Operational Risk Advisor

Responsibilities

• Assess organizational, process, system, vendor, and initiative‑related changes for impacts to SOC 1 and SOX control design and operating effectiveness
• Serve as a second‑line operational risk advisor to business, IT, and project teams, providing guidance on control implications of proposed and approved changes
• Lead formal change risk and control impact assessments; document required control updates, new controls, mitigating actions, or compensating controls
• Coordinate updates to control narratives, Risk & Control Matrices (RACMs), ownership assignments, and evidence expectations resulting from approved changes
• Partner with control owners to ensure control updates are practical, sustainable, and aligned with risk severity and audit expectations
• Ensure change‑related risks, decisions, and approvals are captured, tracked, and reported through established risk and governance forums
• Identify and escalation potential control degradation, design gaps, or operating effectiveness concerns arising from changes
• Support audit readiness by maintaining clear documentation, traceability, and rationale for control decisions associated with change activity
• Collaborate with Technology, Controls, and Audit partners to ensure consistent application of change risk standards and methodologies
• Contribute to reporting and dashboards related to change volume, control impact themes, and residual risk trends

• High School Diploma or GED required
• Bachelor’s degree in Accounting, Business, Risk Management, or a related field
• Certifications preferred (not required): CIA, CPA, CISA, CRISC, or similar risk credentials
• 4+ years of experience in operational risk, controls, audit, compliance, or governance roles
• Hands‑on experience supporting SOC 1 and/or SOX control environments
• Demonstrated experience assessing change impacts to controls, processes, or systems
• Strong documentation skills, including RACMs, control narratives, and risk assessments
• Ability to partner effectively with project teams, business leaders, and technology stakeholders
• Excellent written and verbal communication skills, with the ability to influence without authority.

Demonstrates expertise in operational risk management, control assessments, and compliance with SOC 1 and SOX standards. Proficient in documentation and collaboration with cross‑functional teams to ensure effective risk governance and audit readiness.

• Operational Risk Management
• SOC 1 Control Environment
• SOX Compliance
• Risk Assessment Documentation
• Change Impact Assessment

• Operational Risk
• Control Assessment
• Audit Compliance
• Risk & Control Matrices
• Change Risk Standards
• Control Design
• Control Effectiveness
• Documentation Skills
• Change Management
• Risk Governance

• Effective Communication
• Influencing Without Authority
• Collaboration
• Partnership with Stakeholders
• Problem Solving

• CIA
• CPA
• CISA
• CRISC

• Risk Management
• Compliance
• Audit Readiness
• Control Narratives
• Change Management