Operational Risk Officer (Operational Resilience​/Business Continuity

Support the Firm's Operational Resilience Framework, the processes that identify, protect against, respond to, and recover from operational disruptions. Assess whether critical business services stay within defined impact tolerances through business continuity planning, disaster recovery, dependency mapping, and scenario testing across technology, data, personnel, and third parties. Operate independently within a Second Line of Defense model, providing structured oversight and credible challenge across Enterprise Risk Management, Technology, Operations, Compliance, and business stakeholders.

Program Execution & Governance

• Execute and enhance the Firm's Business Continuity, Disaster Recovery, and Crisis Management programs, policies, and procedures
• Maintain governance structures, including chairing the Enterprise Resilience Council and related working groups
• Guide business and technology teams on BCPs, DR strategies, and Area Response Plans
• Deliver resilience training and awareness sessions
• Align the program with regulatory guidance (Reg S-P, DORA), standards (ISO 22301, NIST), and internal risk appetite

BIA, Testing & Reporting

• Conduct and maintain Business Impact Analyses to identify critical services and processes
• Map dependencies across technology, personnel, data, facilities, and third parties
• Track control gaps and remediation to closure
• Support board, executive, and regulatory reporting; develop resilience metrics, dashboards, and KRIs
• Support crisis management and incident response oversight
• Assist incident response coordination and post-incident/After-Action Reviews
• Monitor threat intelligence for systemic risks and elevate through governance channels
• Stay on top of emerging events that could impact firm operations

• Bachelor's degree required; graduate degree in a relevant field preferred
• Strong knowledge of Operational Resilience, Business Continuity Management, Disaster Recovery, and Crisis Management
• Working knowledge of regulatory frameworks for asset managers (SEC, DORA, NIST, ISO)
• CBCP, ABCP, CompTIA Security+, or similar risk/resilience certification
• Understanding of operational risk disciplines — risk assessment, taxonomy, issue management, metrics
• Excellent written and verbal communication skills across varied audiences
• Strong team orientation, working across multi-disciplinary groups
• Veterans encouraged to apply — crisis management and contingency planning experience valued