Associate Principal, Operational Risk Management and Controls

To be considered for this position, applications and resumes are accepted only through our careers site by directly applying to the posted job. We do not accept unsolicited resumes or sales solicitations from staffing agencies. Any OCC employee wishing to submit a referral must do so through their Workday account. Any resume submitted outside of an active job posting will not be considered for employment.

What You'll Do:

This role will provide critical support to the Director of Operational Risk to evaluate IT and Security risks by assisting with risk assessments and applying aspects of the risk management framework across the process, risk, and control universe. Additionally, this role will help with the risk assessment program activities, coordinate with other functions (e.g. IT, Security, TPRM, Legal, Compliance, and Internal Audit) and facilitate appropriate ORM governance to ensure alignment to OCC strategy and short-term objectives.

The Operational Risk Management (ORM) department identifies, measures, monitors, and reports risks and exposures across the organization through the Risk Management Framework, and specifically through several risk programs, including but not limited to:
Enterprise Risk Assessments (ERA) , Risk Event Analysis, Scenario Analysis, Key Risk Indicators, and Risk Reporting. The ORM team is a dedicated group of professionals focused on developing and executing second line of defense oversight responsibilities for OCC.

Primary Duties and Responsibilities:

To perform this job successfully, an individual must be able to perform each primary duty satisfactorily.

• Collaborate with IT, Security, TPRM, Legal, Compliance, and Internal Audit to ensure that ORM contributes to strengthening the overall effective management of IT and Security risk across the organization.
• Lead the OCC’s risk identification and assessment process (Risk Intake) for IT, Security and business risks, and verify the consistency and reliability of the associated frameworks and systems.
• Drive adherence to methodologies, guidance, and standards applicable to risk identification and assessment frameworks.
• Maintain risk inventories, taxonomies, and other elements supporting IT & Security risk management and compliance activities
• Lead and execute the IT and Security risk assessment process, while aligning to the risk and control universe, and regulatory requirements and expectations.
• Ensure issues are properly reported to business areas and remediated appropriately to reduce outstanding risk or performance breakdowns
• Generate reports of Archer data for various stakeholders, including regulators.
• Help automate IT & Security risk oversight.
• Communicate results of risk assessments to governance committees, business owners, and various levels of leadership.
• Collaborate on the enhancement and maintenance of ORM program methodologies, policies, procedures, and job aides, including the development of new program activities.
• Track and update ORM team internal findings, external exam issues, and business area self-identified issues resulting from Enterprise Risk Assessment.

• [Required] Advanced understanding of IT risk, Security risk, and intermediate understanding of Operational risk
• [Required] Ability to act as a trusted advisor and provide effective challenge
• [Required] Creative, independent thinker, with a willingness to develop and drive new ideas
• [Required] Excellent written, verbal and presentation skills
• [Required] Must be team-oriented and be able to collaborate effectively in department and cross-departmental efforts
• [Required] Ability to work under pressure and with tight deadlines
• [Preferred] Familiarity with Financial Market Utilities; securities and derivatives markets
• [Preferred] Ability to work in a highly regulated environment, including with the SEC,…