong background in data analytics, big data analytics, reporting and dashboarding
- Strong background in data control evaluation, data life-cycle management, and database technology
- Experience in software development of transactional and analysis/reporting
- IT Risk management or governance certifications (CGEIT, CRISC, CISA)
- Previous work within Risk and/or Finance

Desirable:

- Experience leading data quality and controls for an FBO
- **Certifications Desired**:

- IT Risk management or governance certifications (CGEIT, CRISC, CISA)

**Why join us**:
**What we do different