Anti-Fraud, Resilience & Outsourced Activities Analyst; LoD BSISA

Why apply for this role?

In this high-profile second line of defence role, you will be responsible for supporting the implementation and overseeing the bank’s Anti-Fraud, Operational Resilience and Outsourced Activities Risk Management framework, in line with internal policies and regulatory requirements.

The role focuses on fraud risk oversight, ICT and non-ICT third-party risk, business continuity and operational resilience, ensuring that risks are properly identified, assessed, monitored and mitigated across the bank. You will contribute to the development of risk methodologies, controls and indicators, and actively participate in operational and enterprise risk management exercises.

You will be a key member of the Operational Risk team (3 members) within Banco Santander International SA (Geneva, Switzerland), supporting the continuous enhancement of the bank’s risk appetite, KRIs and control environment. The role offers strong exposure to strategic, transformation and digital initiatives, as well as close collaboration with Santander Group.

You will work closely with 1

LoD business areas, Costs, IT&Cyber, Operations, Compliance, Legal, Internal and External Audit, and Santander Group functions.

This role reports directly to the Chief Operational Risk and Data Protection Officer.

• Acts as a subject matter expert in Anti-Fraud, Operational Resilience and Outsourced Activities risk, providing guidance, challenge and oversight to 1
  
  LoD functions, while maintaining effective and collaborative relationships with key stakeholders.
• Review and oversee compliance with Anti-Fraud, Outsourcing, Third-Party Risk Management and Business Continuity policies and procedures.
• Support the implementation and continuous improvement of the bank’s Anti-Fraud Framework, including fraud risk assessments, monitoring of controls, escalation of incidents and tracking of mitigation actions.
• Provide second line oversight of fraud risk scenarios, emerging fraud typologies, and technology-enabled fraud risks.
• Support Operational Resilience and Business Continuity Management, including:
  • Business Impact Analyses (BIAs)
  • Identification of Important Business Services
  • Resilience strategies and RTOs
  • Scenario testing and annual resilience testing plans
• Ensure the effective deployment, maintenance and continuous improvement of the Business Continuity Plan within the corporate tool (Ark@).
• Oversee Outsourced Activities and Third-Party Risk, including:
  • Review of due diligence, risk assessments and questionnaires
  • Monitoring of contracts, SLAs, certifications and exit strategies
  • Coordination with IT, Procurement and Legal on critical suppliers
• Support the Chief Operational Risk and Data Protection Officer in providing a holistic view of operational, fraud and resilience risks across the bank, including advisory input on new products, services and transformation initiatives.
• Responsible for Operational Risk exercises related to fraud, outsourcing and resilience:
  • Events identification, escalation and reporting
  • RCSA
  • KRIs
  • Scenario analysis
  • Insurance coverage and mitigation follow-up
  • Prepare risk and oversight materials for relevant governance forums (Operational Risk Committee, Risk & Compliance Committee, Outsourcing Committee, etc.).
  • Participate in forums related to incidents, fraud cases, outsourcing reviews and transformation initiatives.
  • Support and monitor internal and external audits related to fraud risk, outsourcing and resilience.
  • Propose, track and challenge mitigation actions related to incidents, control weaknesses or emerging risks.
  • Maintain up-to-date knowledge of industry practices, fraud trends and regulatory developments (FINMA, EBA, DORA, etc.).
  • Participate in control certification exercises (e.g., ISAE 3402), where relevant.

• Strong expertise and understanding of fraud risk, operational risk, resilience and outsourced activities in a banking environment.
• Expertise with banking regulations, particularly:
  • FINMA Circular 2023/1 – Operational risks and resilience
  • FINMA Circular 2018/3 Outsourcing – Banks and insurers
  • DORA
  • EBA Guidelines on Outsourcing and ICT Risk
• Strong stakeholder management skills with business,…