Senior Operational Risk Analyst

Overview

Connecting clients to markets – and talent to opportunity.

With 5,400+ employees and over 80,000 institutional, commercial, and payments clients, we operate from more than 80 offices spread across six continents. As a Fortune 100, Nasdaq-listed provider, we connect clients to the global markets – focusing on innovation, human connection, and providing world-class products and services to all types of investors.

Whether you want to forge a career connecting our retail clients to potential trading opportunities, or ingrain yourself in the world of institutional investing, StoneX Group is made up of four business segments that offer endless potential for progression and growth.

Business Segment Overview:
Corporate:
Engage in a deep variety of business-critical activities that keep our company running efficiently. From strategic marketing and financial management to human resources and operational oversight, you’ll have the opportunity to optimize processes and implement game-changing policies.

Position purpose:
StoneX Group Inc. is seeking an experienced Senior Operational Risk Analyst to lead the program for all North America legal entities out of our Chicago office. Reporting to the Operational Risk Manager.

The Senior Operational Risk Analyst is responsible for supporting the execution and ongoing enhancement of the organization's Operational Risk Management framework. The role will have primary responsibilities across Risk and Control Self-Assessments (RCSAs), Incident Management, control testing, independent review and challenge, and operational risk governance and reporting.

The Senior Operational Risk Analyst will partner with business and functional stakeholders to identify and assess operational risks, evaluate the design and effectiveness of controls, analyze operational risk incidents, challenge risk assessments and remediation activities, and provide management with timely and meaningful risk information.

The role requires strong analytical skills, sound risk judgment, attention to detail, and the ability to translate risk information into actionable insights for business leaders, Risk Management, and governance committees.

Responsibilities

Primary duties will include:

Risk and Control Self-Assessments (RCSA)
Coordinate and execute RCSA activities across assigned businesses and functions in accordance with the company's Operational Risk framework and methodology.

Partner with business stakeholders to identify and assess key processes, operational risks, and controls.

Facilitate RCSA workshops and risk discussions with business and functional stakeholders.

Evaluate inherent risk, control effectiveness, residual risk, and alignment with established risk appetite and assessment criteria.

Review the completeness and quality of risk and control documentation and supporting evidence.

Provide independent review and challenge of business risk assessments, control evaluations, and residual risk conclusions.

Identify inconsistencies, emerging risks, control weaknesses, and opportunities to strengthen the risk and control environment.

Monitor RCSA remediation activities and ensure actions are appropriately documented and tracked through completion.

Support ongoing enhancements to RCSA methodology, guidance, tools, and reporting.

Operational Risk Incident Management Support the identification, assessment, documentation, escalation, and reporting of operational risk incidents and losses.

Partner with business owners to ensure incidents are recorded accurately, completely, and in a timely manner.

Review incident classifications, risk taxonomy mapping, financial and non-financial impacts, root causes, control failures, and remediation actions.

Facilitate or challenge root cause analysis for significant or recurring incidents.

Assess whether incidents indicate broader control weaknesses, emerging risks, or potential systemic issues.

Identify trends and recurring themes across incidents and provide recommendations for risk mitigation or enhanced controls.

Monitor incident remediation activities through completion and challenge whether actions sufficiently address identified root causes.

Support escalation of material incidents in accordance with established governance and reporting requirements.

Assess whether incidents should trigger reassessment of related RCSA risks, controls, or other elements of the Operational Risk framework.

Control Testing & Assurance Plan, coordinate, and execute risk-based control testing in accordance with…