Lead, Operational Risk Assurance at Fosad Consulting

Job Accountabilities

• Facilitate the implementation and updating of the Group Enterprise Risk Management and Operational Risk Management Frameworks and Programmes.
• As a member of the operational risk management team, be the source of reference to business units in facilitating and promoting the understanding of operational risk and governance matters.
• Communicate with Business and Support functions to implement sound operational risk management framework.
• Facilitate in the risk assessments and reviews of new market entrance, mergers, acquisitions, strategic project etc. as directed by the senior management with close engagement with the risk owners.
• Support the risk owners and champions in conducting Risk Assessments (RA) of business and support units and for projects, changes or initiatives.
• Support the risk owners and champions to ensure that Risk and Control Self-Assessment (RCSA) reviews are appropriately and timely completed by the business and support units.
• Perform process mapping exercise for key operational processes to support RCSA and control monitoring.
• Roll out of the RCSA process across the organization and expand the risk identification and monitoring program
• Validate and challenge the risk identification and assessment of inherent and residual risks arising from its end-to-end processes.
• Assess the control environment, control design, control execution and control testing.
• Ensure diligent execution of the Group Risk Assurance Plan by conducting operational risk thematic reviews on a timely manner and issue the reports with risk mitigating action plans and monitor for timely closure of issues by risk owners.
• Review standard operating procedures and process notes to identify procedural risks and recommend compensating controls.
• Facilitate in the development, implementation and execution of operational risk reporting to the senior management.
• Facilitate in the implementation and management of Group’s risk management system.
• Facilitate in promoting effective risk management culture across the Group.
• Perform due diligence of the initial qualifying assessment and risk assessment table completed by the business for new vendors and any other requirements mandated by the 1 Classification - Internal Use Group Enterprise Risk Management Framework, Group Operational Risk Policy, Group Data Governance Policy and Group Information Security Policy.
• Ensure that vendor owners assess vendors' experience and capacity for service provision in industries which are the same or similar to that of the Group.
• Conduct periodic reviews and risk assessments to evaluate the risks posed by existing vendors and their control environments based on each vendor’s risk level, including the criticality and materiality of the vendor arrangements.
• Ensure that name screening and enhanced due diligence required are conducted by Compliance Team on the ultimate beneficiary owners, senior management, and officers of vendors where such vendors and their employees have access to the Group’s critical systems and /or client data or confidential information.
• Ensure that the vendor owners assess the nature of vendors’ direct interaction with Group’s customers including access to customer data and direct connectivity to the Group’s systems and ensure if the risk owners have implemented the required risk mitigating controls.
• Providing and facilitating operational risk training and awareness to staff across the Group.

Experience / Skills Required

• Bachelor’s Degree in Risk Management / Finance / Management Information Systems / Business Administration with strong grasp over statistical tools and techniques.
• Minimum of 10 years’ experience in Banking / Financial Services / Payments Industry / Risk Management.
• Exposure to Banking Operations, Payments, Card Operations, Merchant Acquiring Operations with reasonable experience in process management, MIS and data analysis.
• Good understanding of international standards e.g. International Organization for Standardization ‘ISO’ and Committee of Sponsoring Organizations of the Tredway Commission 'COSO’.
• Should have strong communication, negotiation, presentation and report writing skills.
• Pro-active and self-starter who can work with limited supervision.
• Good understanding of Operational Risk Tools such as RCSA / KRI / Loss Data Management
• Strong interpersonal skills used within a team environment.
• Resource with expert knowledge on spreadsheet who has hands on experience with short cut formulas and macros.
• Strong communication, analytical skills and strong organization skills.
• Able to lead the investigations internally and take ownership of the issue until closure.
• Customer focused and should be able to work under pressure and should have an easy-going attitude and self-motivated.