Operational Risk & Resilience Analyst at ARM Hold Co.

Job Summary

• Responsible for coordinating and monitoring the Group’s operational risk and resilience management activities, including RCSAs, operational risk incidents and loss events, KRIs, business continuity management, and operational risk assessments. The role supports the identification, assessment and mitigation of operational risks, monitors control deficiencies and remediation actions, and provides risk insights and reports to management and governance committees. It also works closely with IT, Information Security, Internal Audit and business units to strengthen operational resilience, fraud risk management, third-party risk oversight, risk awareness and the overall ERM framework.

Job Details

• Coordinate and periodically review Risk and Control Self-Assessments (RCSAs) across business units, ensuring key operational risks and controls are appropriately identified, assessed and documented. 
• Maintain the ARM Group’s operational risk and loss event database, including collection, validation, classification, analysis and reporting of operational incidents, near misses and financial/non-financial losses. 
• Analyse operational loss trends, root causes and recurring control failures, and recommend appropriate preventive and corrective actions. 
• Develop and monitor Key Risk Indicators (KRIs) and other operational risk metrics, escalating material breaches and emerging risks to management. 
• Support the development, implementation and periodic review of the Group’s Business Continuity Management (BCM) framework, Business Continuity Plans and Business Impact Assessments (BIA). 
• Coordinate periodic business continuity and disaster recovery tests, document lessons learned and track remediation of identified gaps. Work with IT and Information Security teams to assess operational resilience dependencies and ensure appropriate recovery arrangements exist for critical systems and processes. Work with Internal Audit and support the development and implementation of fraud risk management, prevention and detection controls, including fraud risk assessments, monitoring of red flags and investigation support where required. 
• Perform operational risk assessments for new products, processes, systems, vendors, partnerships and significant business changes. 
• Monitor operational risk incidents and control deficiencies and ensure agreed management actions are appropriately tracked through to closure. 
• Prepare and present periodic operational risk and resilience reports and dashboards for various Management Risk Committees, senior board committees and other relevant governance forums.
•  Promote operational risk awareness across the business through training, engagement with risk champions and other risk culture initiatives. 
• Support reviews of third-party and outsourcing arrangements from an operational resilience and business continuity perspective. 
• Contribute to the continuous enhancement of the ARM’s ERM Framework, policies, procedures, tools and reporting processes.

Requirements

COMPETENCIES, SKILLS & ABILITIES 

• Strong understanding of Operational Risk Management principles, frameworks and methodologies, including Risk and Control Self-Assessments (RCSA), operational loss event management, Key Risk Indicators (KRIs) and control assessment.
•  Good knowledge of Business Continuity Management (BCM), Business Impact Analysis (BIA), Disaster Recovery (DR) and operational resilience principles. 
• Understanding of fraud risk management, including fraud risk assessments, fraud indicators, preventive and detective controls, incident escalation and investigation support. 
• Strong risk identification, assessment and analytical skills, with the ability to evaluate processes, identify control weaknesses and recommend practical risk mitigation measures. 
• Ability to perform root cause analysis on operational incidents, losses, control failures and near misses and translate findings into actionable remediation plans. 
• Good understanding of internal controls, process risk and governance frameworks within financial services. 
• Strong data analysis and reporting skills, including the ability to analyze risk and incident data, Competency and Skills Requirements identify trends and prepare meaningful risk dashboards and management reports. 
• Proficiency in Microsoft Excel, PowerPoint, Word and other Microsoft Office applications. 
• Familiarity with GRC platforms, data visualization tools or basic data analytics tools would be an advantage.
•  Strong stakeholder management and interpersonal skills, with the confidence to engage and appropriately challenge business units on risk and control matters. 
• Good attention to detail, sound judgement and the ability to manage multiple risk activities and deadlines simultaneously. 
• Strong problem-solving and critical-thinking skills, with a proactive approach to identifying emerging operational risks and control gaps. 
• Ability to work independently while also collaborating effectively with Operations, Technology, Information Security, Compliance, Internal Control, Internal Audit and other business functions. 
• Demonstrated ability to promote risk awareness and a strong risk culture across the organisation. 
• Good understanding of the asset management and broader financial services operating environment, including relevant operational, technology, regulatory and third-party risks. 
• High level of integrity, professionalism and confidentiality, particularly when handling operational incidents, fraud matters and sensitive risk information.

QUALIFICATION & EXPERIENCE 

• Minimum of approximately 3–5 years relevant professional experience in Operational Risk, Enterprise Risk Management, Business Continuity, Internal Control, Internal Audit, Compliance or a related risk function, preferably within Asset Management, Banking or Financial Services.
•  First degree in Finance, Accounting, Economics, Business Administration, Information Systems or another relevant discipline. 
• Relevant professional certifications such as FRM, PRM, CIRM/IRM, ISO 31000 Risk Management, ISO 22301 Business Continuity, CRISC, CISA or related qualifications would be an added advantage. 
• Relevant experience within a professional services firm, financial services institution or regulatory 
• Minimum Qualifications body is desirable.