Director, Operational Risk

**Why DUCA?** We’re a vibrant, exciting credit union that lives its "profits with a purpose" philosophy in every financial transaction, product, interest rate, and community initiative we offer. Founded in 1954, DUCA has grown from a single branch credit union in Toronto to 19 branches across Southern Ontario with over 85,000 Members we are proud to serve. We exist to help People, Businesses and Communities **Do More, Be More, and Achieve More**. - Positive, un-big bank like service experience delivered through Member-facing staff in branch, on the phone (Member-Connect) and via our Mobile mortgage specialists, Wealth Management advisors and Commercial and Business Banking Account Managers. - Competitive rates. - Personalized financial solutions, guidance, and service with the lowest possible fees for both Personal and Business Members. - Profit sharing among Members. - Multiple ways to bank—online, mobile app, phone/full-service Member Connect Contact Centre, and, of course, in-branch—DUCA is accessible 24/7 A career with one of Canada’s fastest growing credit unions means you’ll find endless opportunities to make a difference with your unique abilities and perspectives. **Our people live their purpose while helping others Do more, Be more and Achieve more with their money and their lives.** At DUCA, you’ll be part of a vibrant and collaborative team where you’ll be supported to excel and make an impact, no matter what role you play. **Director, Operational Risk** **DUCA is looking for Director, Operational Risk to join our growing team** **Job Purpose & Summary** The Director, Operational Risk will provide operational risk leadership and management oversight across DUCA businesses and operations. The Director is responsible for developing and maintaining operational risk identification, assessment, and mitigation strategies to support DUCA’s broader enterprise-wide risk management program as well as for increasing operational risk awareness across DUCA. The position will provide oversight on identifying, evaluating, and executing non-credit risk activities which may include operational risk, third-party and vendor risk, business resilience planning, recovery planning, resolution planning, business continuity planning, IT risk oversight and other areas of risk management. This position will use exceptional communication and influencing skills to elicit engagement and support from functions across DUCA while fostering positive relationships with all business lines. The Director, Operational Risk also supports the CRO with in-depth understanding and competency in managing operational risk, interpretation of operational risk regulations and incorporation of the regulatory requirements in DUCA’s policies and practices as well as in preparation of Board and management committee presentations. **Key Accountabilities & Duties** - Design, implement and maintain an Operational Risk Management Framework, including related policies, procedures and tools such as Risk & Control Self Assessments, Operational Risk Events, Key Risk Indicators, Operational Loss Data Collection & Analysis etc. Ensure that the framework incorporates the legislative and regulatory requirements/expectations and is in line with industry standards. - Develop and implement Third-Party and Vendor Risk Management policies and procedures and provide oversight on the onboarding process (including legal reviews and adequacy of privacy, data security, counterparty, shared infrastructure, etc. risk assessments), ongoing monitoring and annual reviews of critical vendors, and maintain DUCA’s Vendor Risk Management System including software support (e.g. Venminder). - Provide oversight of DUCA’s IT Risk Management Framework. Monitor, measure and assess key risk exposures and IT risk management activities. Oversee the assessment of IT risks arising from material initiatives i.e., new products, processes and material changes. Assist all areas of DUCA in ensuring implementation and appropriateness of IT risk management strategies are continuously reviewed and improved. - Develop, implement and maintain the Business Continuity Management program and provide guidance to DUCA’s business units and support functions in conducting business impact analysis, developing and testing business continuity plans, provide support to IT in the development of disaster recovery plan and manage the call tree testing process and system. - Lead the development and update of the Business Resilience Plan, Recovery Plan and Resolution Plan by collaborating with key internal stakeholders and engage with senior leadership and board committees to seek approvals for the plans. Monitor and report on the quantitative and qualitative metrics and ensure that the plans are kept updated and submitted to the regulators per their timelines. - Provide advisory and oversight services on all levels of non-credit enterprise risks for DUCA. - Continuously review operational risks across t